PRIVACY POLICY
Dovito® Business Solutions, Ltd.
Effective Date: August 17, 2023
Last Updated: October 8, 2025
1. Introduction
Dovito® Business Solutions, Ltd. (“Dovito®,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our services, including systems integration, custom software development, and third-party software solutions provided through platforms such as app.dovito.com (HighLevel) when applicable.
By engaging with our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our services.
2. Information We Collect
2.1 Personal Information
We collect personal information that you provide directly to us, including:
- Name, email address, phone number, and business information
- Billing and payment information
- Account credentials and authentication data
- Business operational data, client information, and project details
2.2 Automatically Collected Information
We automatically collect certain information when you use our services:
- IP address, browser type, operating system, and device information
- Usage data, including pages visited, time spent, and navigation patterns
- Cookies and similar tracking technologies
2.3 Third-Party Platform Data
When we provide access to third-party software solutions (such as HighLevel at app.dovito.com), data collected and processed through those platforms is subject to both our Privacy Policy and the third-party provider’s privacy policy. We do not sell SaaS products that are not custom-built by Dovito. Any third-party SaaS is offered solely as a solution when applicable to meet your business needs.
3. How We Use Your Information
We use your information for the following purposes:
- Providing, maintaining, and improving our services
- Processing transactions and managing billing
- Communicating with you about services, updates, and support
- Customizing and personalizing your experience
- Analyzing usage patterns to improve functionality and user experience
- Complying with legal obligations and protecting our legal rights
- Detecting and preventing fraud, security threats, and illegal activity
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Service Providers and Contractors
We share data with essential service providers and contractors (including third-party platform providers like HighLevel, cloud hosting services such as AWS and Google Cloud Platform, and independent contractors) necessary for system operation and service delivery. These parties are contractually obligated to protect your data and use it only for the purposes we specify.
4.2 Legal Requirements
We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4.4 With Your Consent
We may share your information with third parties when you explicitly consent to such sharing.
5. Data Security and Storage
5.1 Security Measures
We implement industry-standard security measures to protect your data, including:
- TLS/SSL encryption in transit
- Encryption for sensitive data at rest
- Secure cloud infrastructure (primarily Amazon Web Services and Google Cloud Platform, located in the United States)
- Multi-factor authentication (MFA) where applicable
- Strict access controls limiting data access to authorized personnel only
5.2 Data Storage Location
Your data is hosted on secure cloud infrastructure, primarily Amazon Web Services (AWS) and Google Cloud Platform (GCP), located in the United States.
5.3 Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Upon cancellation of services, data is generally retained for up to 90 days for recovery purposes, then permanently deleted unless you request immediate deletion or migrate to another platform.
6. Your Rights and Choices
6.1 Access and Portability
You have the right to request access to your personal information and receive a copy of your data in a structured, commonly used, and machine-readable format (typically CSV, JSON, or via API). You may request a full export of your data at any time at no additional cost.
6.2 Correction and Update
You may update or correct your personal information by contacting us at legal@dovito.com.
6.3 Deletion
You may request deletion of your personal information, subject to legal retention requirements. Upon request, we will delete your data promptly unless we are required to retain it for legal, regulatory, or legitimate business purposes.
6.4 Opt-Out of Communications
You may opt out of receiving marketing communications by following the unsubscribe instructions in our emails or contacting us directly.
6.5 Cookie Management
You can manage cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of our services.
6.6 California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt out of the sale or sharing of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
7. GDPR Compliance (European Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
You also have the right to lodge a complaint with your local data protection authority.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and personalize content. You can control cookie settings through your browser, but disabling cookies may limit certain features of our services.
9. Third-Party Links and Services
Our services may contain links to third-party websites or integrate with third-party platforms (such as HighLevel). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
10. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete it promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and updating the “Last Updated” date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We take appropriate measures to ensure that your data receives adequate protection in accordance with applicable data protection laws.
13. Data Processing Agreement
13.1 Data Controller and Data Processor Relationship
For services we provide, you (the client) are the Data Controller and retain ownership of all client-uploaded data. Dovito and any third-party platform providers (such as HighLevel) act as Data Processors, processing data on your behalf in accordance with your instructions and applicable data protection laws.
13.2 Separate Data Processing Agreement
A separate Data Processing Agreement (DPA) is available upon request, particularly for clients subject to GDPR or other data protection regulations. The DPA outlines the specific terms governing data processing, security measures, data breach notification procedures, and sub-processor arrangements.
14. Business Model Clarification
Dovito® Business Solutions, Ltd. provides systems integration services, custom software development, and access to third-party software solutions when applicable to meet client needs. We do not sell SaaS products that are not custom-built by Dovito®. When we provide access to third-party platforms (such as HighLevel at app.dovito.com), these are offered solely as solutions to enhance your business operations, and data handling is governed by both our Privacy Policy and the third-party provider’s privacy policy.
15. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Dovito® Business Solutions, Ltd.
508 Main Street
Windsor, Colorado 80550
Email: legal@dovito.com
Phone: Available upon request