# Privacy policy.

> How Dienox B.V. collects, uses and protects personal data on dienox.com and in the Dienox platform.

Source: https://dienox.com/privacy  
Last updated: 2026-09-24

Last updated 24 September 2026 · Dienox B.V.

Dienox gives the AI tools an organisation already uses the knowledge of that organisation. That makes careful handling of data the core of what we do, not a footnote. This policy explains, in plain language, what personal data we process, why, and what you can ask of us.

## Who we are

Dienox is a service of Dienox B.V., registered in the Netherlands. For the processing described here, we are the controller under the General Data Protection Regulation (GDPR).

**Dienox B.V.**  
Europalaan 400  
3526 KS Utrecht  
The Netherlands  
Email: [privacy@dienox.com](mailto:privacy@dienox.com)

## What this policy covers

This policy covers:

- visits to our website, dienox.com;
- signing up for the Dienox beta;
- accounts on the Dienox platform, and how you use it;
- email and other contact with us.

What an organisation stores in its own knowledge base on Dienox (its documents, decisions and the people named in them) is that organisation’s data. For that content, the organisation is the controller and we process it on its behalf, under our [data processing agreement](https://dienox.com/data-processing-agreement). Questions about that content are best put to the organisation itself; we help it answer them.

## What we collect and why

### When you visit dienox.com

Our servers and our network provider record technical data about each request: your IP address, the page requested, the time, and your browser’s user agent. We use it to deliver the site, to keep it secure and to find faults. Our legal basis is our legitimate interest in a working and secure website. We do not use analytics or advertising trackers, and we do not build profiles of visitors. See our [cookie policy](https://dienox.com/cookies) for the few cookies the site sets.

### When you sign up for the beta

We ask for your name, work email, role (optional), your organisation, its website (optional) and size, the AI tools you use, where you would like Dienox to run, and how you heard about us (optional). We also note the page or campaign that brought you to the form, your browser’s preferred language, and the moment you confirmed you had read this policy. We do not store your IP address with your signup.

We use this to assess whether the beta fits your organisation, to contact you about it and to invite you. Our legal basis is taking steps at your request before a possible agreement, and our legitimate interest in choosing which organisations to admit. If you tick “keep me posted”, we also send you an occasional mail about Dienox, based on your consent, which you can withdraw at any time through the link in each mail or by writing to us.

### When you have an account

We process your name, email address, a securely hashed password, the organisations you belong to and your role in them, and when you last used the platform. When you connect an AI tool, we keep the access tokens for that connection and a record of the calls it makes: which tool was used, when, and for which organisation. When the platform runs an AI model itself, we record its use and its cost. Every change to a knowledge base is kept with who made it and when, so it can be traced and undone.

We need this to provide the platform, to keep each organisation’s knowledge apart from every other, to secure accounts, and to bill for use once billing starts. Our legal basis is the performance of our agreement with you or your organisation, and our legitimate interest in the security and integrity of the platform.

### When you contact us

When you write to us, we keep your message and our reply for as long as needed to help you and to follow up on it. Our legal basis is our legitimate interest in answering you, or taking steps at your request.

We do not sell personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing.

## Your own AI tools

Dienox works behind the AI tools you choose, such as Claude, ChatGPT or Copilot. When you connect one, what it reads from your knowledge base is sent to that tool at your request, and handled under its provider’s own terms and privacy policy. That provider is not our subprocessor: you or your organisation chose it and can disconnect it at any time. We use your knowledge base content only to provide the platform to you, and we do not use it to train AI models.

## Who we share it with

We share personal data only with companies that help us run Dienox, under agreements that bind them to our instructions and to appropriate security, and only as far as their task requires:

| Company | What it does for us | Where |
| --- | --- | --- |
| DigitalOcean, LLC | Hosting of the platform, its database and its backups | Amsterdam, the Netherlands |
| Cloudflare, Inc. | Domain name service, encryption in transit and protection against attacks for dienox.com | Global network, EU and US |
| Laravel Holdings, Inc. (Laravel Forge) | Server management and deployment | United States |
| Resend, Inc. | Sending the platform’s emails: invitations, password resets, confirmations | United States |
| Anthropic, PBC | The AI model behind agents, jobs and imports that run on the platform itself | United States |
| Google LLC (Google Workspace) | Our own email on dienox.com, when you write to us | EU and United States |

We disclose personal data to authorities only when the law requires us to. If Dienox is ever part of a merger or acquisition, personal data may pass to the new owner under the same protections, and we will tell you beforehand.

## Outside the EU

The platform and its database are hosted in the Netherlands. Some of the companies above are based in the United States. Where personal data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses with additional safeguards where needed.

## How long we keep it

- **Server logs**: at most 30 days, unless needed to investigate a security incident.
- **Beta signups**: until 24 months after our last contact, or until you ask us to delete them. If you become a customer, what is needed moves to your account.
- **Accounts**: for as long as the account exists. After an account or organisation is closed, we delete its data within 90 days, except for what we must keep by law.
- **Backups**: rotate out automatically within 30 days.
- **Financial records**: seven years, as Dutch tax law requires.

## How we protect it

Every connection is encrypted. Passwords are stored only as secure hashes. Each organisation’s knowledge is kept apart, and a connection belongs to exactly one organisation. Access for AI tools is short-lived and can be revoked at any time. Staff access to our admin tools requires a fresh password confirmation. Read more on our [security page](https://dienox.com/security).

## Your rights

Under the GDPR, you have the right to:

- access the personal data we hold about you;
- have it corrected or completed;
- have it erased;
- restrict its processing;
- receive it in a portable format;
- object to processing based on our legitimate interest;
- withdraw your consent at any time, without affecting what came before.

Write to [privacy@dienox.com](mailto:privacy@dienox.com). We may ask you to confirm your identity, and we answer within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the [Autoriteit Persoonsgegevens](https://autoriteitpersoonsgegevens.nl), though we would appreciate the chance to resolve your concern first.

## Changes

We update this policy when what we do changes. The date at the top says when it last did. If a change matters to you, for example a new purpose or a new kind of recipient, we tell account holders by email before it takes effect.

## Contact

Questions about privacy, or a request about your data:

**Dienox B.V.**  
Europalaan 400  
3526 KS Utrecht  
The Netherlands  
Email: [privacy@dienox.com](mailto:privacy@dienox.com)