PRIVACY POLICY – Dygitology

Last updated: July 28, 2025

1. Introduction

Dygitology Agency LLC (“Dygitology,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This policy applies to our website dygitology.com and to the AI services we design, deploy, and operate for our clients, including AI receptionists, AI voice agents, WhatsApp automation, customer engagement systems, and custom AI deployments (collectively, the “Services”).

By using our website or Services, you agree to the practices described in this policy.

2. Who We Are (Data Controller)

For personal data collected through our own website and business operations, the data controller is:

Dygitology Agency LLC

San Leandro, California, USA

Email: info@dygitology.com

Important distinction: When we build and operate AI systems for a client (for example, an AI receptionist deployed for a restaurant or clinic), that client is typically the data controller for the personal data processed through their system, and Dygitology acts as a data processor on their behalf, under a separate Data Processing Agreement. In those cases, the client’s own privacy policy governs how end-customer data is used, and this policy governs only our direct relationship with you.

3. Information We Collect

Information you give us directly:

Name, email address, phone number, and company details when you contact us, request a consultation, or book a call
Message content and any information you choose to share in enquiries
Business information provided during a project (for client onboarding)

Information collected automatically on our website:

IP address, browser type, device information, and operating system
Pages visited, time spent, and referring website
Cookies and similar technologies (see our Cookie Policy)

Information processed through the AI Services we operate:

When we run an AI system on behalf of a client, that system may process:

Conversations and messages (including via WhatsApp, voice, and chat)
Booking, reservation, and order details
Customer contact information
Voice recordings and transcriptions, where voice agents are used

This information is processed under the client’s instructions and their Data Processing Agreement with us.

4. How We Use Your Information

We use personal information to:

Respond to your enquiries and provide consultations
Deliver, operate, maintain, and improve our Services
Communicate with you about projects, updates, and support
Send administrative information and, where permitted, relevant business updates
Comply with legal obligations
Protect the security and integrity of our systems

We do not sell your personal information.

5. AI, Automated Processing, and Voice Data

Our Services use artificial intelligence to handle conversations, answer questions, take bookings, and automate tasks. You should be aware that:

Interactions with an AI receptionist or AI voice agent are handled by automated systems, with human handoff available where configured.
Where voice agents are used, calls may be recorded and transcribed to provide and improve the service, subject to applicable consent and notice requirements.
We do not use client data or end-customer data to train third-party, publicly available AI models. For clients on private or on-premise (“Sovereign AI”) deployments, data remains within the client’s own environment and is not shared with external AI providers.

6. Legal Bases for Processing (EU/EEA/UK — GDPR)

Where GDPR applies, we rely on the following legal bases:

Consent — where you have given clear consent (e.g. marketing communications, certain cookies)
Contract — where processing is necessary to provide Services you or your organization requested
Legitimate interests — to run and improve our business, secure our systems, and communicate with clients, provided your rights do not override these interests
Legal obligation — where we must process data to comply with the law

7. How We Share Information

We may share information with:

Service providers who help us operate (e.g. hosting, communication tools, analytics), bound by confidentiality obligations
Infrastructure and communication platforms used to deliver Services (for example, messaging and voice providers)
Legal and regulatory authorities where required by law
Professional advisors such as lawyers and accountants

We require all third parties to respect the security of personal data and to process it in accordance with the law. We do not sell personal data to third parties.

8. International Data Transfers

Dygitology operates across multiple regions, including the United States, the European Union, and Pakistan. Your information may be transferred to and processed in countries other than your own. Where we transfer personal data internationally, we take steps to ensure an appropriate level of protection, including standard contractual clauses or equivalent safeguards where required.

For clients requiring data to remain within a specific jurisdiction or on-premise, we offer private and Sovereign AI deployments designed so that data does not leave the client’s chosen environment.

9. Data Retention

We keep personal information only as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Retention periods for data processed on behalf of clients are governed by our agreement with each client. When data is no longer needed, we securely delete or anonymize it.

10. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information
Object to or restrict certain processing
Withdraw consent at any time
Request a copy of your data in a portable format
Lodge a complaint with a supervisory authority (in the EU, your local Data Protection Authority; in Italy, the Garante per la protezione dei dati personali)

To exercise any of these rights, contact us at info@dygitology.com. If your data is processed through a client’s AI system, we will direct your request to the appropriate controller.

10A. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), provides you with specific rights regarding your personal information.

Categories of personal information we may collect. In the past 12 months, we may have collected the following categories: identifiers (such as name, email, phone number, IP address); commercial information (such as services enquired about); internet or network activity (such as website usage); and, where you provide it, professional or business information. For AI systems we operate on behalf of clients, additional categories may be processed under the client’s instructions as described in this policy.

How we use and disclose it. We use these categories for the business purposes described in Section 4 and disclose them to service providers as described in Section 7.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

Your California rights. Subject to certain exceptions, you have the right to:

Know what personal information we collect, use, and disclose
Access a copy of the personal information we hold about you
Correct inaccurate personal information
Delete personal information we have collected from you
Opt out of the sale or sharing of personal information (note: we do not sell or share)
Limit the use of sensitive personal information
Non-discrimination for exercising your rights

How to exercise your rights. Submit a request to info@dygitology.com. We will verify your request before responding, and we will not discriminate against you for exercising any of these rights. You may use an authorized agent to submit a request on your behalf.

11. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, or misuse. These include access controls, encryption where appropriate, and secure infrastructure. For clients with heightened requirements, we offer air-gapped and on-premise deployments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children’s Privacy

Our website and Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent version. Material changes will be communicated where appropriate.

15. Contact Us