Privacy Policy
Last updated: July 18, 2026
The Dynacop service is provided by Forty2 LLC (New Mexico, USA); operations and support in Türkiye are carried out by Argen Bulut ve Yazılım Teknolojileri A.Ş. This policy explains which personal data is processed, why, and how, when you visit dynacop.com and use the Dynacop service. Our technical security model is described separately on the Security page.
Our roles: controller and processor
Dynacop acts as a data controller for account management, billing, service security, and its own business operations. For data we process on our business customers' instruction about their employees, users, and protected systems (e.g., Windows sign-in records), the customer is the data controller and Dynacop is the data processor.
Data we process
We process only the data the service requires:
- Account and person details: name, email address, language preference
- Verification factor details: factor type, enrollment status, creation and last-use time, and the technical records required for verification
- Panel security: panel sign-in events, IP address, session and trusted-device records
- Windows sign-in events: person, machine, session type (console/RDP), time, IP address, and outcome
- Attack telemetry: source IP, targeted account names, attempt count and time, targeted service (RDP/SSH), block status
- Machine inventory: essentials needed for protection, such as hostname, open ports, and agent version
- Billing details: payments are handled by Stripe; your card data never reaches us and is held by Stripe
Data we do not process
- Your Windows passwords — Windows verifies them; they are never transmitted to Dynacop
- Your screen, files, or keystrokes — the agent is not a monitoring tool
- In-session activity — Dynacop stands at the door; it doesn't watch what you do inside
Cookies and local storage
We use no advertising or behavioral-analytics cookies on our marketing site (dynacop.com); your language preference is stored only in your own browser. Security and abuse-prevention features provided by Cloudflare may set technical security cookies where necessary. The management panel (app.dynacop.com) uses cookies strictly necessary for sessions and account security — no advertising or tracking cookies.
Purposes of processing
- Providing the service: person verification at Windows sign-ins and enforcement of access policies (performance of contract)
- Security: detecting and blocking attacks and keeping an audit trail (legitimate interest)
- Communication: invitations, security notifications, and weekly summary emails
- Billing and legal obligations
Retention
Data is retained for as long as your account is active, to the extent the service requires. Within that:
- Audit and sign-in records: 12 months
- Attack telemetry: 6 months
- When an account is closed, your data is deleted or anonymized within a reasonable period; statutory retention obligations (e.g., invoicing records) remain reserved
Where data is hosted
Service data is stored on our own servers hosted in Radore data centers in Türkiye (Istanbul). The subprocessors below may process data in their own regions as their services require.
International transfers
The service's primary data is hosted in Türkiye. However, limited personal data may be transferred to service providers located abroad or to Forty2 LLC (USA) for payments, transactional email, network security, and service administration. Such transfers are carried out using transfer mechanisms and contractual safeguards compliant with applicable law.
Subprocessors
We use a limited number of third-party services to provide Dynacop:
| Service | Role | Data processed |
|---|---|---|
| Radore | Server hosting (Istanbul, Türkiye) | All service data (on our own servers) |
| Stripe | Payment processing, fraud prevention, and legal financial obligations | Invoice details, payment method (card data never reaches Dynacop servers) |
| Mailtrap | Transactional email (invites, notifications, weekly summaries) | Email address and message content |
| Cloudflare | DNS, network security, bot protection, email routing | Traffic metadata, IP address; routed emails are processed in transit |
| HERE | Panel map tiles | Tiles load from your browser; as a technical consequence of that connection your IP address and browser details reach HERE — no usernames, attacker IP lists, or sign-in records are sent |
Country/ISP details for IP addresses are resolved from a database hosted on our own servers; your IPs are never sent to any third party for this purpose. This product includes GeoLite2 data created by MaxMind, available from maxmind.com.
Regional notices
Additional notices applicable to your region are listed below; this section is updated as new regional notices are added.
Your rights
You have the right to access, correct, and delete your personal data, to request restriction of processing, to data portability where applicable, to withdraw consent for consent-based processing, and to object to processing. Send your request to privacy@dynacop.com; after verifying your identity, we respond within the statutory periods (at most 30 days under Turkish KVKK). Account deletion requests go through the same channel. You retain the right to lodge a complaint with the competent supervisory authority (in Türkiye, the Personal Data Protection Board).
Data security
Online verification is performed server-side; when Offline Access is enabled, verification may continue locally on the machine within the policy the administrator has set. Data is protected with TLS in transit, sensitive technical records on the machine are encrypted with Windows DPAPI, management access is authorization-gated, and admin actions are written to the audit log. For the full model: Our Security page →
Children's privacy
Dynacop is a service for organizations and businesses and is not directed at children; accounts should be created only by people authorized to act on behalf of an organization. If you believe a child's personal data has been processed inadvertently, contact us at privacy@dynacop.com.
Changes
Changes to this policy are published on this page and the date above is updated. For material changes, we notify account owners by email.
Contact
For all privacy questions and requests: privacy@dynacop.com · Forty2 LLC, New Mexico, USA. For the Türkiye-specific KVKK notice: KVKK Notice →