Privacy Policy

This Privacy Policy describes how Davinci Tech Solutions ("we", "us", "our") collects, uses, and protects information across all of our properties and services, including:

The marketing website at davincitechsolutions.com
The client portal at portal.davincitechsolutions.com
Our products: DaVinci PBX, D Line, and DaVinci AI Agent
Our IT services, support engagements, and consulting work

1. Scope of This Policy

This unified policy applies to anyone who interacts with us — website visitors, contact-form submitters, client portal users, end users of our mobile and desktop apps, and customers of our managed services. Sections 13–15 contain product-specific details that supplement (but do not replace) the general terms in sections 1–12.

2. Data We Collect

Website Visitors

Pages visited, referring URL, browser, device type, and approximate location (from IP)
Information you submit through contact, demo, or quote forms (name, email, phone, message)
Cookie and analytics identifiers (see Section 4)

Account Holders & Customers

Name, email address, phone number
Company or organization name, role, billing contact
Login credentials (encrypted at rest)
Billing and payment metadata (we do not store full card numbers — payments are handled by PCI-compliant processors)

Service Delivery Data

Configuration data for the systems we manage on your behalf
Support tickets, chat transcripts, and call notes
Diagnostic logs and crash reports from our products

Communication & Usage Data (Products)

Specific data collected by each product is detailed in Sections 13–15.

3. How We Use Data

Provide, maintain, and improve our website, portal, products, and services
Respond to inquiries, provide quotes, and onboard new customers
Deliver push notifications, alerts, and service communications
Monitor performance, troubleshoot issues, and prevent abuse
Send service updates and, where permitted, marketing communications (you can opt out at any time)
Comply with legal, regulatory, and contractual obligations

4. Cookies & Analytics

Our website uses a small number of cookies and similar technologies:

Essential cookies — required for the site and portal to function (session, security, load balancing)
Analytics cookies — aggregated usage statistics (pages, sessions, traffic sources) so we can improve the site
Preference cookies — remember your theme and language choice

We do not run third-party advertising trackers and do not sell visitor data. You can disable cookies in your browser; some features may not work without essential cookies.

5. Third-Party Services

We rely on a limited set of vetted providers:

Cloud hosting & infrastructure — to run our website, portal, and product backends
Firebase Cloud Messaging (Google) — Android push notifications
Apple Push Notification Service — iOS push notifications
Sentry or similar — crash reporting and diagnostics
Telephony / SIP carriers — to route voice calls and SMS for PBX and D Line
AI providers (e.g. OpenAI, Anthropic, Google) — for the AI Agent product, governed by their data-processing terms
Payment processors — PCI-compliant providers for billing
Email & ticketing — to deliver transactional email and manage support requests

We do not sell personal data. We share data only with:

The third-party service providers listed in Section 5, strictly to deliver the service
Your organization's administrator, who can see usage data and logs associated with accounts they manage
Authorities, when required by law, subpoena, or valid legal process
An acquirer or successor entity in the event of a merger, acquisition, or sale of assets (with notice to affected users)

7. Data Retention

Account data: retained while your account is active; deleted within 30 days of account closure
Contact-form submissions: 24 months unless you become a customer
Support tickets & chat transcripts: 24 months
Billing records: as required by tax and accounting law (typically 7 years)
Diagnostic logs: 90 days
Product-specific retention is detailed in Sections 13–15

8. Your Rights (GDPR & CCPA)

Right to access your personal data
Right to correct inaccurate data
Right to delete your data ("right to be forgotten")
Right to data portability
Right to opt out of data sales (we do not sell data, but you have this right)
Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact privacy@davincitechsolutions.com.

9. Security

All data transmitted using TLS in transit, and SRTP for voice media
Credentials and sensitive data stored using industry-standard encryption at rest
Role-based access controls, MFA for staff, and audit logging on our servers
Regular vulnerability scanning, patching, and incident response procedures

10. Children's Privacy

Our website and products are not directed to children under 13. We do not knowingly collect data from children under 13. If we discover such data, we delete it promptly.

11. California Residents (CCPA / CPRA)

The categories of personal information we collect are listed in Section 2
We do not sell or share personal information for cross-context behavioral advertising
You may request access to, deletion of, or correction of your data at any time
You have the right to be free from retaliation for exercising your rights

12. International Users (GDPR)

Legal basis for processing: contractual necessity, legitimate interest, and consent where applicable
Data may be transferred to and stored in the United States, where our servers are primarily located
You may contact your local data protection authority with complaints

13. D Line Mobile App

D Line is our VoIP softphone for iOS, Android, and desktop. In addition to the data described in Sections 2–12, the D Line app processes:

Communication data

Call metadata: date, time, duration, caller / callee numbers — we do not record or store call audio content unless explicitly enabled by your organization
SMS / MMS message content and metadata
Voicemail recordings and transcriptions

Device & technical data

Device type, model, and operating system version
App-generated device identifiers (not hardware IDs)
Push notification tokens (FCM / APNs)
IP address, network information, and call quality metrics

D Line retention

Call logs: 12 months
SMS messages: 12 months
Voicemail recordings: until deleted by user, or 90 days
Push notification tokens: deleted on logout or after 30 days of inactivity

14. DaVinci PBX

DaVinci PBX is our cloud phone system that powers business phone numbers, IVR, queues, and routing. In addition to the general terms above, PBX processes:

Phone numbers, extensions, and routing configuration owned by the customer organization
Call detail records (CDRs): timestamps, durations, source / destination numbers
Optional call recordings, when enabled by the customer organization (subject to applicable consent laws)
IVR menu interactions and queue statistics

Call recordings, when enabled, are retained per the customer organization's configured retention policy and may be deleted on request.

15. DaVinci AI Agent

DaVinci AI Agent powers chat and voice agents across web, phone, Telegram, WhatsApp, SMS, and other channels. In addition to the general terms above, AI Agent processes:

Conversation transcripts, voice transcriptions, and message metadata
Knowledge-base content provided by the customer for retrieval-augmented generation (RAG)
End-user identifiers provided by the channel (e.g. Telegram chat ID, phone number)
Aggregated usage and quality metrics

Conversations may be processed by third-party AI providers (OpenAI, Anthropic, Google) under their respective data-processing terms. We do not allow our AI providers to train their models on customer conversation data.

16. Changes to This Policy

We will notify users of material changes via email or in-app notification. Continued use of our website or products after changes take effect constitutes acceptance of the updated policy.

17. Contact

Davinci Tech Solutions
350 5th Avenue, New York, NY 10118
General: support@davincitechsolutions.com
Privacy-specific requests: privacy@davincitechsolutions.com