Privacy Policy

Website Hosting and Security Logs

This website is hosted on Vercel. When you visit the site, technical access data such as IP address, requested URL, browser information, timestamps, and error logs may be processed to deliver the website securely and reliably. The legal basis is our legitimate interest in operating a secure website and, where required, fulfilling contractual or pre-contractual communication.

Analytics and Consent

We use Google Analytics 4 only after you grant analytics consent through the consent banner. Until consent is granted, analytics storage is denied by default. Your consent choice is stored in your browser under the key dexterbee-consent.

The legal basis for analytics is your consent. You can change or withdraw consent at any time through the cookie settings link in the website footer.

Contact Forms

If you contact us through a website form, we process the name, email address, message content, and technical submission metadata needed to handle your request. Contact form submissions are stored in our Supabase-backed contact inbox and forwarded to DexterBee by email through Google Apps Script so we can respond promptly. We use this data only to respond to your inquiry and manage related business communication.

Website Chat Assistant

The DexterBee website may offer a first-party chat assistant that answers questions based on public DexterBee website content. If you use the chat, your message, recent conversation context, selected website knowledge snippets, and technical request metadata are processed to generate the answer. The chat is served through DexterBee infrastructure and uses Google Gemini as the AI model provider. Please do not enter trade secrets, confidential project details, employee personal data, customer data, or other sensitive information into the public website chat.

Process Assessment Tool

Public and invite-only survey links allow website visitors and selected clients to submit contact, company, role, department, and process information for an automation and AI-readiness assessment. This data is stored in Supabase and displayed in the DexterBee admin dashboard so we can review the assessment and contact you about the result. Please do not submit trade secrets, employee personal data, customer data, or other confidential information in the public assessment. If an administrator generates an AI report, submitted process information is sent to Google Gemini to create the report. If an administrator exports a report to Google Drive, the report content is transferred to Google Drive using the connected Google account.

Customer Project Portal

Selected customer contacts may receive access to a protected project workspace containing their submitted process information, approved assessments, project documents, and commercial documents. Access is restricted to email addresses explicitly authorized for the relevant project. Authentication uses a project password stored only as a salted cryptographic hash and may additionally use a one-time sign-in link or code sent by Supabase. DexterBee stores a time-limited secure session and records security-relevant events such as sign-in, sign-out, document access, offer feedback, and offer-acceptance confirmation together with the project, user identity, timestamp, shortened browser information, and a hashed IP address. An offer acceptance is additionally linked to the exact offer version and checksum of the immutable PDF; it does not replace the separate signature process. Approved documents are retrieved server-side from private Google Drive storage and are not made publicly accessible. An authorized DexterBee administrator may initiate an AI-assisted document consistency check for internal offer review. The current contents of registered project documents are then sent to Google Gemini to identify contradictions, downstream change impact, and draft proposals. Results and any versions explicitly created from them remain internal drafts until DexterBee reviews and approves them.

Content Management and Third-Party Services

Public insights content may be loaded from Sanity CMS. We also use Google services, Supabase, Vercel, and other technical providers to operate the website and related tools. Where providers process data outside the European Economic Area, we rely on available transfer safeguards such as adequacy decisions, data processing agreements, and standard contractual clauses where applicable.

Retention

We keep personal data only as long as needed for the purpose for which it was collected, legal retention duties, security requirements, or legitimate business documentation. Contact inquiries and assessment data are reviewed periodically and deleted when they are no longer required.

Your Rights

If you are in the European Economic Area, you may have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You also have the right to lodge a complaint with a competent data protection authority.

To exercise your rights, contact us at info@dexterbee.com.