DIN CTRL Privacy Notice

Last updated: October 3, 2026.

DIN CTRL is a brand of, and owned by, VX CTRL Inc., a North South Industries company. This notice explains what personal data we collect through dinctrl.com and the DIN CTRL software, why we collect it, and the choices and rights you have.

Who we are

VX CTRL Inc., a South Dakota corporation, at 550 N 5th Street, Suite 112, Rapid City, SD 57701, USA, operating the DIN CTRL brand ("DIN CTRL", "we", "us"). For privacy questions and data requests: privacy@dinctrl.com.

DIN is self-hosted

DIN runs on your own machine. The field and console listen locally, and by default we host nothing and see nothing of your records. Your records stay with you. The only things that leave your machine are:

your imports and the "why" layer, which go to your own model provider on your own key;
one licence-activation request to api.dinctrl.com carrying your licence key;
hosted push, used only if you are a hosted customer;
any webhooks you configure.

We never pay for, resell, or proxy model inference.

What we collect

Waitlist sign-up: first name, last name, email address, which entry point you came through, which landing applied, and a timestamp. Used to contact you about availability and launch.
Account and billing: paid plans are handled by Stripe. We store your Stripe customer id, subscription id, your plan, and your licence. Card data never touches our servers.
Licence activation: activating paid features sends your licence key to api.dinctrl.com. Because that is a network request, our server also sees the originating IP address.
Hosted service (waitlist only at launch): if you join the hosted waitlist, we collect your contact details. Hosted is not sold at launch.
Support: what you send us when you contact us.
Server logs: our web server (nginx) records standard access-log data, including IP address, time, page, referrer, and user agent, for security and troubleshooting.

Cookies and browser storage

The site and console use no cookies, no third-party trackers, no analytics, and no browser fingerprinting, and load no external scripts. The only browser storage is localStorage for your own preferences (your theme, and in a self-run console the label you set for your own identity). These stay in your browser, are not used to track you, and are not sent to us, so no cookie banner is required.

Creating and managing your account and licence: performance of a contract.
Waitlist and launch or marketing email: your consent.
Validating licences and securing the service (including server logs): our legitimate interests.
Taking payment and meeting tax duties: contract and legal obligation.
Responding to support: legitimate interests.

We do not sell your personal data and do not share it for advertising. We use: Stripe (payments and subscriptions), IONOS (hosting for the site, console assets, and the billing API), our own mail relay (mail.cmdpath.com) for transactional email, and self-operated DNS. We may disclose data to comply with law or in a merger, with notice where required.

International transfers

We are based in the United States and process data there. Where we transfer personal data from the European Economic Area or the United Kingdom, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

Retention

Billing records: 7 years (tax).
Licence records: for the life of the licence plus 1 year.
Waitlist and leads: until you ask to be removed, or 24 months, whichever comes first.
Server logs: 90 days.
Your own records live on your own machine and are not deleted by us on a downgrade or a lapse.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing, to data portability, and to withdraw consent, and to complain to a supervisory authority (in the EEA/UK) or your state regulator. California residents (CCPA/CPRA): you have the rights to know, access, correct, and delete your personal information, and to limit the use of sensitive personal information; we do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email privacy@dinctrl.com; we respond within the time the law requires.

Children

DIN CTRL is not directed to children under 16, and we do not knowingly collect their personal data.

Changes and contact

We will post any update here with a new date. VX CTRL Inc., 550 N 5th Street, Suite 112, Rapid City, SD 57701, USA. Contact: privacy@dinctrl.com.