DYGILAB
Privacy Policy
Version: 1.1
Last updated: September 27, 2026
Effective date: upon publication.
1. Controller and scope
Dygilab LLC, 30 N Gould St, Ste R, Sheridan, Wyoming 82801, United States, is the controller for its website, contact inquiries, and administration of business relationships. For questions or requests about your data, contact contact@dygilab.com.
When Dygilab processes data solely to manage a business client’s Google profile on that client’s instructions, the client determines the purposes and Dygilab acts as processor. The Data Processing Schedule in the Terms governs that work.
2. Data and sources
We receive information you provide: business identity and contact details, company, role, country, language, Google profile link, inquiry, onboarding information, media, instructions, and communications. Required form fields are marked; without necessary information, we may be unable to respond or deliver the service. Other fields are optional.
We also receive subscription, transaction, and billing information from Stripe; delegated Google access; profile performance data; and public information needed for profile management, including business details, public reviewer names, ratings, reviews, and replies. Names and reviews displayed on our website come from public testimonials or materials supplied for that purpose.
Technical data may be generated when you browse or use services, including IP addresses, browser information, requests, and security events. Do not send us Google passwords, full card numbers, or sensitive information unnecessary for your request. Card details are entered with Stripe, not in our contact form.
3. Purposes and legal bases
- Responding to inquiries: handling your message and requested follow-up. The basis is steps requested before entering a contract, or our legitimate interest in responding to a business representative. Contact form information does not automatically enroll you in a newsletter or marketing campaign.
- Providing and monitoring services: managing access, information, posts, reviews, reports, and necessary communications. The basis is the contract where the person is a party, or our legitimate interest in performing and managing a business relationship where the person is a company contact. Processing on a client’s behalf follows its instructions and the Terms’ Schedule.
- Administering payments and agreements: billing, payment follow-up, cancellation, and evidence of commitments, based on the contract, applicable legal obligations, and our legitimate interest in documenting transactions.
- Protecting the website and services: preventing abuse, handling incidents, and limiting unauthorized access, based on our legitimate interest in security.
- Displaying professional testimonials: informing visitors using public reviews or supplied testimonials, based on our legitimate interest in presenting our services, subject to individuals’ rights.
- Optional tracking: where a processing activity requires consent, it relies on that consent and you can withdraw it.
These services do not involve decisions with legal effects on you based solely on automated processing.
4. Recipients and tools
Data is accessible to authorized people at Dygilab and necessary providers within their functions: Google Business Profile, Google Workspace, Drive, and Gmail for services and communication; Airtable for record management; Tally for onboarding; Stripe for payments and billing; Hostinger for hosting; WordPress form, email, and security components for website operation; and WhatsApp where you use that channel with us.
An installed WordPress component does not mean all data is sent to it: recipients depend on the features actually enabled. Providers may act as processors or as controllers for some of their own activities, such as payment security. Their policies apply to those independent activities.
Information may also be provided to advisers or authorities where a legal obligation or legal claim justifies it. We do not sell personal data. We do not submit a client’s confidential information or non-public personal data to a general-purpose generative AI service without separate authorization and appropriate safeguards.
5. International processing and transfers
Dygilab is a US company. Services and operating locations may involve processing in the United States or other countries. This does not mean Dygilab holds a data-protection certification.
Where the GDPR or comparable law requires transfer safeguards, these must be in place before the relevant transfer: an adequacy decision covering the recipient and activity, or completed standard contractual clauses and supplementary safeguards where needed. The Terms’ Schedule does not replace required transfer documents. Contact us for information about safeguards applicable to your data and a copy, subject to protection of confidential information.
6. Retention
Retention is limited to the relevant purpose:
- Inquiries: for handling the request and its follow-up. If no relationship continues, records are deleted or anonymized when no longer needed; only information necessary for a legal obligation or identified dispute remains in restricted archives.
- Service data: during the relationship and then for returning or deleting data. The Terms’ Schedule describes end-of-service arrangements, including the normal 30-day period for a return or deletion request, subject to legal exceptions and temporary backups.
- Invoices and accounting records: for the period required by tax and accounting obligations applicable to the record and company. The relevant jurisdiction determines the period; retaining business records does not automatically extend retention of every item in a client file.
- Agreements, approvals, and evidence: during the relationship and until applicable limitation periods for the relevant claims expire, or pending proceedings conclude.
- Security logs: only for the period necessary to detect, investigate, and address relevant incidents; evidence needed for an incident or proceedings is retained separately.
- Currency preference: for the browser session, as described below.
Data without a continuing justification is deleted or anonymized. An erasure request may not result in deletion of records that must legally be retained.
7. Security
Safeguards must reflect the sensitivity of the information and risks: limited access, delegated invitations, account and device protection, controlled sharing, and removal of unnecessary access. We do not request your Google password. No online service can guarantee absolute security.
8. Your rights
Depending on applicable law, you may request access, correction, erasure, restriction, or portability; object to certain processing; and withdraw consent without affecting earlier lawful processing. You may also provide instructions concerning your data after death where French law provides that right.
Email contact@dygilab.com with your request. If there is reasonable doubt about identity, we may request only the information necessary to verify it. GDPR requests are generally answered within one month; any permitted extension due to complexity or the number of requests is explained within that period. If we process the data on a client’s behalf, we help the client respond or forward the request.
You may complain to the competent authority, including the CNIL in France or the ICO in the United Kingdom, without giving up other remedies.
9. Cookies, storage, and external links
The currency selector stores your choice in browser session storage under dygilab-explicit-currency. It preserves the display you requested while browsing and is not an advertising identifier. It is normally removed when the session ends; some browsers may restore sessions.
Mechanisms needed for operation, security, or an explicitly requested preference are distinguished from optional tracking. Analytics or advertising trackers requiring consent must only activate after agreement; if offered, their preference tool must allow refusal and withdrawal as easily as acceptance.
Links to Google, Stripe, or other external services lead to sites governed by their own rules. Reading testimonial text on Dygilab does not require loading a Google review widget.
10. Updates and contact
This policy describes service processing and must be updated if tools or purposes change. The update date appears at the top. Changes requiring specific notice or fresh consent are addressed before implementation.
Dygilab LLC — 30 N Gould St, Ste R, Sheridan, Wyoming 82801, United States. Contact: contact@dygilab.com.