This Privacy Policy explains what information the Digital Valley 360 platform collects, how we use it, who we share it with, and the choices you have. It covers the command center and client portals at app.digitalvalley360.com, accounts managed by our partner agencies, and the AI receptionist and web chat assistants we operate for our clients.
Digital Valley 360, LLC ("DV360", "we", "us"), an Arizona limited liability company, operates the platform. This policy covers three groups of people:
For end customers, the client business decides why their information is collected and we process it on that business's behalf as a service provider. The client's own privacy notice governs that relationship. This policy explains how the platform handles the data.
Name, email address, role, account type, the organization you belong to, your preferences, and a securely hashed password managed by our authentication provider. We also record when you accept our Terms of Use and which version you accepted.
Website content, blog posts, page text and images, brand assets, business details such as hours, services, pricing and contact information, knowledge base entries used by AI assistants, tasks, comments, edit requests, social posts and approvals, and files you upload.
When a client business connects a service, we receive data from it to provide the related features. This can include website analytics from Google Analytics, search performance data from Google Search Console, and, when social features are connected, account and post information from Facebook, Instagram or Google Business Profile.
When someone interacts with an AI receptionist or web chat assistant we operate for a client, we collect the content of the conversation, the phone number or other contact details they provide, call metadata such as time and duration, recordings and transcripts where recording is enabled, and a summary of the conversation for the client's follow-up.
Sign-in events, actions taken in the platform, browser and device type, approximate location derived from IP address, and error and performance logs. We use this to keep the platform secure and working.
We do not sell personal information, and we do not use end customer conversations to market to those customers ourselves.
Several platform features use artificial intelligence models operated by third-party providers. Content you submit to these features, such as questions to the ATLAS assistant, text to be drafted or rewritten, and the conversations end customers have with an AI receptionist or web chat, is sent to those providers to generate a response. We use business-grade services whose terms restrict them from using our data to train their models. AI output can be wrong, and platform users are asked to review it before relying on or publishing it.
We share information only as needed to operate the platform and provide services:
| Provider | What it does for the platform |
|---|---|
| Supabase | Database, authentication and file storage for the platform. |
| Netlify | Hosting and content delivery for the platform and for client websites we host. |
| Anthropic | AI language models behind the ATLAS assistant, content drafting and the AI receptionist and web chat responses. |
| Vapi and its telephony carriers | Phone call handling, speech recognition and voice for the AI receptionist. |
| ElevenLabs | Text to speech voice for the assistant in the platform. |
| Google Analytics, Google Search Console and Google Business Profile data when a client connects them, and Google Workspace for client file workspaces we set up. | |
| Meta | Facebook and Instagram account and post data when a client connects them for social features. |
We will update this list when providers change. Providers may be located in the United States or other countries.
Where a client grants the platform access to Google Analytics or Google Search Console, we use that data only to display analytics and search performance to that client and its authorized partner, to generate SEO recommendations for that client, and to operate the related features. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide these features, to comply with law, or as part of a business transfer. Our use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
AI receptionist calls and web chats we operate for a client are handled by an automated assistant. Calls may be recorded and transcribed so the client can review them and follow up. The client business is responsible for telling its customers that calls may be recorded and handled by an AI assistant where the law requires, and we configure the assistant to disclose this at the start of a call when asked to. Recordings, transcripts and summaries are available only to the client business, its authorized partner and DV360 staff supporting the account.
We keep account information for as long as the account is active and for a reasonable period afterward to meet legal, accounting and dispute-resolution needs. Client content and end customer conversations are kept for as long as the client's services are active and for thirty days afterward so the client can request an export, unless the client asks us to delete them sooner or the law requires a longer period. Usage and security logs are kept for a limited period appropriate to their purpose.
We protect information with encryption in transit, encrypted storage by our hosting providers, role-based access, database-level rules that limit every user to their own organization's data, and access logging. Secrets and API keys are stored server-side and never in the browser. No system is perfectly secure, so we cannot promise that information will never be accessed without authorization, but we will tell affected clients about a confirmed breach as required by law.
Platform users can update their name, preferences and password in the platform. You can ask us to access, correct, export or delete your personal information by contacting us. If you are an end customer of a client business, please contact that business first, and we will help them respond.
Residents of California and other states with privacy laws may have additional rights, including the right to know what personal information we hold, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise a right, contact us through the details below. We may need to verify your identity before acting on a request.
The platform is for businesses and is not directed to children under thirteen. We do not knowingly collect personal information from children. If you believe a child has provided information through a client feature, contact us and we will delete it.
We may update this policy from time to time. We will post the new version here with a new version date and, for material changes, notify platform users when they sign in.
Privacy questions and requests can be sent to Digital Valley 360, LLC through the contact page at digitalvalley360.com.