Your data stays yours

Your organisation retains its rights in its data, scripts, configurations and outputs. Dyntora ApS processes Customer Data to provide, secure, maintain and support the agreed service and follow your documented instructions. We do not sell Customer Data, use it for advertising, train general-purpose AI models on it or reuse it for unrelated product development.

Names, work email addresses, identifiers and user-linked activity are personal data even when used to administer infrastructure. Your organisation determines the purposes of that processing; the Data Processing Agreement describes our role as processor. Dyntora separately handles its own contract and billing administration.

Hosting and suppliers

AZExecute uses Microsoft Azure for infrastructure, with service hosting and backups in Denmark and Sweden. Tenants share infrastructure and are logically separated by tenant-scoped data access and permission checks; a standard subscription does not include a dedicated database.

Stripe is used for payments, not to host your automation data. Payment processing follows the applicable Stripe terms. Service hosting countries do not by themselves describe every provider support location or onward processing arrangement. The applicable DPA and supplier terms govern those arrangements.

Agreements and acceptance

An authorised tenant administrator accepts the Subscription Terms and Data Processing Agreement on behalf of your organisation. The saved receipt includes the document version, exact text, organisation details, accepting administrator and time. Find the status and downloadable copies under License → Accepted agreements.

New tenants must accept before ordinary use. Existing tenants have 30 calendar days from publication of a required version. After the displayed deadline, ordinary application and API access and new interactive operations are restricted until acceptance. Already running work and independently scheduled background automation may continue. This is not an emergency stop for your infrastructure. Agreement review, billing, cancellation and data-return channels remain available.

Once the current version is accepted, no further acceptance is needed for that version. Reading a public document or continuing to use the service does not replace the recorded acceptance.

Deletion, backups and recovery

Use the authorised tenant controls to export or delete data, or contact info@azexecute.com for help with data return or deletion instructions. Copies exported to your own storage are controlled by your organisation.

Tenant deletion disables access immediately. Permanent cleanup is scheduled after the recovery period shown in the application, normally seven days, and runs in the background. A deletion request is not a confirmation that physical cleanup has already finished.

Residual service backups expire no later than 90 calendar days after active-data deletion and may expire sooner. Backup recovery is a full restore, not selective editing of individual records inside a backup. Recovery copies are not intended for ordinary use. A full restore does not revoke an earlier valid deletion instruction; affected data must not be reopened for ordinary use contrary to that instruction. Recovery may therefore require additional checks before service access is restored.

Backup retention is not a promise of a particular recovery time or recovery point. The standard subscription has no guaranteed uptime percentage or service credits. Any separate SLA must be expressly agreed.

Report a security concern

Contact info@azexecute.com with the subject “AZExecute security concern”. Include your organisation or tenant identifier, a safe contact address, when you noticed the issue and a brief description. Do not send passwords, access tokens, private keys or unnecessary personal data. We can arrange an appropriate way to exchange sensitive evidence.

Please do not access another customer's data or disrupt the service to demonstrate an issue. If you encounter data that is not yours, stop accessing it and report the location without copying more data than necessary.

If a personal data breach affects your organisation

Dyntora will notify the affected customer's contact without undue delay after becoming aware of a personal data breach involving data processed on its behalf. We do not wait for the investigation to finish. Initial information may be incomplete; further information follows as it becomes available.

The notification describes the known nature and scope, affected data and people where known, likely consequences, containment and remediation, a follow-up contact and any recommended customer action. Relevant evidence is protected, affected access is contained and recovery is checked before reopening.

Your organisation decides whether notifications to authorities or individuals are required for the processing for which it is controller. We assist with the available information. A controller's possible 72-hour authority-notification deadline is not a waiting period for our notification to you. Our own independent legal duties still apply.

Keep your administrator contact details current. Tell us at info@azexecute.com if a different person should receive privacy or security communications. The info@azexecute.com mailbox is monitored by two persons. No round-the-clock support or fixed response time is included in the standard subscription; this does not reduce statutory breach-notification obligations.