Privacy Policy & Terms

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Fill out contact forms or request consultations
• Subscribe to our newsletter or communications
• Use our services or platform
• Create an account on our platform
• Communicate with us via email, phone, or chat

This information may include:

• Name and contact information (email, phone number, company name)
• Professional information (job title, company size, industry)
• Project requirements and technical specifications
• Payment and billing information (processed securely through third-party providers)

1.2 Automatically Collected Information

We automatically collect certain information when you visit our website:

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website and search terms
• Operating system and screen resolution

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI and cloud services
• Communication: To respond to inquiries, send updates, and provide customer support
• Marketing: To send newsletters, product updates, and promotional materials (with consent)
• Analytics: To understand how our website and services are used and improve user experience
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with applicable laws and regulations

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist in providing our services (hosting, analytics, payment processing)
• Business Partners: With your consent, for collaborative projects or integrations
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure cloud infrastructure (AWS, Supabase)
• Employee training on data protection practices

5. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Request transfer of your data to another service
• Opt-out: Unsubscribe from marketing communications at any time
• Object: Object to certain data processing activities

To exercise these rights, contact us at hello@dcens.io

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Retention periods vary based on:

• Active customer accounts: Duration of service plus 2 years
• Marketing communications: Until you unsubscribe
• Billing and transaction records: 7 years (legal requirement)
• Analytics data: Aggregated and anonymized after 26 months

7. International Data Transfers

As a global company, we may transfer your data to countries outside your jurisdiction. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by regulatory authorities
• Adequacy decisions by relevant data protection authorities
• Certifications under recognized frameworks (e.g., Privacy Shield successor programs)

GDPR Compliance

DCenS (Data Centric Solutions) is committed to compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: For marketing communications and optional services
• Contract: To fulfill our contractual obligations to you
• Legitimate Interest: For analytics, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

Data Protection Officer

For data protection inquiries, contact our Data Protection Officer:

Email: dpo@dcens.io

Data Processing Agreements

For enterprise clients, we provide Data Processing Agreements (DPAs) that outline:

• Processing purposes and duration
• Types of personal data and data subjects
• Security measures and breach notification procedures
• Sub-processor management
• Data subject rights assistance

Cross-Border Data Transfers

We comply with requirements for international data transfers using:

• EU Standard Contractual Clauses (SCCs)
• UK International Data Transfer Agreement (IDTA)
• Adequacy decisions where applicable

Data Breach Notification

In the event of a data breach, we will:

• Notify relevant supervisory authorities within 72 hours
• Inform affected individuals without undue delay
• Document the breach and response actions
• Implement remediation measures

API Access and Usage

These terms govern access to DCenS (Data Centric Solutions) APIs and third-party integrations.

1. API License

Subject to these terms, we grant you a limited, non-exclusive, non-transferable license to access our APIs.

2. Usage Restrictions

• Do not exceed rate limits specified in your plan
• Do not attempt to bypass security measures
• Do not use APIs for illegal or unauthorized purposes
• Do not resell API access without written permission
• Do not reverse engineer or create derivative works

3. Third-Party Integrations

Our services integrate with third-party platforms including:

• Google APIs: Gmail, Calendar, Drive (OAuth 2.0 compliant)
• Meta/Facebook APIs: Graph API, Marketing API
• OpenAI: GPT models and embeddings
• Cloud Providers: AWS, Supabase, Vercel

Your use of third-party services is subject to their respective terms of service and privacy policies.

4. Data Access and Permissions

When you authorize our apps to access third-party services:

• We request only necessary permissions (principle of least privilege)
• You can revoke access at any time through the third-party platform
• We use tokens securely and do not store passwords
• We comply with each platform's developer policies

5. API Changes and Deprecation

We reserve the right to:

• Modify or discontinue APIs with 90 days notice
• Introduce versioning for backward compatibility
• Throttle or suspend access for abuse or non-payment