How Dexto handles data

1. Information we process

• Account and profile data: your name, email address, profile image, authentication-provider identifier, account settings, and session information.
• Customer content: prompts, messages, instructions, files, code, generated outputs, memories, workspace data, and other material you submit to or create with the Services.
• Connected-service data: connection details, access tokens, and data a connected service returns when you choose to link or use that service. Do not connect an account unless you are authorized to do so.
• Usage and technical data: feature use, model and provider selections, credit and usage records, IP address, browser or device data, timestamps, request identifiers, and security, diagnostic, and error logs.
• Communications and payment data: messages you send us; waitlist information; and payment, invoice, and transaction identifiers. Our payment providers process payment-card details; we do not receive full card numbers.

2. How we use information

We use information to:

• provide, secure, maintain, and support the Services;
• authenticate users and operate accounts, billing, and credits;
• run requested AI, automation, and connected-service features;
• detect abuse, investigate incidents, and enforce our policies;
• understand and improve the Services using aggregated or de-identified insights;
• communicate about the Services and respond to requests; and
• comply with legal obligations and protect our rights, users, and the public.

We do not use Customer Content to train Dexto models, and we do not authorize third-party model providers to train their models on Customer Content, unless you separately and explicitly opt in.

3. Legal bases

Where data-protection law requires a legal basis, we process personal data to perform our contract with you, for our legitimate interests in operating and securing the Services, with your consent where required, and to comply with legal obligations. You can withdraw consent at any time, without affecting processing before withdrawal.

4. How we share information

We share information only as needed to operate the Services: with cloud, database, model, sandbox, payment, email, and diagnostic providers; with a connected service that you direct us to use; with professional advisers and authorities when required; and in connection with a corporate transaction.

We do not sell personal information. We do not use Customer Content for cross-context behavioral advertising.

5. International transfers

We and our providers may process information in the United States and other countries where we or they operate. Where required, we use appropriate transfer safeguards, such as contractual commitments, for personal-data transfers.

6. Retention and security

We retain information for as long as needed to provide the Services, maintain account and security records, resolve disputes, meet legal obligations, and enforce our agreements. Retention therefore depends on the type of information, whether an account remains active, and applicable legal requirements. We use reasonable technical and organizational measures designed to protect information, but no service is completely secure.

7. Cookies and measurement technologies

We and our service providers may use cookies, local storage, software development kits, pixels, and similar technologies to keep the Services working, prevent fraud, understand traffic and feature use, measure performance, and evaluate the effectiveness of our communications. These technologies may collect technical and usage data described above.

We may use technologies that are necessary to provide and secure the Services. Before enabling non-essential measurement or marketing technologies in a place where consent is required, we will present a choice that lets you grant or decline consent and later change that choice. Browser settings may also let you limit cookies, although essential parts of the Services may not work without them.

8. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about our processing. You may also opt out of non-essential marketing communications. To make a request, email founders@dexto.ai. We may need to verify your request and will respond as required by applicable law.

The beta does not currently provide a self-service account or data-deletion control. Please use the request channel above instead.

9. Changes and contact

We may update this policy as the beta evolves. Material changes will be posted here with a new "Last updated" date. For privacy questions or requests, contact founders@dexto.ai.