Privacy Policy

Last updated: June 16, 2026

This Privacy Policy explains how Dyyno ("we", "us") collects, uses, shares, and protects information when you use our AI chat assistant and reservation booking service at dyyno.xyz (the "Service"). We aim to collect only what we need to run the Service well.

1. Who We Are

Dyyno is operated by an individual sole operator. For any privacy questions or requests, you can reach us at support@dyyno.xyz.

2. Information We Collect

Account data

When you register, we collect your name and email address, and either a password (which we store only as a secure hash — never in plain text) or a Google account identifier if you sign in with Google.

Business profile content

We store the information you enter to configure your chatbot, such as your business name, description, services, prices, menu, hours, and frequently asked questions, plus any files you upload (for example a menu image or PDF).

Conversation data

To power your inbox and conversation history, we store the messages exchanged through your chatbot — both the messages sent by your website visitors (end users) and the replies generated by the assistant — along with any reservation details a visitor provides (such as name, phone number, date, time, and party size).

Payment data

Payments are handled by our payment processor, Paddle. We receive limited billing details (such as your plan, status, and country) but never your full card number.

Technical data

We store your authentication token in your browser's localStorage to keep you signed in, and we use minimal essential cookies/storage required for the Service to work. We may process basic technical information such as IP address and request logs for security and reliability.

3. How We Use Information

  • to create and manage your account and authenticate you;
  • to operate your chatbot, including sending relevant conversation and profile content to our AI provider to generate replies;
  • to store and display your conversation history and reservations;
  • to process subscriptions and send transactional emails;
  • to secure, maintain, troubleshoot, and improve the Service;
  • to comply with legal obligations.

4. Third Parties and Subprocessors

We share data with the following providers only as needed to run the Service:

  • Paddle — our Merchant of Record; processes payments, billing, and taxes.
  • OpenAI — our AI model provider; chat messages and relevant business content are processed by OpenAI to generate the assistant's replies.
  • Brevo — sends transactional email such as verification codes and password resets.
  • Google — provides optional "Sign in with Google" authentication.

The Service is hosted on a virtual private server (VPS). We do not sell your personal data. We may disclose information if required by law or to protect our rights and the safety of others.

5. International Transfers

Because we rely on the providers above, your information may be processed in countries other than your own. Where data is transferred internationally, we rely on the providers' safeguards and applicable legal mechanisms to protect it.

6. Data Retention

We retain account, business, and conversation data for as long as your account is active or as needed to provide the Service. When you delete your account or ask us to delete your data, we will delete or anonymize it within a reasonable period, except where we must retain certain records to comply with legal, tax, or accounting obligations.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update much of your information directly in your account settings, or exercise these rights by emailing support@dyyno.xyz. We will respond within a reasonable timeframe.

If you operate a chatbot, you act as the controller of your end users' conversation data and are responsible for handling their requests; we act as your processor for that data.

8. Security

We take reasonable measures to protect your data, including storing passwords as secure hashes, serving the Service over encrypted HTTPS connections, and limiting access to data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children's Privacy

The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continued use of the Service after changes take effect means you accept the updated policy.

11. Contact

For any privacy questions or requests, contact us at support@dyyno.xyz.