Privacy notice

Unseen Dynamics is a product of Vimberg Holding OÜ (Estonia). For GDPR purposes, your organisation is the data controller for any customer data processed during a Diagnostic Sprint engagement; we act as data processor under a Data Processing Agreement signed at the start of each engagement.

During a Diagnostic Sprint, the platform stores: engagement metadata (sprint name, product type, dates); survey responses (anonymous, tied only to a random respondent token); document-folder connection metadata (file names and types — not file content; see zero-storage below); AI-generated report content (which you approve before finalisation); facilitator notes; and dialogue history for the AI-assisted clarification and review flows.

Your source documents (interview transcripts, org charts, strategy docs) stay in your Google Drive throughout the engagement. The platform connects read-only via OAuth at report-generation time only — file content is read into the AI model in memory and discarded; nothing is persisted to our database except file names, types and sizes. You can revoke the connection at any time.

All customer data is hosted in the EU (Supabase, Frankfurt). The web application runs on Vercel’s EU region. See the sub-processor list for third parties that may process small amounts of metadata under our DPA.

You can request access, rectification, or erasure of your data at any time. Erasure requests for a Diagnostic Sprint engagement remove all customer content from our systems within 30 days. Aggregate, irreversibly-hashed research data — which contains no customer content — is retained for research purposes and is exempt from erasure requests under GDPR Article 17(3)(d).

To exercise these rights, contact priit@vimberg.com.

Customer data is retained for 2 years after engagement completion unless you request an extension or earlier deletion. Aggregate research data is retained indefinitely.

AI-assisted clarification, report generation, and review use the Anthropic API under commercial terms — inputs are not used for model training, and are auto-deleted by Anthropic within 30 days per their published terms.