Privacy Policy

1. Overview

Dofi provides an AI-powered phone answering, appointment booking, and text-messaging service for local businesses. Each business that uses Dofi as its receptionist service is a “Client” or “participating business.” This Privacy Policy explains how we collect, use, and protect the personal information of business owners, their staff, and the consumers who interact with any participating business through our service — by phone call, SMS text message, or our web platform. This policy applies within the United States.

Scope: This policy applies to every telephone number and text-messaging program that Dofi operates on behalf of any participating business, now or in the future. When you call or text a Dofi-powered number, your interaction is governed by this policy regardless of which participating business you contacted.

Our role: When we handle the personal information of callers and customers, we act as a service provider (as defined under the California Consumer Privacy Act) processing that information solely on behalf of, and under written contract with, the business you contacted. We do not use customer personal information for our own independent commercial purposes. For the account information of business owners and visitors to our website, Dofi acts as the business responsible for that information.

2. Information We Collect

We may collect the following categories of personal information:

• Contact information: name, phone number, and email address provided when signing up, booking an appointment, or requesting a service.
• Call data: recordings and transcripts of inbound calls handled by the Dofi AI agent.
• Appointment & service-request data: requested services, preferred dates and times, staff preferences, and — for businesses that perform services at your location — the service address you provide.
• SMS interaction data: message content, opt-in and opt-out status, and delivery receipts.
• Photos you choose to send (MMS): some participating businesses accept photos by text message — for example, so the business can prepare an estimate before an onsite visit. If you send photos, we receive and store them through our messaging provider and share them only with the business you contacted. Sending photos is always your choice, is never required, and photos are used only to provide the service you requested.
• Device and usage data: browser type, IP address, and pages visited on our website.
• Billing information (Clients only): if you subscribe to Dofi as a business owner, we collect your plan selection and billing contact details, and we receive payment status (such as paid or failed) from our payment processor. Card numbers are collected directly by Stripe — we never receive or store your full card details.

What we do not collect: If you ask for directions to a business during a call, we send you a link to that business's published address (for example, a Google Maps link). We do not collect, track, or store your device's location, and we do not create voice-based biometric identifiers.

3. How We Use Your Information

We use collected information to:

• Operate, maintain, and provide the Service.
• Answer inbound calls, book appointments, and take service requests on behalf of the business you contacted.
• Send SMS appointment and service-request confirmations, reminders, and rescheduling or cancellation updates to customers.
• Send informational text messages that a caller specifically requests during a call — for example, a link to the business's location or directions.
• Sync confirmed bookings to staff calendars.
• Monitor quality and improve the reliability of the Service. Any data we use to improve our systems is first de-identified or aggregated so that it no longer identifies you, and we do not use identifiable customer recordings to train third-party AI models.
• Respond to support inquiries and manage Client accounts.
• Comply with applicable laws, enforce our terms, and protect against fraud or misuse.

4. AI Phone Calls, Call Recording & Voice Data

AI identity: Regardless of how a call opens, the Dofi AI agent will never claim to be a human if you sincerely ask. This is consistent with FTC deceptive-practices standards, the California BOT Disclosure Act, and similar state and federal guidance. No US law currently requires AI to proactively announce itself at the start of a phone call.

Human transfer: If at any point you prefer to speak with a human staff member, you may request a transfer during the call. The AI will connect you to available staff or take a message if no one is available.

Call recording & consent: Inbound calls handled by the Dofi AI agent may be recorded and transcribed to complete your booking, for quality assurance, and to operate the Service. Many U.S. states — including but not limited to California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington — require all parties to consent before a call is recorded. To comply with these laws, the AI provides a recording disclosure at the start of every call, regardless of where you are located. By continuing the call after that disclosure, you consent to being recorded. You may end the call at any time if you do not consent.

Voice data & biometrics: We process the audio of your call only to transcribe speech to text and to understand and respond to your request. We do not create, capture, store, or use voiceprints or any other voice-based biometric identifier, and we do not use your voice to identify you. We do not use your voice recordings for biometric purposes under the Illinois Biometric Information Privacy Act (BIPA) or similar laws.

5. SMS Messaging & Consent (Dofi Messaging Program)

How you opt in. You consent to receive text messages in one of the following ways, and in each case your consent is collected and recorded by Dofi:

• Verbally, during a recorded call: when you book an appointment or request a service by phone and provide your phone number, you agree to receive a confirmation and any related reminders for that booking or request by text at that number. Message and data rates may apply. The recorded call serves as the record of your consent — and if you'd rather not receive texts, just say so during the call; you can still book.
• By requesting a message during a call: if you ask the AI receptionist to text you specific information — for example, directions to the business — your request is your express consent to receive that message.
• In writing, through a booking or web form: by entering your phone number and checking an unchecked consent box that discloses the program described in this section.

Consent to receive text messages is always optional and is never a condition of purchasing any product, service, or appointment. If you decline, you can still book and do business with any participating business.

Message types: Transactional and consumer-requested informational messages only — appointment and service-request confirmations, appointment reminders, rescheduling or cancellation updates, and information you specifically request during a call (such as a link to the business's address or directions, e.g. a Google Maps link). If a business accepts photo estimates and you send photos by text, you may receive a short reply confirming receipt. The Dofi Messaging Program does not send marketing or promotional messages.

Message frequency: Message frequency varies based on your booking activity and requests — typically 1–4 messages per appointment or request, plus any individual messages you request. No recurring messages are sent.

Message & data rates: Message and data rates may apply, depending on your mobile carrier and plan.

Opt-out: You can opt out at any time by replying STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT) to any message. You will receive one final message confirming your opt-out, and no further messages will be sent to your number from that business. To resume messages, reply START.

Help: Reply HELP to any message for assistance, or contact us at contact@trydofi.com.

Carriers: Wireless carriers are not liable for delayed or undelivered messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be shared with any third parties, excluding the vendors and subcontractors who act on our behalf solely to deliver the messages you have consented to receive (for example, our text-messaging delivery provider) and who are contractually prohibited from any independent use of that information.

For detailed documentation of our consent collection process, including the verbal disclosure script and sample messages, see trydofi.com/sms-optin.html.

6. Sharing of Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We process customer personal information under a data processing agreement with the relevant Client. We may share information with:

• Service providers: third-party vendors that process data on our behalf to operate the Service — including telephony and text-messaging providers, voice and AI processing technology, cloud hosting, and calendar integrations. Each acts solely on our behalf and is bound by a written agreement requiring it to protect your information and prohibiting it from using your information for its own purposes.
• The business you booked with: your name, phone number, and appointment or service-request details are shared with the business that uses Dofi to manage bookings and requests — including by recording them in that business's own scheduling or management system.
• Payment processing (Clients only): Client subscription payments are processed by Stripe, which collects your payment details directly and handles them under its own privacy policy. We receive only limited billing information, such as payment status — never your full card number.
• Legal obligations: when required by law, court order, or to protect the rights and safety of Dofi or others.

All of the above categories exclude text-messaging originator opt-in data and consent; this information will not be shared with or sold to any third parties for any purpose. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Sharing with subcontractors that support the Service — such as our message-delivery provider — is limited to what is necessary to deliver the Service and is governed by written agreements prohibiting independent use of your information.

7. Data Retention

We retain personal information only as long as necessary to provide our services and fulfill legal obligations. Call recordings and transcripts are retained for up to 30 days unless a longer period is required by the business or applicable law. Photos received by text message follow the same schedule: retained for up to 30 days — or as long as the business reasonably needs them to deliver the requested service — and then deleted. SMS logs are retained for up to 12 months. You may request deletion of your data at any time by contacting us.

8. Security

We use industry-standard measures — including TLS encryption in transit and encryption at rest — to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected individuals and authorities as required by applicable law.

9. Children's Privacy

Our Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.

10. Your Privacy Rights

Depending on your state of residence, you may have the right to know what personal information we have collected, access a copy of it, correct inaccuracies, and request its deletion. California residents have these rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA. We do not sell your personal information or share it for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

To exercise a right, email us at contact@trydofi.com. We will verify and respond within 45 days (extendable as permitted by law). Because we often act as a service provider on behalf of a Client, we may forward your request to the relevant Client or assist them in responding.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered business owners by email and update the effective date above. Continued use of Dofi after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

Dofi
Email: contact@trydofi.com