🌐 PL ← Back to Dynomic

Privacy Policy

Last updated: July 2026

1. Data Controller

2. What Data We Collect

Account data (required):

• Email address — used for account management and communication
• First and last name — displayed in your account
• Password — stored as a secure hash (argon2id), never in plain text
• Account creation date and last login date

Device data (required):

• Hardware serial number and public key — used for device pairing
• Firmware version and last connection date

Order data (collected when you place an order):

• Full name and delivery address
• Email address and phone number
• Order amount, status, and timestamps
• Chosen shipping method and parcel locker ID (if applicable)
• Order notes you provide at checkout

Card numbers and payment credentials are entered directly on Stripe's servers and are never transmitted to or stored by us.

Measurement data (optional — only if you enable cloud sync):

• Max horsepower and torque values
• Vehicle weight and DIN correction factor
• Date and time of measurement
• Raw measurement data (XML) — only if you choose to upload it

3. What We Don't Collect

• GPS location or driving routes
• Vehicle identification data
• Device identifiers (IMEI, MAC address)
• Browsing behaviour or analytics
• Card numbers or payment credentials — these are handled exclusively by Stripe

4. How We Use Your Data

• To provide and maintain the Service
• To authenticate you and secure your account
• To send transactional emails (verification, password reset)
• To display your measurement history (if cloud sync is enabled)
• To provide customer support

5. Legal Basis (GDPR)

We process your data based on:

• Contract performance — to provide the Service you registered for
• Legitimate interests — to maintain security and prevent fraud
• Consent — for optional cloud sync of measurement data

6. Data Retention

• Account data: retained while your account is active and for 30 days after deletion
• Measurement data: retained while your account is active; deleted when you delete your account
• Session tokens: expire after 30 days
• Password reset tokens: expire after 1 hour

7. Your Rights

Under GDPR, you have the right to:

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — delete your account and all associated data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — disable cloud sync at any time in account settings

To exercise these rights, contact support@dynomic.pro or use the account deletion feature in your dashboard settings.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including encrypted storage of passwords, TLS encryption in transit, and cryptographic device pairing using Ed25519 signatures.

9. Third-Party Services

• OVH (France) — web hosting and database storage within the EU
• Stripe, Inc. (USA) — payment processing. When you place an order, you are redirected to Stripe Checkout. Stripe collects and processes your card data under their own privacy policy: stripe.com/privacy. Stripe acts as an independent data controller for payment data.
• Google Fonts — font delivery (subject to Google's privacy policy)

10. Cookies

The website uses a session cookie for admin authentication only. The user dashboard uses browser localStorage for authentication tokens — no tracking cookies are used.

11. Children

The Service is not directed at children under 16. We do not knowingly collect data from children.

12. Changes

We may update this Privacy Policy. We'll notify you by email for significant changes. Continued use of the Service constitutes acceptance.

13. Contact

For privacy questions or data requests: support@dynomic.pro