Privacy Policy
Effective date: October 5, 2026
Dtwo, Inc. (“Dtwo,” “we,” “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and process information in connection with our website and our services.
Information you provide directly
When you engage in certain activities on this site, such as requesting product information or downloading software or content, Dtwo may ask you to provide certain information about yourself such as your name, e-mail address, and other personal identifying information. We use this information to respond to inquiries, provide requested materials, and communicate about our products and services.
Automatically collected data
We may automatically collect certain information when you interact with our website or services, including IP address, browser type, and device information. We use it to operate, secure, and improve them. Cookies and analytics are covered in the next section.
Cookies and analytics
We use a necessary cookie, dtwo_consent, to
remember your privacy choices. It is shared across dtwo.ai, the blog,
docs, signup and the Dtwo console, so you choose once for all of them.
We ask again only when one of these sites asks about something you have
not decided yet, or six months after you decided.
With your permission, we use Google Analytics, provided by Google LLC,
to measure how our website and product are used. Analytics is off until
you accept it. Once on, Google Analytics sets cookies (_ga
and _ga_*) that recognize your browser when it returns, for
up to two years. When you are signed in to the Dtwo console, these
measurements carry your organization’s account identifier and plan type,
not your name or e-mail address.
You can change or withdraw your choice at any time through , on this page, on the sign-in page, and in the account menu. Withdrawing turns analytics off on all of these sites. Its cookies are deleted on the site where you withdraw, and on each other site the next time you visit it. We honor the Global Privacy Control signal for any purpose that identifies you.
We record each choice you make in the cookie banner or in Privacy choices, so we can show what you chose and when. Each record holds:
- A random consent ID, kept in the cookie and shown in Privacy choices
- The site where you made the choice
- The purposes you accepted and declined, and the version of each one you were shown
- Whether you accepted all, rejected all, saved your own selection, or withdrew
- Whether your browser sent the Global Privacy Control signal
- When we received it
A record holds no IP address, page address, browser or device details, e-mail address, or account identifier. We use these records for nothing else and delete them after 24 months. If you contact us about your choices, include your consent ID so we can find them.
Information Processed Through the Service
When you use Dtwo’s platform, we may process data on your behalf in order to provide security, policy enforcement, and observability (“Service Data”).
This may include:
- MCP tool, resource and prompt information
- Metadata about agent actions, workflows, and system interactions
- Policy decisions, including allow/deny outcomes
- System and Proxy Logs, including technical logs (such as HTTP or policy engine logs) that contain metadata about system interactions, request routing, and protocol-level details.
Dtwo processes this information solely to provide, secure, troubleshoot and improve the service. Dtwo does not use Service Data for marketing purposes. However, Dtwo may use aggregated and de-identified information derived from Service Data to analyze usage trends, improve the service, and describe overall platform performance (for example, total request volume across customers).
How we share information
We may share information with:
- Service providers and vendors who support our operations
- Cloud infrastructure providers
- Analytics providers, when you allow analytics
- Legal or regulatory authorities when required by law
We do not sell personal information.
Role of Dtwo
For personal information collected directly through our website (such as contact information), Dtwo acts as a data controller.
For Service Data processed through the Dtwo platform, Dtwo acts as a service provider or data processor on behalf of its customers. We process information as directed by the customer, which may include user identifiers or masked/anonymized identifiers depending on customer configuration.
Data retention
We retain personal information only as long as necessary to fulfill the purposes described in this policy or as required by law. Service Data retention is determined by customer configuration and operational requirements.
International transfers
Information may be transferred to and processed in the United States and other countries where we operate.
Protecting Your Privacy
We implement administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption where appropriate, and logging/monitoring.
Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal information. To exercise these rights, contact us at legal@Dtwo.ai.
Changes to this policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.