Last updated: November 13, 2026

This Privacy Policy explains how the Dynamo Project ("Dynamo", "we", "us" or "our") collects, uses, shares and protects personal information when you visit dynamo.zone and its subdomains, request access to the Dynamo preview, or use the hosted Dynamo service, its console, APIs and SDKs (together, the "Service"). Your use of the Service is also governed by our Terms of Service.

1. Information we collect

Information you give us

• Access requests: your name, work email, company or project, website, and your answers about what you want to build.
• Account and support: your contact details, the messages you send us, and your feedback.

Information created when you use the Service

• Service records: budgets, streams, spending caps, metering records, test payment records, signed receipts and evidence, and the settings you choose. These records carry identifiers, units and amounts. Our logs, alerts and reports do not contain the content of your agents' requests and responses.
• Identifiers you send: stream and budget IDs, request references you choose, payee addresses and any end-user references you pass in. Please do not put personal information in request references.
• Credentials: the access tokens and keys used to operate your instance.
• Technical data: IP addresses, request times, device and browser information and similar information in server logs, used for security, rate limiting, troubleshooting and improving the Service.

Information your AI agents, software or other automated systems send to the Service using your credentials is treated as information you give us.

Information from third parties and public sources

• Payment processor: in the preview, card payments run in Stripe's test mode. We receive payment references from Stripe, never card numbers.
• Blockchain networks: stablecoin payments in the preview use the Avalanche Fuji test network. We read public blockchain data, such as wallet addresses, transactions and amounts, which is public by design.
• Screening and security sources: we may check wallet addresses and access requests against sanctions lists and other sources used to prevent fraud and abuse.

We do not knowingly collect sensitive personal information, and we do not use advertising cookies.

2. How we use information

We use personal information to:

1. review access requests and provide, operate and maintain the Service;
2. create and secure your instance and account, and authenticate you;
3. send you service messages, such as your access details, alerts you set up, security notices and changes to our terms;
4. send you news about Dynamo, such as product updates and launches, which you can opt out of at any time using the link in the message or by emailing privacy@dynamo.zone;
5. respond to your questions and provide support;
6. understand how the Service is used, develop new features and improve it, including from your feedback;
7. with your consent, publish your testimonial or case study;
8. detect, prevent, investigate and respond to fraud, abuse, security incidents, sanctions risks and violations of our Terms; and
9. comply with legal obligations, enforce our Terms, and establish, exercise or defend legal claims.

Aggregated and de-identified data. We may turn personal information into aggregated or de-identified data that no longer identifies you or any person, and use and share it for any purpose, including research, analytics and publishing statistics about the Service. We will not try to re-identify it.

3. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only:

1. with service providers who process it for us under contract, including the providers in the table below;
2. with professional advisers, such as lawyers, auditors, accountants and insurers, as needed for their services to us;
3. with the parties to your transactions, to the extent needed for the Service to work: for example, a payee or payer you deal with through the Service may see the stream, budget, amount and reference details of that transaction;
4. with our affiliates, including the company that will operate Dynamo once it is formed, for the purposes in this policy;
5. when the law requires it, or to respond to lawful requests from public authorities, enforce our Terms, or protect the rights, property or safety of Dynamo, our users or others;
6. in a business transfer, such as a financing, reorganization, merger, acquisition, bankruptcy or sale of assets, including during negotiations; and
7. with your consent or at your direction.

Provider	Purpose	Location
Railway	Hosting the Service	EU (EU West region)
Google Workspace	Email	United States and EU
Tally	The access-request form	EU
Stripe	Card payments (test mode in the preview)	United States and EU
Blockchain network providers	Reading and sending test-network transactions	Varies

4. Your end users' information

If you send us personal information about your own end users or other people, you are responsible for giving them any notice and obtaining any consent the law requires, and we process that information on your behalf to provide the Service to you. Requests from your end users about their information should go to you; we will help you respond where the law requires.

5. How long we keep information

We keep personal information only as long as needed for the purposes above:

• Access requests: up to 24 months after the request, unless you become a user.
• Account and service records: for as long as your account is active. After your access ends, you may request an export for 14 days; we then delete your records within 30 days.
• Server logs: up to 90 days.
• Backups: deleted data may remain in backups for up to 30 days.
• Longer when needed: we may keep information longer where the law requires it, or where we need it to prevent fraud, resolve disputes, establish or defend legal claims, or enforce our Terms.
• Aggregated or de-identified data may be kept without limit.
• Public blockchain records cannot be changed or deleted by us or anyone else.

6. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, keys encrypted at rest, role-based access and logging that excludes request content. No system is completely secure, and we cannot guarantee the security of information or of its transmission over the internet. You are responsible for keeping your credentials secure. If we suspect a security breach, we may suspend access to the Service while we investigate. Report security issues to security@dynamo.zone.

7. Your choices and rights

You may ask us to access, correct, delete or export your personal information, or to stop using it for a particular purpose, by emailing privacy@dynamo.zone. We may need to verify your identity, and an agent's authority, before acting on a request. Some rights have legal limits: for example, we may keep information we must retain by law or need for legal claims, and we cannot delete public blockchain records. We will not discriminate against you for exercising your rights.

United States residents. Depending on your state (for example, California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law), you may have the right to know what personal information we collect and how we use and disclose it, to access, correct and delete it, to receive a portable copy, and to opt out of sale, targeted advertising and certain profiling. We do not sell personal information or use it for targeted advertising. You may use an authorized agent to make a request on your behalf. If we deny your request, you may appeal by replying to our response.

European Economic Area, United Kingdom and Switzerland. If these laws apply to you, Dynamo is the controller of your personal information, except for end-user information we process on your behalf under section 4. We process it on these legal bases: to perform our contract with you (providing the Service); our legitimate interests (security, fraud and sanctions screening, improving the Service, news about Dynamo, and establishing or defending legal claims); legal obligations; and your consent, where we ask for it. You have the rights of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time. You may also complain to your local data protection authority. When we transfer personal information outside your region, we rely on appropriate safeguards, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.

8. Cookies

We use only cookies that are strictly necessary for the Service to work, such as session and security cookies for signed-in pages like the console. We do not use advertising or tracking cookies, and we do not track you across other websites, so we do not respond to Do Not Track signals. You can block cookies in your browser, but signed-in pages may not work without them.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact privacy@dynamo.zone and we will delete it.

10. International users

We are based in the United States and the European Union, and our service providers may process information in other countries. Those countries may have data protection laws different from yours. We take the steps described in this policy to protect your information wherever it is processed.

11. Changes to this policy

We may update this Privacy Policy at any time. The "Last updated" date shows the current version, and changes take effect when posted. If we make material changes, we will also notify you by email or through the Service. Continuing to use the Service after a change takes effect means you accept the updated policy.

12. Contact us

Privacy questions and requests: privacy@dynamo.zone

Legal notices: legal@dynamo.zone