Privacy Policy

1. Who we are

DMI Flow ("DMI Flow," "we," "us") provides AI receptionist, lead‑recovery, CRM, and marketing services to local businesses. This policy explains how we handle personal information when you visit dmiflow.com, request a demo, become a client, or interact with a business that uses our services.

2. Information we collect

Information you give us

• Contact and business details — name, business name, email, phone, industry, and anything you type into a demo, contact, or checkout form.
• Account and billing information — plan, billing address, and payment details. Payments are processed by our payment processor; we don't store full card numbers.
• Client configuration — business hours, services, pricing, calendars, and phone routing you provide so we can build your AI receptionist and CRM.

Information collected automatically

• Device and usage data — IP address, browser and device type, pages viewed, referring URLs, approximate location, and timestamps.
• Cookies and similar technologies — see Section 7.
• Identity signals — on sites where visitor identification is enabled, hashed device and browser signals used for matching, as described in Section 3.

Information from other sources

• Identity resolution and intent‑data partners that provide name, email, postal address, and in‑market interest signals associated with device signals collected on our clients' websites.
• Advertising platforms (Meta, Google) that report campaign performance and audience matches.

3. Website visitor identification

Our Capture and Grow services include a script (a "pixel") placed on a client's website. When enabled, the pixel collects device and browser signals from visitors and sends them to a licensed identity‑resolution provider, which attempts to match those signals to a consumer record in its database. When a match is found, the provider returns contact information — typically name, email address, and postal address — plus, in some cases, indicators that the person is actively researching products or services in that category.

We place matched records in the client's CRM so the client can follow up by email and online advertising. Under our standard terms, clients do not send text messages to identified visitors who have not separately consented to receive texts.

• Identification is probabilistic. Not every visitor is matched, and matches can be wrong. We do not represent that any identified record is verified.
• We do not use visitor identification for websites in the medical, legal, or financial‑services sectors, and we do not knowingly identify visitors under 18.
• We honor Global Privacy Control browser signals on dmiflow.com and require clients to honor them on sites where the pixel is installed.
• Our identity‑resolution provider maintains its own opt‑out. Contact us (Section 11) and we will remove you from our and our clients' identified‑visitor records and forward your request to the provider.

4. Calls, texts & the AI receptionist

When you call a business that uses DMI Flow, the call may be answered by an AI voice agent. Calls are recorded and transcribed so we can book appointments, take messages, route the call, and improve accuracy. Recording notices are provided in the greeting as required by law. Transcripts and summaries are stored in the client's CRM and are visible to that business.

Text messages (for example, appointment confirmations or a text back after a missed call) are sent only in response to your call or with your consent. Reply STOP to any message to opt out. Message and data rates may apply.

Call audio and transcripts are processed by our telephony and AI providers (Section 6). We do not use call content to train AI models that serve other clients.

5. How we use information

• Provide, operate, and support our services, including answering calls, booking appointments, identifying visitors, and running follow‑up and advertising on behalf of clients.
• Respond to demo and sales inquiries, and contact you about your request by phone, text, or email.
• Process payments and manage client accounts.
• Measure, analyze, and improve our services and website.
• Detect fraud and abuse and enforce our terms.
• Comply with legal obligations.

6. How we share information

• Our clients — information collected on a client's behalf (calls, form fills, identified visitors) is shared with that client.
• Service providers — we use vendors for telephony and messaging, AI language processing, CRM and automation, hosting, analytics, payment processing, identity resolution, and intent data. They process information under contract and only to provide services to us.
• Advertising platforms — for Grow clients, we upload audiences (such as hashed emails of identified visitors) to Meta and Google to run and measure campaigns. Under California law, this may be considered "sharing" or a "sale." You can opt out (Section 8).
• Legal and safety — when required by law or to protect rights, safety, and property.
• Business transfers — in a merger, acquisition, or sale of assets.

We do not sell personal information for money.

7. Cookies & tracking

dmiflow.com uses cookies and similar technologies for site functionality, analytics, and — where we run our own advertising — retargeting and conversion measurement. Client websites that use our pixel set identifiers used for visitor identification and advertising. You can control cookies through your browser settings; blocking some cookies may affect site functionality. We honor Global Privacy Control signals as an opt‑out of sale/sharing. We do not respond to browser "Do Not Track" signals, which have no common standard.

8. Your choices & opt‑outs

• Opt out of sale/sharing and targeted advertising — email christian@autoshopreceptionist.com with the subject "Do Not Sell or Share My Personal Information," or enable Global Privacy Control in your browser.
• Remove yourself from identified‑visitor records — same contact; include the email address(es) and postal address you want suppressed.
• Email — use the unsubscribe link in any marketing email.
• Text messages — reply STOP.
• Calls — ask the AI receptionist or the business to be transferred to a person, or to have your number added to their do‑not‑call list.

9. California privacy rights

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the right to:

• Know what personal information we collect, use, disclose, sell, or share, and to access a copy of it.
• Delete personal information we collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information.
• Limit the use of sensitive personal information. We do not use sensitive personal information for purposes that require this right.
• Non‑discrimination for exercising any of these rights.

Categories collected in the last 12 months: identifiers (name, email, phone, postal address, IP address, device identifiers); commercial information (services requested, purchases); internet activity (pages viewed, interactions with client websites); geolocation (approximate, from IP); audio (call recordings); inferences (in‑market interest signals from intent‑data partners). Sources, purposes, and recipients are described in Sections 2–6.

To exercise your rights, email christian@autoshopreceptionist.com with "California Privacy Request" in the subject. We will verify your identity by matching the information you provide against our records and respond within 45 days. You may use an authorized agent; we will require proof of authorization. If your information was collected on behalf of one of our clients, we will forward your request to that client and assist them in responding.

10. Retention & security

We keep personal information for as long as needed to provide services and for legitimate business purposes such as billing, dispute resolution, and legal compliance. Call recordings and transcripts are retained per each client's configuration, by default 12 months. Identified‑visitor records are retained in the client's CRM until the client deletes them or the engagement ends. We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit and access controls. No system is completely secure.

11. Children, changes & contact

Our services are for businesses and are not directed at children under 18. We do not knowingly collect personal information from children.

We may update this policy from time to time. The effective date at the top reflects the most recent version. Material changes will be noted on this page.

Contact: DMI Flow · Oxnard, California · christian@autoshopreceptionist.com