Legal & Transparency
Privacy Notice
This privacy notice explains how Dossier (diplov.com) collects, uses, stores, and protects your personal information. We are committed to transparency and handling your data responsibly.
Data Controller
Twindevs, LLC — diplov.com
For privacy inquiries, use the contact form at /contact, email dylan@diplov.com, or reach out through the portal messaging system.
Data We Collect
Public Contact Form
Name, email address, optional company name, contact reason, project parameters, message content, IP address, and browser user agent.
Portal Accounts
Email address, optional name, optional phone number (for SMS notifications upon opt-in), and organization details.
Proposals & Messaging
Proposal details, threaded conversation messages, file attachment metadata, and binary file content stored securely in Cloudflare R2.
AI Assistant & Search
Queries, search terms, ephemeral 5-query anonymous session tokens, conversation history for signed-in users, and fit-analysis submissions.
Security & Consent Records
Immutable event audit logs, session hashes, rate limit tokens, and TCPA-compliant SMS/email consent records.
Third-Party Services
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database hosting (Postgres) | All persisted application data |
| Vercel | Web application hosting | Request logs and deployment data |
| Cloudflare & R2 | CDN, WAF, Turnstile, R2 storage | IP, headers, uploaded file binaries |
| Cloudflare Workers AI | Primary AI assistant & search | Query content & published corpus context |
| Postmark | Transactional email delivery | Email address, message content |
| Twilio | SMS notifications (opt-in only) | Phone number, notification text |
| Google Analytics (GA4) | Anonymized site usage measurement | Anonymized page views, CTA interactions |
| Sentry | Application error monitoring | Sanitized exception context |
Your Rights (GDPR / CCPA)
You have the right to access, export, rectify, or delete your personal data at any time.
- Data Access & Portability: Request a machine-readable JSON export of all your stored data.
- Data Deletion: Request full erasure of your user profile, messages, assistant sessions, and R2 attachment binaries.
- Consent Revocation: Update portal consent settings or reply STOP to any SMS notification.