Privacy Policy | DGFari Studio

1. INTRODUCTION

1.1 Our Commitment to Privacy

DGFari Studio, LLC (“DGFari Studio,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you entrust to us. This Privacy Policy explains how we collect, use, store, share, and protect information when you:

Visit our website at www.dgfaristudio.com (the “Site”);
Purchase or use our services, including website design, AI chatbot integration, marketing automation, and related digital services (collectively, the “Services”);
Communicate with us via email, phone, chat, or any other channel;
Use websites, chatbots, or systems that we have built or manage on behalf of our clients;
Submit information through lead forms, chatbot conversations, or other interactive features on client websites we operate.

1.2 Scope of This Policy

This Privacy Policy applies to all personal information we collect across all channels and touchpoints. It applies equally to:

Clients: Real estate agents, brokers, brokerages, and other business entities who purchase our Services (“Client Data”);
End Users: Individuals who visit client websites we manage, interact with chatbots we operate, or submit information through systems we maintain (“End User Data”);
Prospects: Individuals who express interest in our Services but have not yet become clients (“Prospect Data”);
Website Visitors: Individuals who visit our Site (“Visitor Data”).

1.3 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email (to the address associated with your account) and will be effective thirty (30) days after such notification. Your continued use of our Services after any modification constitutes acceptance of the revised Privacy Policy. The “Last Updated” date at the top of this document indicates when the most recent changes were made.

1.4 Important Note About Client Responsibilities

If you are a DGFari Studio client who operates a website, chatbot, or digital system that we built or manage, you are responsible for posting your own privacy policy that explains to your end users how you collect and use their information. This Privacy Policy governs DGFari Studio’s practices only. We provide tools and guidance to help you comply with privacy laws, but compliance with respect to your end users is your responsibility.

1.5 Children’s Privacy

Our Services are intended for real estate professionals and other adults. They are not directed to individuals under the age of eighteen (18), and we do not knowingly collect personal information from anyone under the age of eighteen (18). If you believe we have inadvertently collected information from a person under the age of eighteen (18), please contact us at [email protected], and we will delete such information promptly.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

(a) Account and Registration Information: When you create an account, sign up for our Services, or enter into a Service Agreement, we collect your name, email address, phone number, mailing address, business name, real estate license number (if applicable), brokerage affiliation, and login credentials.

(b) Payment Information: When you make a payment, our payment processor (Stripe, Inc.) collects your credit card number, billing address, and related financial information. DGFari Studio does not store your full credit card numbers. We only retain the last four digits and expiration date for reference purposes.

(c) Client Materials: You may provide us with photographs, videos, property listings, logos, branding elements, biographical information, credentials, testimonials, and other content for use in your website and marketing materials.

(d) Communication Records: We collect and retain records of all communications between you and us, including emails, phone calls, chat transcripts, meeting notes, and support tickets.

(e) Survey and Feedback Information: Information you provide when completing surveys, providing testimonials, or giving feedback about our Services.

2.2 Information Collected Automatically

When you visit our Site or use websites and systems we manage, we automatically collect certain information:

(a) Log Data: Internet Protocol (IP) address, browser type, browser version, operating system, device type, pages visited, time spent on pages, referring/exit pages, and clickstream data.

(b) Analytics Data: Through Google Analytics and similar tools, we collect aggregated data about website traffic, user behavior, session duration, bounce rates, and conversion patterns.

(c) Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies. See Section 9 for our full Cookie Policy.

(d) Chatbot Interaction Data: When you or your end users interact with AI chatbots that we deploy, we collect conversation transcripts, timestamps, user queries, chatbot responses, and interaction metadata. This data is used to improve chatbot performance and train responses.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

(a) CRM Integrations: When you authorize us to integrate with your Customer Relationship Management (CRM) system (such as Follow Up Boss, kvCORE, LionDesk, or HubSpot), we may access contact records, lead data, communication history, and transaction data stored in your CRM.

(b) MLS Data Feeds: If you authorize Multiple Listing Service (MLS) integration, we may access property listing data, photos, and related information through MLS data feeds.

(c) Social Media Platforms: If you connect social media accounts or share our content, we may receive your profile information in accordance with the authorization you grant.

(d) Referral Partners: Real estate coaches, associations, or other partners who refer you to us may provide your contact information with your consent.

2.4 End User Data (Data Collected on Behalf of Clients)

When you use our Services, we collect and process information on your behalf from individuals who visit your website or interact with your chatbot. This includes:

(a) Lead Form Submissions: Name, email address, phone number, property interests, budget range, preferred locations, and other information voluntarily provided by visitors.

(b) Chatbot Conversations: Transcripts of conversations between visitors and the AI chatbot, including questions asked, responses provided, and any personal information disclosed during the conversation.

(d) Communication Data: Email addresses and phone numbers captured through lead capture forms, pop-ups, or chatbot interactions.

Important: We collect and process End User Data solely as a service provider on behalf of our clients. DGFari Studio is a “processor” or “service provider” under applicable privacy laws, and our clients are the “controllers” or “businesses” with respect to End User Data. We process End User Data only in accordance with our clients’ instructions and this Privacy Policy.

3. HOW WE USE YOUR INFORMATION

3.1 Purposes for Which We Use Information

We use the information we collect for the following purposes:

(a) Service Delivery: To provide, maintain, and improve our Services, including designing and developing your website, configuring your chatbot, setting up automation, integrating with your CRM, and providing ongoing support and maintenance.

(b) Communication: To communicate with you about your account, project status, support requests, billing matters, and updates to our Services or policies.

(d) Analytics and Improvement: To analyze usage patterns, diagnose technical issues, improve our Services, develop new features, and conduct research.

(e) Chatbot Training and Optimization: To review chatbot conversation transcripts, identify common questions, improve response accuracy, and optimize conversation flows. All training uses anonymized or aggregated data wherever possible.

(f) Marketing: To send you promotional communications about our Services, industry insights, case studies, and special offers. You may opt out of marketing communications at any time.

(g) Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.

(h) Security and Fraud Prevention: To protect our systems, detect and prevent fraud, unauthorized access, and other illegal activities.

(i) Enforcement: To enforce our Terms of Service, Privacy Policy, and other agreements.

3.2 Legal Basis for Processing

We process personal information based on the following legal grounds:

(a) Contractual Necessity: Processing necessary to perform our contract with you (the Terms of Service).

(b) Legitimate Interests: Processing necessary for our legitimate business interests, such as improving Services, marketing, and fraud prevention, provided that such interests are not overridden by your privacy rights.

(d) Legal Obligation: Processing necessary to comply with applicable laws and regulations.

4. HOW WE SHARE YOUR INFORMATION

4.1 Categories of Recipients

We do not sell your personal information to third parties. We share information only in the following limited circumstances:

(a) Service Providers and Vendors: We engage trusted third-party service providers to perform functions on our behalf, including:

(i) Hosting and Infrastructure: Vercel, Inc. (website hosting); Amazon Web Services (cloud infrastructure).

(ii) Payment Processing: Stripe, Inc. (payment processing).

(iii) Email and Communication: SendGrid, Mailchimp, or similar email service providers.

(iv) Analytics: Google LLC (Google Analytics).

(v) Customer Support: Zendesk, Freshdesk, or similar support platforms.

(vi) AI and Automation: OpenAI, LLC (GPT models for chatbot functionality); Make.com (automation platform).

(vii) CRM Platforms: As integrated with your account (Follow Up Boss, kvCORE, LionDesk, HubSpot).

All service providers are contractually obligated to use your information only for the purposes of providing services to us and are bound by confidentiality and data protection obligations.

(b) Professional Advisors: We may share information with our attorneys, accountants, auditors, and insurance providers as necessary for our business operations and legal compliance.

(c) Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.

(d) Legal Requirements: We may disclose information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to: (i) protect our rights, property, or safety; (ii) protect the rights, property, or safety of our clients or the public; (iii) investigate fraud or illegal activity; or (iv) respond to a government request.

(e) With Your Consent: We may share information with third parties when you explicitly authorize us to do so.

4.2 Data Sharing with AI Platforms

When you use our AI chatbot features, conversation data may be transmitted to OpenAI, LLC for processing. OpenAI’s use of this data is governed by their API data policy, which states that:

Data sent via the API is not used to train OpenAI’s general models;
Data is retained by OpenAI for up to thirty (30) days for abuse monitoring purposes;
After thirty (30) days, API data is deleted unless legally required to be retained.

We do not send personally identifiable information to AI systems unless necessary for the chatbot to perform its function (e.g., when a user voluntarily provides their contact information during a chatbot conversation).

4.3 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you or any individual. This includes industry reports, trend analyses, and statistical summaries derived from multiple clients’ data.

5. DATA SECURITY

5.1 Security Measures

We implement a comprehensive, multi-layered security program to protect your information, including:

(a) Encryption: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS) 1.3. Sensitive data at rest is encrypted using AES-256 encryption.

(b) Access Controls: Access to personal information is restricted to authorized personnel who need the information to perform their job functions. All access is authenticated and logged.

(c) Secure Infrastructure: Our hosting infrastructure employs firewalls, intrusion detection systems, DDoS protection, and regular security patching.

(d) Regular Audits: We conduct regular security assessments, vulnerability scans, and penetration testing.

(e) Employee Training: All team members undergo security awareness training and are bound by confidentiality agreements.

(f) Incident Response: We maintain a written incident response plan to address any security breaches promptly and effectively.

5.2 No Absolute Guarantee

While we take commercially reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You acknowledge that you provide information at your own risk.

5.3 Breach Notification

In the event of a security breach that compromises your personal information, we will notify you within seventy-two (72) hours of discovery, to the extent required by applicable law, including the Florida Information Protection Act and other breach notification statutes. Such notification will include:

The date and nature of the breach;
The types of information involved;
Steps we have taken to contain and mitigate the breach;
Steps you can take to protect yourself.

6. DATA RETENTION

6.1 Retention Periods

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including:

(a) Active Client Data: Retained for the duration of your Subscription plus thirty (30) days after cancellation or termination.

(b) Inactive Client Data: After cancellation, data is retained for thirty (30) days to allow for export and transition, then securely deleted.

(c) Chatbot Conversation Data: Retained for twelve (12) months to enable performance analysis and improvement, then anonymized or deleted.

(d) Financial Records: Retained for seven (7) years as required by applicable tax and accounting laws.

(e) Communication Records: Retained for three (3) years.

(f) Analytics Data: Retained in aggregated, anonymized form indefinitely.

6.2 Early Deletion

You may request early deletion of your personal information by contacting us at [email protected]. We will comply with such requests within thirty (30) days, subject to our legal obligations to retain certain records and the need to maintain records for dispute resolution.

6.3 Secure Deletion

When personal information is deleted, it is removed from active systems and securely overwritten or destroyed in accordance with industry-standard data destruction practices.

7. YOUR RIGHTS AND CHOICES

7.1 Overview of Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information:

(a) Right to Access: You have the right to request a copy of the personal information we hold about you.

(b) Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.

(c) Right to Deletion: You have the right to request deletion of your personal information, subject to certain legal exceptions.

(d) Right to Restriction: You have the right to request that we restrict processing of your personal information in certain circumstances.

(e) Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format.

(f) Right to Object: You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.

(g) Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

7.2 California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA) Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA/CPRA”), grants you the following specific rights:

(a) Right to Know: You have the right to request that we disclose what personal information we have collected about you in the past twelve (12) months, including:

(i) The categories of personal information collected;

(ii) The categories of sources from which the information was collected;

(iii) The business or commercial purpose for collecting the information;

(iv) The categories of third parties with whom we share the information;

(v) The specific pieces of personal information collected about you.

(b) Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

(c) Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.

(d) Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. If this practice ever changes, we will provide a “Do Not Sell or Share My Personal Information” link and honor opt-out requests.

(e) Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to that which is necessary to provide the Services.

(f) Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

(g) Shine the Light Law: California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes without your consent.

7.3 Florida Information Protection Act

If you are a Florida resident, you have rights under the Florida Information Protection Act (FIPA), including the right to receive notice of security breaches affecting your personal information.

7.4 Nevada Privacy Rights

If you are a Nevada resident, you have the right to opt out of the sale of certain personal information. We do not sell personal information as defined by Nevada law.

7.5 European Union (GDPR) Rights

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) grants you the rights set forth in Section 7.1, plus:

(a) Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.

(b) Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

7.6 How to Exercise Your Rights

To exercise any of your rights, please contact us at:

Email: [email protected]

Mail: DGFari Studio, LLC, Attention: Privacy Officer

We will respond to your request within forty-five (45) days of receipt. If we require additional time, we will inform you of the reason and extension period. We may need to verify your identity before processing your request.

7.7 Authorized Agents

You may designate an authorized agent to make requests on your behalf. The agent must provide written authorization signed by you, and we may verify your identity directly with you.

8. DATA TRANSFERS AND INTERNATIONAL PROCESSING

8.1 United States Based

DGFari Studio is based in the United States. All data is stored and processed on servers located in the United States. If you access our Services from outside the United States, you consent to the transfer, storage, and processing of your information in the United States.

8.2 Cross-Border Transfers

If you are located outside the United States, please be aware that the United States may not have data protection laws equivalent to those in your jurisdiction. By using our Services, you consent to the transfer of your personal information to the United States.

8.3 EU-U.S. Data Protection

For data transfers from the European Union, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of personal information.

9. COOKIE POLICY

9.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

9.2 Types of Cookies We Use

(a) Essential Cookies: These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and account access. You cannot opt out of essential cookies.

(b) Performance/Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use Google Analytics for this purpose.

(c) Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.

(d) Targeting/Advertising Cookies: These cookies may be used to deliver advertisements that are relevant to your interests. We may use these for retargeting purposes.

9.3 Third-Party Cookies

Third-party services integrated into our Site or client websites may also set cookies, including:

Google Analytics and Google Ads;
Facebook Pixel;
CRM platform cookies;
Chatbot service cookies.

These third parties use cookies in accordance with their own privacy policies.

9.4 Cookie Management

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse all cookies or to indicate when a cookie is being sent. However, if you disable cookies, some features of our Services may not function properly.

9.5 Do Not Track Signals

Our Site does not currently respond to “Do Not Track” signals from browsers. However, you can opt out of certain tracking using the mechanisms described in this Privacy Policy.

10. THIRD-PARTY LINKS AND SERVICES

Our Site and client websites may contain links to third-party websites, services, or resources that are not owned or controlled by DGFari Studio. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. REAL ESTATE AND FAIR HOUSING COMPLIANCE

11.1 Special Category Data

As a provider of services to real estate professionals, we may process information that could be considered sensitive under certain privacy laws, including property preferences, location data, and financial information. We process this data only as necessary to provide our Services and in accordance with applicable law.

11.2 Fair Housing Obligations

We are committed to helping our clients comply with fair housing laws. Our chatbots and systems are designed and configured to avoid discriminatory practices. However, ultimate compliance with fair housing and anti-discrimination laws is the responsibility of our clients. We provide training and guidance, but we are not liable for discriminatory conduct by our clients or their end users.

12. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DGFari Studio, LLC

Attention: Privacy Officer

Email: [email protected]

Website: www.dgfaristudio.com

We will respond to all inquiries within five (5) business days.

13. ACKNOWLEDGMENT

BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THE PRACTICES DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, YOU MUST NOT USE OUR SERVICES.