Privacy notice
Effective date: 5 November 2026
This notice informs the people whose personal data dilmind processes: registered Experts, Clients' Users, podcast speakers, visitors to the site, people who report content and people contacted by dilmind. It describes the data processed, the purposes and legal bases of that processing, its recipients, transfers outside the European Economic Area, retention periods and people's rights. It is open with no sign-in, from the site and the apps. It is for information only and is not something anyone is asked to accept.
Definitions
In this notice, the terms below, when written with a capital initial, have the following meaning, in the singular as in the plural:
"Library": all the submitted Interviews and the associated content accessible through the Service.
"Client": the professional organisation that accesses the Service under the Client Terms.
"Client Terms": the general terms and conditions applicable to Clients.
"Expert Terms": the general terms and conditions applicable to Experts, including their annexes.
"Digital Mind": the conversational agent associated with an Expert, which rephrases what they said in their Interviews.
"Interview": an Expert's interview conducted, recorded and transcribed by means of the Service.
"Expert": the person registered on the Service as an expert.
"Service": the dilmind site and applications.
"User": the person authorised by a Client to use the Service.
1. Controller and contact
Dilmind SAS, registered office c/o WHOORKS, 28 boulevard du Colombier, 35000 Rennes, registered at RCS Rennes 101 338 150, is the controller of the processing this notice describes. It is not the controller of the data Clients entrust to it for their own research: there it acts as processor, under the data processing agreement signed with each Client (article 4.2).
For any question or request: privacy@dilmind.com.
2. Experts and Interviews
2.1 Signing up and your profile. When you sign up, we receive:
- your email address, your name and your country of tax residence, as you declared it;
- your password, stored as a hash, or the sign-in details LinkedIn sends us;
- the address of your LinkedIn profile and, if it has one, your photo.
We check these details are consistent, and we complete your professional information (roles, career, skills) from a professional-data provider or from your LinkedIn profile. That provider and LinkedIn are the controllers of their own processing; dilmind is the controller of the use it makes of the data obtained from them. Your profile can show peers your role, your companies and the dates of your career, a biography generated from that career and your Digital Mind's activity. You can ask for this information to be corrected. The no-name mode hides your name, your photo, your LinkedIn link, your exact role and your past roles: readers see the word Anonymous, the first letter of your first name, your role in broad words at your company, the flag of your country and a one-line description written by dilmind; these details can still identify you.
This processing rests on:
- the performance of the contract, for managing your account and, as far as the service you ask for needs it, your profile, the topics recommended to you, your Interviews and their remuneration;
- our legitimate interest in protecting the Service, for consistency checks, fraud prevention and security, weighed against your interests and subject to your right to object.
The email address, the identity and the information marked as mandatory are needed to create and secure the account; without them, the service asked for cannot be provided. The information needed for payment is collected when that payment is asked for.
2.2 How Interviews are assessed. An AI agent conducts, records and transcribes the Interview. Its plan takes account of your profile and of your relevant earlier Interviews, if any. The automated assessment proposes a grading. An authorised person looks at the outcome again at your request, under the second look by a person set out below. These operations rest on the performance of the contract, as far as they are needed for the Interview and its remuneration.
Data used. The assessment covers the transcript, the topic's questions, the information already public about that topic and the following details of your profile: role, company, how recent the experience is and seniority level.
Logic. The assessment weighs participation, length, and how precise and relevant the answers are to the topic, as well as whether they rest on the Expert's own professional experience, compared with the public information. How well your profile fits the topic's criteria can tip a close case, but never overturn a clear outcome. A separate check flags confidential, defamatory or otherwise prohibited passages, which are removed on submission.
Consequences. Under article 5.1 of the Expert Terms, the outcome of the assessment determines the right to the fee referred to in those Expert Terms and the effect of submitting the Interview for additional remuneration, which you can do before you know that outcome. If you do not actually take part or answer, the Interview is not kept and the topic may be closed to you, subject to the second look. No outcome leads to a public score or a sanction on the account.
A second look by a person. You can contest an unfavourable outcome within fourteen days, including after submission, from the outcome screen or the email, and give your observations. An authorised person at dilmind looks again at the available material and answers you with a reasoned decision within two weeks; the outcome can be raised, never lowered. The full terms are in article 5.2 of the Expert Terms.
The assessment's observations and the profile details it used are personal data you can access (article 7.1).
2.3 Use of submitted Interviews. The redacted version of the Interview feeds the Library, the answers and the Digital Mind within the limits of the authorisation and, where applicable, the subsidiary assignment in article 6 of the Expert Terms. This use rests on the performance of the contract (article 6 of the Expert Terms) and continues for as long as the authorisation lasts, including after the account closes, on the terms of article 6.7.
Experts access content according to their free credits and the topics opened; Clients according to their plan. No Interview is published on the open web. Anyone visiting dilmind, signed in or not, and Clients on the free plan see each Expert without their name, with their role in broad words and their company. A signed-in Expert who has not opened a topic reads, on the topic's page, one point, one quote and one line where its Experts disagree, with only the first letter of the quoted Expert's first name. Earnings are not converted into access.
Your name and photo are shown to Clients after an identity check or a LinkedIn sign-in in the same name; otherwise, the content is shown without a name or photo, where applicable with your first initial, your role in broad words and your company. Choosing to be shown without a name does not mask every identifying detail, but no full transcript is given to Clients as at the date of this version; when that access opens, it will be reserved for Clients holding a paid plan, within the limits of their plan. Content shown without a name is still personal data. The profile shown to peers and how each Interview is shown can each be set separately; you decide, for each Interview, whether to include it in your Digital Mind, which has no on or off setting. With no Interview included, your Digital Mind is not available, and your profile stays until your account is closed. Groups use the named Interviews of their members.
Dilmind neither uses your words to train or fine-tune an AI model nor sells them for it, and forbids Clients to do so. Advertising, and imitating your voice or your image, require a specific agreement. Article 6.6 covers earlier data.
We keep the proof of acceptances and of exploitation rights on the basis of our legitimate interest in establishing and defending our rights. It holds the account's identifier, the exact texts accepted, the versions, the times, fingerprints of the content and of the Expert Terms, the IP address and the type of browser and system, and no fingerprint of the device. The declaration on your honour of your country of tax residence, ticked at sign-up, is kept with this proof: its words, the country, the time, the IP address and the browser.
2.4 The peers' Library. Your searches and conversations rest on the contract. Your question is passed on automatically, word for word, to the Experts whose Interviews are quoted in the answer and, in a conversation with a peer's Digital Mind, to the holder of that Digital Mind, who are bound to confidentiality. This sharing rests on our legitimate interest in letting them know how their content is used, subject to your right to object. A setting for each conversation, on by default, decides what they see: on, your name, your photo, your role and your company; off, only your role and your company. A question asked of your own Digital Mind is passed on to no one. After you delete your conversation or close your account, the questions already received stay open to their recipients, without your name or your photo, until their own account closes, subject to your rights.
The questions and the relevant passages are processed by our AI providers to select the sources and produce the answers, on the terms of articles 5 and 6.
Your conversations are kept while your account is open. A deletion you ask for takes effect in the account at once, apart from the isolated backups and legal obligations. Requests for additional access are kept as long as support exchanges.
2.5 Direct calls. Direct calls are not open as at the date of this version. When they open, information given beforehand will set out the data of the Expert and of the Client's participants, the purposes, the recipients and the retention. A call will be able to join the Library only after the Expert's authorisation and, where applicable, the subsidiary assignment of their rights and the effective removal of the data and words belonging to the Client, at the end of the three-month reserved period.
2.6 Payments and identity check. The identity, payment and tax-residence data of the Expert and, where applicable, of their company (Annex B of the Expert Terms) are used to pay the sums owed, on the basis of the contract. The fee, sums due for direct calls and referral commissions are paid on a sworn declaration of tax residence up to €2,500 a calendar year, then on the certificate of tax residence for the year, where that certificate lowers the tax withheld at source; additional remuneration owed to a non-resident may be held pending the tax documents set out in Annex A, without holding up the fee. Where the law requires it, in particular under the reporting obligations of platform operators, dilmind sends the tax authorities the identification details and amounts required; this processing rests on our legal obligations. Before the first withdrawal, a provider checks your identity. You can also do it earlier, from "Settings"; once it passes, your name is shown to Clients (article 2.3). Comparing the selfie with your own document, the only way to check, requires explicit consent, which can be withdrawn; without it, no withdrawal is possible, and your earnings stay on your account, with no expiry date. The provider keeps the document, the video, the result and the alerts for one month in the European Union, with no model training, and deletes the face template with the verification session; dilmind keeps the verification records on the terms of article 6.1. The search for duplicates uses the name, date of birth and country over one month, with a human review of any alert before a final decision. The provider's identity and notice are shown before the check.
2.7 Referral. Referral rests on the performance of the Expert Terms. We process the referrer's personal link, the referee's attachment to the referrer, the date of the referee's first Interview admitted to the Library and the sums paid to the referee, which are needed to calculate the commissions. The referrer sees the amount of their commissions, from which the amount of the sums paid to the referee can be worked out; the referrer has no access to the referee's Interviews or other data. The attachment is kept until the commission cap is reached or either account is closed; only the records needed for proof or accounting are kept after that, under article 6.3.
3. Visitors and podcast speakers
3.1 Podcast speakers. No podcast is used today. When a podcast is licensed, we process what its hosts and guests say and, for the technical operations authorised, their voice, name and position. Episodes used are authorised beforehand by their right holders; their full transcripts are not given to Clients. No content of an episode is kept or shown in the Service before that licence.
The data comes from the podcast or the licensor, an individual or a company. For speakers who have no contract with us, extracting and showing the licensed content rests on our legitimate interest in providing a documentary service from content that is lawfully accessible and authorised, after weighing their interests. They have the rights to object and to erasure as the law provides. The licensor passes this information on to them, and we complete it, in particular when their words are quoted under their name.
3.2 Visitors to the site. The site keeps visitors' IP addresses and requests in security and operations logs for ninety days, on the basis of our legitimate interest in keeping the Service secure and working. It carries no audience measurement and no advertising tag. Sign-ups are counted on the server, in aggregate, with no cookie and no IP address.
The cookie policy describes the sign-in and security trackers and the local storage. Staying signed in for seven days, renewed at each visit, is turned on only if you ask for it.
3.3 Reporting content. We process the identity and contact details of the person reporting, the content reported and the exchanges, to examine the facts, inform the people concerned and deal with challenges. The applicable legal obligations are the basis for this processing; for content dilmind publishes as editor, it also rests, as far as necessary, on its legitimate interest in preventing infringements of rights and handling complaints. The file is kept three years after the last exchange, with limited access, except in a dispute that requires specific records to be kept.
4. Clients and Users
4.1 Managing the business relationship. We process the client organisation's name, country and identification number, the plan subscribed to, each User's work email address and role, administrator or member, the purchases and the credits. Sign-up and authentication rely on a one-time code sent to the User's work email address. This code and the attachment notices are sent by our email-sending provider, with no tracking of opens or clicks. The domain name of this address is used to identify the client organisation; for that purpose, only that domain name is sent to a company-data provider, of which we keep only the result, and to Google's icon service to display the organisation's logo; the User is attached to the organisation's space only on an administrator's invitation or once an administrator has approved their request. The person who opens the space becomes its first administrator. This processing rests on the performance of the contract where the person concerned is a party to it and, for the Client's representatives and employees who are not personally parties to it, on our legitimate interest in managing and securing the business relationship, subject to their right to object. Invoices and accounting data are kept to meet our legal obligations. The work address and the mandatory identification information are needed to create and secure the account; without them, access cannot be activated. Card payments are processed by Stripe, which receives the data needed for the payment, its security and fraud prevention, and provides its own information for its processing as a separate controller: https://stripe.com/fr/privacy. Payment information is required when a paid plan is subscribed to online; the free plan needs no card. The Client's account-management data is kept for the relationship; after that, only the records needed for our legal obligations or to prove our rights are archived, with restricted access, for the applicable period. Proof of Clients' acceptances and orders is kept for the relationship, then five years from its end, on the basis of our legitimate interest in establishing and defending our rights. Accounting records, logs and invitations follow the periods in articles 6.3 and 6.4.
4.2 Clients' research. To produce the answers and keep Users' conversations, we act as the Client's processor, within the scope of the data processing agreement (DPA) signed with it, including under the free plan. The Client is the controller of this processing; requests to exercise rights relating to it are addressed to the Client or, failing that, passed on to it by dilmind. The Client's administrators have access to each User's usage data, in particular the number of questions asked and the credits used, but not to the content of their conversations. When a User is removed, their conversations are deleted within thirty days, except those they shared. Once the sharing feature opens, shared conversations stay open to the Client's Users while its account lasts, then are deleted within thirty days of its closing or, sooner, at the Client's request. Users' questions are passed on, word for word, with the answers given to them, to the Experts whose Interviews are quoted in the answers and, in a conversation with a Digital Mind, to the Expert it is associated with. These Experts also see the User's name and photo and the name of their organisation, unless the User chooses to ask their questions anonymously; this choice applies to the whole conversation and can be changed at any time. Experts are bound to keep the questions they receive confidential. If the conversation is deleted or the User leaves dilmind, the questions already passed on stay open to these Experts, without the User's name or photo or the name of their organisation; we then keep them as controller, on the basis of our legitimate interest in keeping Experts informed of how their Interviews are used, until the account of each receiving Expert closes, subject to the right to object.
In a Client's conversation, the web lookup is on at the start of a conversation and can be turned off. When it is useful, a short search derived from the User's question goes to the search provider, with no words or names from an Interview. It is kept thirty days to detect abuse, with no model training.
To pay the holders of the content, we process, as a separate controller, only the usage data, the identifiers of the Interviews quoted and the shares given to them, on the basis of our legitimate interest in paying for the content actually used. This processing keeps neither a full copy of the conversations nor the text of deleted conversations. The holder's statement identifies the item bought and the share given to their Interview, without the identity of the buying Client or its Users and without the text of their questions.
4.3 Commercial prospecting. We may send Clients' Users, at their work email address, information about dilmind's offers and features related to their professional activity. This processing rests on our legitimate interest in promoting our services to professionals. Each message includes a way to object, with no reason needed; an objection can also be sent to privacy@dilmind.com. The data used for this purpose is kept for the relationship with the Client, then three years from the last contact coming from the User. After an objection, the address is kept on an objection list for the sole purpose of honouring that choice.
5. Recipients and transfers
5.1 Recipients. Access is limited to dilmind's authorised people, to Clients and Experts under articles 2.3, 2.4 and 4.2, to the authorities where the law requires it, and to the following providers, for only the data they need:
- hosting, databases and delivery of the Service: main storage in France, technical operations and access in the European Union and, depending on the service, outside it;
- AI, transcription and search services: voice, transcripts, profiles, questions and answers needed for the Interview and the documentary service, in the European Union or the United States;
- mailboxes and email sending: identity, address and service messages, in the European Union or the United States, with no words from an Interview;
- identifying client organisations: only the domain name of the work email address, sent to a company-data provider and to Google's icon service, in the United States;
- identity check and payment: documents and data needed for the checks, Clients' payments and payouts, under articles 2.6 and 4.1 and the information shown during these operations;
- electronic invoicing: from 1 September 2027, Clients' invoice and payment data, sent to the approved platform dilmind chooses and, through it, to the tax authorities.
5.2 Providers' own processing. Some providers also process the data for their own obligations of security, fraud prevention or regulatory checks. The email-sending service uses the service messages to fight spam and fraud, including to improve its models; these messages contain no words from an Interview.
The providers concerned and their notices are named at the time of the collection or operation concerned. The professional-data provider and LinkedIn are the sources and separate controllers referred to in article 2.1.
5.3 Transfers outside the European Economic Area. Our main hosting is in France. The voice services, some AI processing, the web lookup, email sending, profile enrichment, identifying client organisations and, where applicable, payment involve processing or access in the United States. Delivery of the Service may rely on points of presence outside the EEA, close to the user.
Depending on the recipient and the flow, transfers rely on an adequacy decision, including the Data Privacy Framework for certified US organisations and the processing it covers, or on the standard contractual clauses and the supplementary measures required.
You can get information on the recipients and a copy of the transfer safeguards by writing to privacy@dilmind.com, except for their confidential parts.
Any substantial change to this notice is brought to the attention of the people concerned, by email or in the app, before it takes effect.
6. Retention periods
6.1 Accounts and Interviews.
- Account and submitted Interviews: for as long as the account and the authorised use last, then deleted, except the minimum records needed for legal obligations or proof. "Delete" removes the Interview from searches and from the profile; this button does not replace a request for erasure. The records still needed after this removal are kept with restricted access.
- Account with no Interview in the Library and no balance: deleted after three years without signing in, after a warning email a month before.
- Identity check: the verification records are kept for as long as the account lasts and, after it closes, while a sum is still owed; only the result and its date are then kept with the payment history, ten years after the end of the financial year.
- Interview not submitted, or withdrawn on confidentiality grounds: deleted fourteen days after the outcome, unless a second look is under way; if the outcome is raised, the time to submit starts again for fourteen days.
- Interview not kept: kept fourteen days after the outcome and, if there is a second look, until the answer, then deleted, unless the outcome is raised and the Interview submitted.
- Interrupted Interview: deleted.
- Unsuitable Interview: deleted when the time for a second look ends or, if there is a second look, after the answer.
- The outcomes of appeals may be counted to track the corrections made to assessments, without keeping the recordings and transcripts beyond the periods above for that purpose alone.
- After the account closes: the name, email address and payment details needed are kept as long as a sum earned before the closing is still owed; the Interviews stop earning additional remuneration at the closing, and no annual statement is sent after it. A balance that cannot be paid stays owed; only the name and email address needed are kept until it is paid.
6.2 At our providers.
- Voice provider: the audio and the transcript are deleted within minutes of dilmind copying them; failing that, a setting limits their retention to seven days and a daily purge deletes anything still there after eight days.
- Identity check provider: document, video, result and alerts deleted after one month; face template deleted with the verification session.
- Web lookup: thirty days for the search query.
- Other AI processing: no retention for the flows covered by the zero-retention option dilmind has subscribed to, in particular drafting the answers to Clients; ranking of the relevant passages by our semantic search provider: kept in its request logs in the European Union, at most until our contract with it ends, with no training on the data.
6.3 Proof, accounting and running the Service.
- Proof of rights, of authorisations and subsidiary assignments, and of acceptances: for the whole period during which the Interviews concerned are used, plus the applicable limitation periods, on the basis of dilmind's legitimate interest in establishing and defending its rights. After your account closes, your name and email address are kept with this proof until the last of your Interviews stops being used, then five years.
- Accounting entries and records: ten years from the close of the financial year.
- Proof of Clients' acceptances and orders: for the relationship, then five years from its end.
- Self-declarations and residence certificates: six years after the end of the year they cover.
- Tax identification number, address and date of birth: ten years after the end of the financial year.
- Exchanges with support, research access requests and report files : three years after the last exchange.
- Sign-ups never confirmed and profile extracts never saved: thirty days.
- Invitations never used: ninety days.
- Expired links and sessions: thirty days after they expire.
- Raw messages from providers and failed tasks: ninety days.
- Referral attachment under article 2.7: the time needed to calculate the commissions, then archiving limited to legal obligations and proof of rights.
- Cost-tracking identifiers: deleted with the profile; the amounts are kept without them.
Account and payment messages rest on the contract. When an account is inactive with a balance, at most three reminders may be sent during the first year, on the basis of our legitimate interest in making the payment possible, with no tracking of opens or clicks.
6.4 Logs and backups.
- Logs of calls to models: fourteen days.
- Application logs: thirty days.
- Access logs and raw technical messages: ninety days at most.
- Admin and audit logs: one year, after which the author of the actions is cut loose from the record.
Access is limited and secured; admin actions are logged. Isolated backups are purged no later than six months after a deletion, with no further use of the data; deletions are applied again before any restore.
6.5 Market research and the archive. The studies Experts can access may mention professionals' names, roles and public sources. Private profiles are not shown. This data is deleted three years after the study closes. The processing rests on our legitimate interest in providing a professional map, subject to people's rights. Specific information sets out the sources and how to object; the exception to individual information applies only on the terms of Article 14(5)(b) of the GDPR.
Other historical data is isolated outside production, with no use for answers or model training; only the items needed to check past operations or defend rights are kept until 31 March 2027, unless a dispute is under way.
6.6 Earlier data. Before 29 September 2026, a setting of the voice provider allowed it to use the recordings and transcripts of calls to improve its models. The setting was turned off on that date, with no effect on data already sent. It is not established that this use took place, but it cannot be ruled out. If you gave an Interview before that date, you can get information on your data and exercise your rights at privacy@dilmind.com.
6.7 When the Expert's account closes. When the account closes, the profile and the sign-in data are deleted and the Expert's name is removed from the quotes kept. Submitted Interviews go on being used without a name for as long as the authorisation set out in article 6.1 of the Expert Terms lasts; they remain personal data where the Expert can be recognised, and their processing still rests on the performance of the contract. A request for erasure is examined on the terms set out in the GDPR and in article 10.5 of the Expert Terms. The records needed for a legal obligation or to defend a right are kept with restricted access.
7. Rights and complaints
7.1 Your rights. As the law provides, you can ask for access to your data, its correction, its erasure, a limit on its processing, or its portability. You can withdraw at any time a consent you gave for a particular use, without affecting what was done before. Access covers in particular the assessment and profile data about you, the internal grading and observations on your Interviews included, within what protecting other people's rights allows. You can also give instructions on what happens to your data after your death (Article 85 of the French Data Protection Act).
7.2 Your right to object. You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest. You can object to any processing for prospecting purposes, with no reason needed.
7.3 Using your rights. Requests go to privacy@dilmind.com or, for people we contacted, to privacy@team.dilmind.com. When the origin of a request does not let us check your identity, we ask you to confirm it from the address linked to your account, or for proportionate proof, without asking for an identity document as a matter of course. We answer within one month as a rule. This can be extended by two months at most; if so, we tell you why before the first month ends. A well-founded erasure covers the content and the derived data concerned, and is notified to the recipients as the law provides. Withdrawn quotes are replaced by the words "passage withdrawn" in the conversations dilmind keeps; copies already exported cannot technically be recalled. The legal exceptions to deletion and the remaining technical delays are given to the person asking. To answer a request, we process the data needed to meet our legal obligations. We keep the relevant exchanges three years after the last exchange, then delete them, except in a dispute that requires certain records. Proofs of identity and export copies are deleted as soon as they are no longer needed; download links expire after thirty days.
7.4 Complaints. You can lodge a complaint with the CNIL, in particular online at www.cnil.fr or by post at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
8. If we contacted you
How we found you, why we wrote, what we hold, and how to make it stop.
Last updated 5 November 2026
Who we are
Dilmind, a French société par actions simplifiée (SAS), registered office WHOORKS, 28 boulevard du Colombier, 35000 Rennes, France, RCS Rennes 101 338 150. We are the controller of everything described on this page.
We build a knowledge platform where working professionals are paid for structured interviews about their field.
For anything in this notice, one address: privacy@team.dilmind.com.
Why you received an email from us
We wrote to you with a paid, work-related interview offer matched to your published professional expertise. It is a genuine commercial offer, not a newsletter and not advertising for a product.
You were selected because your published work history matches a field we are actively covering.
What we hold about you
- A professional profile: name, headline, current and past roles, employer, field of expertise and country, and a link to your LinkedIn photo. The kind of information in a public professional profile.
- How well your profile fits the field we are covering, which sets the order we write in.
- A work email address found for you and checked by our email provider. We never send to a guessed address.
- The history of our contact with you: which messages we sent, and whether you replied, claimed the offer, or declined.
We hold nothing about your private life, and we do not track whether you open or click our emails. Our messages carry no tracking of any kind.
Where it came from
Your profile came from a licensed provider of professional data, which gathers publicly available professional information. We looked you up there because your experience fits one of our topics, because a public page about this market named you, such as a conference agenda, a company's customer story or a partnership announcement, or because a member of our team chose you. We did not scrape it ourselves, and nobody handed us your address privately.
Why we are allowed to write to you
Our legal basis is legitimate interest, GDPR Article 6(1)(f): recruiting professionals for paid, work-related interviews by the only practical means available, which is writing to them about their professional role at a work address.
The intrusion is deliberately minimal:
- At most four emails over eight days, then we stop.
- If a new field opens that fits your background, we may send you one short note about it, with no reminders. A reply stops it for good.
- Saying no means we never write again.
- No open tracking, no click tracking, no advertising, and we never sell your data.
You have the right to object at any time, and an objection is honoured absolutely: one reply to any of our emails, and you are permanently excluded from any future contact, platform-wide.
Who else touches your data
- The licensed professional-data index the profile came from.
- Hunter, the email service that finds your work address from your name and employer, and carries our messages.
- Microsoft 365, which holds our mailboxes.
Nobody else. We do not sell, rent or share your data for anyone else's purposes.
How long we keep it
If you never respond, your profile leaves active outreach when the sequence ends, and is kept no longer than three years after our last email to you.
If you replied, we keep your profile and our exchange three years after the last message between us.
If we collected your profile but never wrote to you, we delete it three years after collecting it, or sooner when the research it was collected for ends.
If you decline or object, we delete the profile and keep only the minimal suppression record described below, apart from the emails we exchanged.
The emails we exchanged stay in our mailbox for three years after the last one, then are deleted, even if you said no. Hunter, the service that carries them, keeps its own copy for as long as we use it.
Your rights
You have the right to access what we hold, correct it, have it erased, restrict how we use it, and object to the contact altogether. You can also complain to your data-protection authority at any time.
To exercise any of these, write to privacy@team.dilmind.com. No forms, no hoops.
How erasure works
If you ask us to erase your data, we delete your profile. We keep one minimal record, a suppression entry, whose only purpose is to make sure we never write to you again. The emails we exchanged stay as set out under How long we keep it.
Keeping it is what makes never again a promise we can technically keep. Deleting it too would make you contactable the next time an index surfaces your profile.