Privacy policy

Last updated November 13, 2026.

Who we are

DICE ("DICE", "we") provides an AI agent and customer portal to businesses. Contact: the address on our contact page (/contact). Address: listed on our contact page (/contact).

Two roles

For our own customers and website visitors (business owners, their staff, people who use our website or live demo), we decide how personal data is used. This policy covers that data.
For the end customers of the businesses that use DICE (people who chat with a business’s assistant), the business decides how the data is used and DICE processes it on the business’s instructions under our data processing agreement. Each business’s own privacy policy applies to that data.

What we collect

Account data: name, email, phone number, password hash, two-factor settings, role and the business you belong to.
Billing data: billing name and address, tax numbers, invoices. Card details are held by the payment provider, never by DICE.
Usage data: sign-ins, actions in the portal, device and browser type, IP address (stored as a one-way hash where we only need it for abuse limits).
Website and demo data: what you enter in our forms, the website address and email you enter in the live demo, calculator inputs if you choose to email or share a result.
Support data: the content of support requests.

Why we use it

To provide the service you signed up for (contract).
To keep the service secure, prevent abuse and keep required records (legitimate interests, legal obligation).
To bill you and meet tax rules (contract, legal obligation).
To send product updates or marketing, only with your consent, which you can withdraw at any time.

Service providers that help us run DICE, listed with their purpose and location in our sub-processor list. We do not sell personal data.

International transfers

Some providers process data outside your country. Where required we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Account data: while your account is active. When an account is closed, its data is deleted on request with a deletion certificate, except what we must keep by law.
Invoices and tax records: as long as tax law requires.
Live demo sandboxes: deleted automatically within three days. The demo record (email, website, time) stays with our sales records until you ask us to delete it.
Backups: encrypted, kept for up to 6 months on a rolling schedule.

Your rights

Depending on where you live (PIPEDA and Quebec Law 25 in Canada, KVKK in Turkey, GDPR in the EU), you can ask to access, correct, export or delete your data, withdraw consent, and object to some uses. Write to the address on our contact page (/contact). You can also complain to your data protection authority.

Security

We use tenant isolation in the database, encryption in transit and for secrets and backups, two-factor authentication for staff and an append-only audit log. See the trust center.

Cookies

See our cookie policy.

Changes

We publish each version of this policy with its date. Material changes are announced in the portal and by email before they apply.