Privacy Policy

Introduction

This Privacy Policy describes how Dywan (“Dywan,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the Dywan marketing site and waitlist at dywan.ai (the “Site”). It applies to visitors who browse the Site and to individuals who submit a waitlist application. Please read it carefully. By using the Site or submitting your information, you acknowledge the practices described here.

Information we collect

Waitlist information. When you submit a waitlist application, we collect the personal information you provide: your name, email address, country, phone number, and your response to the “how did you hear about us” question. Providing this information is voluntary; however, it is necessary to register your interest in Dywan.

Analytics data. We use Vercel Analytics and Vercel Speed Insights to understand how visitors interact with the Site. These tools collect aggregate, privacy-friendly metrics such as page views, referral sources, and performance timings. They do not use advertising cookies, build individual user profiles, or track you across unrelated websites.

Server logs. Our hosting infrastructure automatically records standard server logs that may include your IP address, browser type, operating system, the pages you request, and timestamps. These logs are used for security monitoring, debugging, and operating the Site reliably.

How we use your information

We use the information we collect for the following purposes:

• To contact you about Dywan early access, private beta invitations, and related product updates.
• To operate, maintain, and improve the Site and its performance.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information, use it for advertising, or disclose it for purposes beyond those stated above.

Legal bases for processing

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) requires us to identify a legal basis for processing your personal data:

Consent. We process the personal information you submit via the waitlist form on the basis of your freely given, informed consent. You can withdraw this consent at any time by emailing hello@dywan.ai; withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

Legitimate interests. We process server logs and aggregate analytics data on the basis of our legitimate interests in keeping the Site secure, diagnosing technical issues, and understanding general usage patterns. These interests are proportionate and do not override your fundamental rights and freedoms.

How we share your information

We share your information only with service providers acting as data processors on our behalf. These providers are contractually prohibited from using your data for their own independent purposes. The processors we currently use are:

• Resend. Our email delivery provider, used to send waitlist confirmation messages and product updates.
• CRM system. A customer-relationship management platform we use to organise and manage early-access outreach.
• Vercel. Our hosting, content delivery, and analytics platform, which processes server logs and aggregate site metrics.

We do not sell, rent, or trade your personal information to any third party. We may disclose information if required by law, regulation, or valid legal process, or to protect the rights, safety, or property of Dywan or others.

International data transfers

Dywan is an international product and collects data from people around the world. The service providers we work with may process or store your personal information in the United States, which may have data-protection laws that differ from those in your country. Where required by applicable law, we rely on appropriate transfer mechanisms — such as the Standard Contractual Clauses approved by the European Commission — to ensure your information receives an adequate level of protection regardless of where it is processed.

Data retention

We retain your waitlist information for as long as necessary to fulfil the purposes described in this Policy — specifically, until you request deletion, until the private beta program concludes and the data is no longer needed for early-access outreach, or until we are otherwise required to delete it by law. Server logs are retained for a limited period sufficient for security and operational purposes and are then deleted or anonymised.

Your rights

Depending on where you live, you may have certain rights regarding your personal information. These include:

• Access — the right to request a copy of the personal information we hold about you.
• Correction — the right to ask us to correct inaccurate or incomplete information.
• Deletion — the right to request erasure of your personal information.
• Objection or restriction — the right to object to, or ask us to restrict, certain processing.
• Data portability — the right to receive your information in a structured, machine-readable format.
• Withdraw consent — the right to withdraw consent at any time without affecting prior lawful processing.
• Unsubscribe — the right to opt out of marketing communications at any time.

EEA and UK residents (GDPR). If you are in the EEA or UK, the rights above are guaranteed under the GDPR or UK GDPR. You also have the right to lodge a complaint with your local supervisory authority if you believe we have processed your data unlawfully.

California residents (CCPA/CPRA). If you are a California resident, the California Consumer Privacy Act and its successor give you the right to know what personal information we collect and how it is used, to delete your information, to correct inaccurate information, and to opt out of the sale or sharing of personal information (we do not sell or share it). We will not discriminate against you for exercising these rights.

To exercise any of these rights, please contact us at hello@dywan.ai. We will respond within the timeframe required by applicable law and will not charge a fee for reasonable requests.

Cookies & analytics

The Site uses a minimal cookie footprint. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics that profile individual users for commercial purposes.

Our analytics — powered by Vercel Analytics and Vercel Speed Insights — operate on aggregate, privacy-preserving data. They help us understand which pages are visited and how fast the Site loads, without identifying you personally or sharing data with advertising networks. Session cookies necessary for the Site to function may be set but are not used for tracking beyond your current visit.

Data security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, disclosure, or destruction. The Site is served over HTTPS, and access to waitlist data is restricted to authorised personnel and our service providers. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security breach that affects your personal information, we will notify you as required by applicable law.

Children's privacy

The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected information from a child under 16, please contact us at hello@dywan.ai and we will promptly delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically. Your continued use of the Site or submission of your information after any change constitutes your acceptance of the updated Policy.