Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account data: If you create an account, we store system identifiers (such as user ID). Your email address is encrypted at rest using AES-256-GCM, with SHA-256 hashes used only for lookups—we do not store it in plaintext. Passwords are stored as bcrypt hashes.
• Sources and table inputs: When you use features that load or import data (for example a page URL, HTML fragment, or API endpoint), we process that input to render tables in your session. You must have the right to use any source you connect. We do not intend to keep full copies of third-party pages or API payloads longer than needed to fulfil the request and operate the service, except where you explicitly save a configuration or we retain minimal logs for security and reliability.
• Communications: We may use your email for account security, password reset, essential service notices, or—if you opt in—product updates. You can withdraw marketing consent at any time.

1.2 Information Collected Automatically

• Usage data: IP address, browser type, pages or endpoints accessed, and timestamps when you use the website or APIs.
• Device information: Operating system and device type where available.

2. How We Use Your Information

Legal Basis (GDPR): We process your data based on:

• Contract: To provide DynTab—including rendering tables from data you point us to, operating accounts, sessions, and documented APIs.
• Legitimate interest: To improve reliability, prevent abuse, detect fraud, and protect the service and our users.
• Consent: For optional emails or non-essential communications; you may withdraw consent at any time.

We use your information to:

• Convert HTML or API responses you supply into structured, interactive table views
• Authenticate sessions and protect account-related endpoints
• Operate, monitor, and improve performance, security, and error handling
• Prevent abuse, unauthorized access, and misuse of the platform
• Comply with law and enforce our terms

3. Data Sharing & Third Parties

We may share limited data with providers that help us run DynTab (for example hosting, networking, CDN, databases, and email delivery).

• Infrastructure: Hosting, compute, networking, CDN, and related operational services.
• Storage: Databases and systems used to store account data, minimal operational logs, and any saved preferences you create.
• We do not rely on social-login providers for the core table experience.

We do not sell your personal information. We do not share your data with advertisers or data brokers.

4. International Data Transfers

Your data may be processed where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

5. Data Retention

• Account data: retained while your account is active or as needed for legal, billing, or security reasons.
• Ephemeral table inputs and derived views are generally not kept as long-term archives; saved settings or exports you create may be retained until you delete them or close your account, subject to backup and legal retention limits.
• Security and access logs are kept only as long as reasonably necessary for operations and abuse prevention. Optional mailing-list data is kept until you unsubscribe or request deletion.

6. Your Rights

6.1 Rights for All Users

• Access your personal data
• Request deletion of your account, associated preferences, or notification subscriptions where applicable
• Update or correct your information

6.2 Additional Rights for EU Users (GDPR)

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate data.
• Right to Erasure: Request deletion of your data ("right to be forgotten").
• Right to Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interest.
• Right to Restrict Processing: Limit how we use your data.
• Right to Withdraw Consent: Withdraw consent at any time.
• Right to Complaint: Lodge a complaint with your local data protection authority.

6.3 Additional Rights for California Residents (CCPA)

• Right to Know: Request what personal information we collect and how it is used.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

7. Cookies & Tracking

We use essential cookies for:

• Authentication (keeping you signed in where accounts are available)
• Security (session protection, CSRF mitigation, and abuse prevention)

We do not use advertising or tracking cookies for profiling. Optional analytics, if enabled, are described in our cookie notice or settings.

8. Security

We use HTTPS in transit, hashed passwords (bcrypt), and encryption at rest for sensitive account fields where applicable. Access is restricted on a need-to-know basis. No online service is perfectly secure; please use strong passwords and protect API keys you control.

9. Children's Privacy

DynTab is not intended for users under 13. We do not knowingly collect personal data from children under 13.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date and, where appropriate, on the platform.

11. Contact Us

To exercise your rights or for privacy questions:

Email: privacy@dyntab.com

We will respond to requests within 30 days (or sooner as required by law).

For EU users: If you believe we have not adequately addressed your concerns, you may lodge a complaint with your local supervisory authority.