Your Privacy Matters

We're committed to protecting your personal information and being transparent about how we use it.

Kyn Privacy Policy

Effective date: 7 July 2026

Who we are: Kyn is provided by Dimension 5 Pty Ltd (ABN 161 171 60219), registered in Australia. In this policy "we", "us" and "our" mean Dimension 5 Pty Ltd.

Contact: support@teamkyn.com

What this policy covers

This policy explains how we handle personal information when you:

visit our website
create and use a Kyn account
view or interact with pages published through Kyn

We follow Australia's Privacy Act 1988 (Cth) and, where it applies, the GDPR/UK GDPR and other regional laws.

Our role vs yours

Website & account data: we are the data controller.
Content you publish in Link Lodge (files, links, page text): you/your organisation are the data controller; we act as your data processor and handle that content only on your instructions. If you need a Data Processing Agreement (DPA), email us.

Billing: We use Stripe as our payment processor. For purchases, Stripe is an independent controller of your billing and tax data. Their privacy policy and terms apply to those transactions.

Information we collect

1) Website visitors

Technical data: IP address, device/browser type, pages viewed, timestamps, referral source
Cookies and similar technologies for preferences and analytics (see Cookies)

2) Account owners & users

Account & profile: name, email, company name, logo, website URL, role
Sign-in data: OAuth identifiers (e.g. Google sign-in) or email and password credentials and basic auth logs
Product settings and activity: pages created, updates, sharing settings
Support: messages you send us and any attachments

3) Viewers of your published pages

Standard web logs: IP address, browser/device, time of access
Access control data if enabled: email address invited, sign-in or access tokens
Interaction data: link clicks, file downloads, basic engagement metrics

4) Files and links you upload

Files you store with us and URLs you add to your pages
File metadata (filename, size, type) and access logs

5) Billing (via Merchant of Record)

For paid plans, Stripe collects and processes billing details (e.g. purchaser name, email, address, tax numbers, payment method, transaction data). They provide us with transaction metadata so we can provision your account.

How we use information

Provide, maintain and secure Kyn
Set up and administer your account and pages
Process purchases and send billing notices (via Stripe)
Respond to support requests
Monitor performance, run diagnostics and improve features
Meet legal, tax and compliance obligations

Legal bases (where GDPR/UK GDPR applies)

Contract — to provide the service you asked for
Legitimate interests — to run, secure and improve Kyn
Consent — for optional cookies/analytics or marketing
Legal obligation — where we must keep records

Cookies & analytics

We use:

Essential cookies to run the site (security, sign-in, preferences)
Optional analytics to understand usage and improve the product

You can manage non-essential cookies through your browser settings.

Who we share information with

We don't sell personal information. We share it with:

Service providers we use to run Kyn (hosting, file/CDN, email, analytics, customer support)
Payment processor (Stripe) for purchases and tax compliance (independent controller)
Professional advisers/insurers where needed
Authorities if required by law or to protect rights, safety or the service

International transfers & safeguards

Some providers process data in other countries (for example, the United States or EU). When personal information leaves your country, we use lawful transfer mechanisms to keep it protected.

What this means in practice (plain English):

For transfers from the EU/EEA we rely on the European Commission's Standard Contractual Clauses (SCCs) with our providers, and we add extra measures where needed.
For transfers from the UK we use the UK Addendum to the SCCs (or the UK's approved clauses).
If a US provider participates in the EU–US Data Privacy Framework (and UK extension), we may rely on that too.
From Australia, we follow APP 8 and take reasonable steps to ensure overseas recipients protect personal information.

If a mechanism changes (for example, a court decision), we'll switch to a valid alternative.

Data retention

We keep personal information only as long as needed for the purposes above and to meet legal requirements, then delete or anonymise it.

Typical periods:

Account data: while the account is active, then up to 24 months
Server logs: up to 12 months
Backups: rolling 30–90 days
Support tickets: up to 24 months
Public page access logs: 6–12 months (operational security)

Security

We use reasonable technical and organisational safeguards, including encryption in transit, access controls, least-privilege permissions, and regular reviews. No online service can be guaranteed 100% secure, but we work to reduce risk.

Your rights

Depending on your region, you may have rights to:

access and get a copy of your data
correct or delete it
object to or restrict certain processing
data portability (where applicable)
withdraw consent (for things like optional cookies/marketing)

To make a request, email support@teamkyn.com. We'll respond in line with local law.

Regional information

EU/EEA & UK

Controller: Dimension 5 Pty Ltd (see Contact)
Legal bases: as listed above
Your rights: access, correction, deletion, portability, restriction/objection, and the right to complain to your local authority
EU/UK representative: If we are required to appoint one under Article 27, we will publish their details here.

United States (state privacy laws, including California)

Some US state laws provide additional rights (for example, access, deletion, correction, portability, and the ability to opt out of sale/share/targeted advertising; in California, also to limit use of sensitive personal information).

If these apply to you, contact support@teamkyn.com. We do not sell personal information.

Brazil (LGPD)

Brazilian users have rights similar to GDPR (confirmation of processing, access, correction, anonymisation, portability, deletion, information on sharing, and withdrawal of consent). Contact us to exercise your rights.

Singapore (PDPA)

For users in Singapore, you can contact our Data Protection Officer at [DPO email] for access, correction and other requests under the PDPA.

South Africa (POPIA)

Users in South Africa may request access, correction/deletion, object to processing, and complain to the Information Regulator. Contact support@teamkyn.com.