Privacy Policy

1. Scope and age requirement

This policy applies to the DynastyMind website, decision-archetype assessment and deep reports. If AI counsel is explicitly enabled in the product in future, the corresponding AI terms in this policy also apply. The operator is MELBMARKETING PTY LTD; business registration: 98 690 946 055; contact email: info@melbmarketing.com. To protect the operator's personal safety, this website does not publish a residential or street address. For lawful service or business verification, contact that email first or use the official Australian business registers.

The service is for adults aged 18 or over. Do not use the assessment, purchase features or any explicitly enabled AI counsel if you are under 18.

2. Data we process

• Local device data: option identifiers, current question, randomisation seed and save time for an unfinished assessment; primary and secondary dimensions, numerical scores and an optional linked-report reference for a completed local result; interface preferences; and limited recent conversation text may be stored in your browser. Clearing browser data or changing devices may remove this local data, but does not cancel a purchase or subscription already confirmed on the server.
• Server-side account and entitlements: after sign-in, we store the stable user identifier supplied by the authentication service, locale, completed assessment's primary and secondary dimensions, numerical scores, archetype identifier, reports, order and subscription status, and server-calculated membership counsel allowance. AI counsel is available only with an active membership. The DynastyMind database does not store the email supplied by the authentication service; server records are authoritative for cross-device access and remaining usage.
• AI counsel content processed only when enabled: only when the product clearly shows AI counsel as available, the server confirms an active membership and you submit a consultation do your question, relevant assessment profile and limited recent conversation context pass through DynastyMind's server to the OpenAI API. If AI counsel is not shown, it is not offered publicly and no public counsel content is accepted. Provider choice is server-controlled and cannot be selected by the browser.
• Minimal funnel events: when analytics is enabled, browser events record only an allowlisted event name, locale, source category, device category, journey category (entry, fresh completion or restored result), copy version, a server-created anonymous session identifier with a rolling 30-minute activity window and server time, without a signed-in identity. When checkout is created, the server still links that visit's first-touch source to an internal order identifier and, where applicable, an assessment identifier so paid-source totals can be reconciled. Those identifiers are not submitted by the browser and are not returned in the administrator's source aggregates. Funnel events do not store assessment answers, counsel questions, free text, email, card details, full URLs or client-supplied user identifiers, and the endpoint rejects those inputs.
• Operations and security: hosting and network providers may process IP addresses, request times and technical diagnostics to deliver the service, prevent abuse and investigate faults. DynastyMind application diagnostics do not log assessment answers or counsel text.
• Support: if you contact us, we process the contact details, order reference and issue description you provide. Never send a full card number, security code, password or unnecessary sensitive information.
• Purchases: once checkout is enabled, Stripe processes name, email, payment method, billing and transaction data, and collects billing and address details to verify sales-region eligibility and applicable tax. The address is not used for physical delivery; this is a digital service. DynastyMind checks only the country code and the transaction or subscription status needed to fulfil access and refunds, does not store checkout addresses in its own database, and does not receive or store full card numbers or security codes.

3. Why we process data

• Provide and restore the assessment, reports and AI counsel you request;
• Verify purchases, manage subscriptions, issue refunds and provide support;
• Understand whether the funnel works without reading assessment or counsel content;
• Secure the service, limit abuse, fix errors and meet legal obligations.

4. If AI counsel is enabled

This section applies only when the product clearly shows AI counsel as available. Public AI counsel uses the OpenAI API with GPT-5.6 Luna and is called only after the server confirms an active membership. OpenAI's API data guidance states that API data is not used to train or improve models by default unless the account explicitly opts in; default abuse-monitoring logs may still contain prompts and responses and are normally retained for up to 30 days. See the OpenAI API data-controls guide for controls and exceptions.

Production requests should be configured not to store application state, but that is not the same as Zero Data Retention and does not automatically remove provider abuse monitoring. Do not submit sensitive personal information, confidential material, identity documents, full financial account details, health records or another person's private information.

We restrict Google Gemini's unpaid tier to private synthetic-data canary checks. It is not user-facing and must never receive real assessment answers, counsel questions, personal data or customer content. Any future plan to use Gemini for real users requires a fresh review of service tier, regions and data terms, plus updated policy and in-product notice before activation.

Please also read Google's Gemini API Additional Terms andPrivacy Policy.

5. Payments and other providers

Google and email sign-in are provided by Clerk. Clerk processes email, basic account information, session and security data to create accounts, verify email, maintain sign-in and prevent abuse, using necessary authentication cookies. Google sign-in requests basic identity, email and profile only, not Gmail or Drive content. Clerk account data is separate from the DynastyMind report database; we do not send assessment answers, full reports or counsel text to Clerk. Original ChatGPT accounts retain separate ownership and are not automatically merged by email. Your browser also stores necessary sign-in preference and cache-ownership identifiers. When you explicitly sign out, unfinished assessments, completed local results, counsel cache and return markers are cleared from that device. Google's own processing is described in its Privacy Policy.

Once paid checkout is enabled, payment is completed on a Stripe-hosted page. Payment details go directly to Stripe and are handled under its Privacy Policy. Hosting, network and security providers may also process data as needed to provide infrastructure.

We do not sell assessment answers or counsel content, and we do not use them for targeted advertising. If that practice ever changes, we will update this policy first and obtain consent where required.

6. Retention and deletion

An unfinished assessment draft remains valid for 7 days after the last saved answer, then expires and is removed when read. A completed local result and recent conversation text remain until you explicitly sign out, clear site data, complete a new retake, or the app replaces or invalidates them. Signing out or clearing browser data does not automatically delete the server-side account, reports, orders, subscription or authoritative allowance records.

DynastyMind funnel events never store assessment answers or counsel text. AI request content is transmitted to generate the answer and is not written as funnel analytics. The active AI provider, hosting and network providers may still process or retain relevant data under their own terms.

Retention for operator-held account, purchase and support records: Transaction records: 7 years; support records: 24 months / 交易记录 7 年；客服记录 24 个月. Data should be kept only as long as needed for the purposes above, disputes, financial records or legal duties.

To request access, correction or deletion of data held by DynastyMind, contact info@melbmarketing.com. Deletion may not cover records that must be retained by law or are needed for refunds or fraud prevention.

7. Your choices and rights

• You can choose not to use AI counsel and avoid sending sensitive content to a model;
• You can clear unfinished drafts, completed local results and recent conversation text in browser settings; this does not automatically delete server-side account or purchase records;
• Once subscriptions are enabled, you can cancel future renewals;
• Depending on your location, you may also have rights to access, correct, delete, restrict, object or complain.

8. Security, international processing and changes

We use access controls, data minimisation and transport protections proportionate to the service, but no internet service can promise absolute security. Clerk, Google (sign-in and private Gemini tests), OpenAI, Stripe and infrastructure providers may process data outside your country or region.

If our purposes, providers or data practices materially change, we will update the effective date and provide an appropriate notice.

Privacy contact: info@melbmarketing.com.