1. Who we are and what this policy covers

Dolfin Technologies LLC (“Dolfin,” “we,” “us” or “our”) provides governed AI intelligence and analytics services for financial organizations. This Privacy Policy applies to dolfinintelligence.com and any public webpages, forms, materials, demonstrations and communications made available through it (the “Website”).

Your use of the Website is also subject to our Terms & Conditions. If you do not agree with this policy, please do not use the Website.

2. Information we collect

Information you give us

When you contact us, request a demonstration, subscribe to updates, apply for a role or otherwise communicate with us, we may collect your name, business email address, telephone number, job title, organization name, country or region, and the content of your message or request.

Information collected automatically

When you visit the Website, we and our service providers may collect technical and usage information, including IP address, approximate location derived from IP address, browser and device type, operating system, referring and exit pages, pages viewed, links clicked, session duration, and the date and time of your visit.

Information from other sources

We may receive business-contact information from event organizers, referral partners, your colleagues, publicly available sources and business-information providers, and we may combine it with information we already hold about your organization.

3. Cookies and similar technologies

We use cookies, pixels, tags, local storage and similar technologies to operate the Website, remember your preferences, keep the Website secure, measure traffic and understand how the Website is used. Some of these technologies are set by third-party analytics and marketing providers acting on our behalf.

Most browsers let you block or delete cookies through their settings. Where a cookie banner or preference tool is offered on the Website, you can use it to manage non-essential cookies. Blocking some cookies may affect how parts of the Website function. We also honor recognized opt-out preference signals, including Global Privacy Control (GPC), where required by law.

4. Customer data and our role

When your organization uses the Dolfin platform under a pilot, subscription, implementation or other services agreement, we generally process the data your organization provides or makes accessible to us as a service provider or processor, acting on your organization's documented instructions. Your organization determines what data is submitted, how outputs are used and how individuals' rights requests are handled.

That processing is governed by the applicable written agreement and, where relevant, a data-processing or security addendum — not by this Privacy Policy. If you are an individual whose information may have been provided to us by a Dolfin customer, please direct your request to that organization; we will support them in responding.

Dolfin is an analytics platform. It does not approve or decline customers and does not make or recommend credit, lending, eligibility, pricing or compliance decisions. Unless expressly agreed in writing, Dolfin does not act as a consumer reporting agency and its outputs are not consumer reports under the Fair Credit Reporting Act or similar laws.

5. How we use personal information

• respond to your inquiries, demonstration requests and other communications;
• provide information about our services and evaluate a potential business relationship;
• operate, maintain, secure, troubleshoot and improve the Website;
• analyze Website traffic and measure the effectiveness of our content and campaigns;
• send business updates and marketing communications where permitted, subject to your right to opt out;
• administer events, briefings and recruiting;
• detect, investigate and prevent fraud, abuse, security incidents and other unlawful activity;
• comply with legal, regulatory, audit, tax and contractual obligations; and
• establish, exercise or defend legal claims.

We do not use Website contact information to make automated decisions that produce legal or similarly significant effects about an individual.

6. Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: our legitimate interests in operating, securing and promoting our business, provided those interests are not overridden by your rights; performance of a contract or steps taken at your request before entering one; your consent, where required, for example for certain cookies or marketing messages, which you may withdraw at any time; and compliance with a legal obligation.

7. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws. We disclose personal information only as described below:

• Service providers that support hosting, security, analytics, email delivery, customer-relationship management, marketing operations and professional services, under contracts limiting their use of the information;
• Professional advisors such as auditors, accountants, insurers and lawyers;
• Legal and safety recipients, where disclosure is required by law, subpoena, court order or regulatory authority, or is reasonably necessary to protect the rights, property or safety of Dolfin, our customers or the public;
• Corporate transactions, including a merger, acquisition, financing, reorganization or sale of assets, subject to appropriate confidentiality protections; and
• Affiliates that support our operations and are bound by this policy.

8. Third-party websites and services

The Website may link to or embed content from third parties, including social networks, video platforms and scheduling tools. Those providers operate under their own privacy policies, and we are not responsible for their content, security or data practices. Review their policies before sharing information with them.

9. International transfers

Dolfin is based in the United States, and the information we collect is processed in the United States and in other countries where we or our service providers operate. Privacy laws in those countries may differ from those in your own. Where required, we use appropriate safeguards for international transfers, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

10. Data retention

We keep personal information for as long as needed for the purposes described in this policy, and then for any additional period required to comply with legal, tax, audit, security or contractual obligations or to resolve disputes. Retention periods vary by record type; business-contact records are typically retained for the duration of the relationship and a reasonable period afterward, and technical logs are retained for shorter periods. When information is no longer needed, we delete or de-identify it.

11. Security

We maintain administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration and loss, including access controls, encryption in transit, logging and vendor due diligence. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your interaction with the Website is no longer secure, contact us at the address in Section 15.

12. Your privacy rights and choices

Marketing choices

You can opt out of marketing emails using the unsubscribe link in any message or by contacting us. We will still send communications necessary to respond to your requests or to administer a business relationship.

Rights you may have

Depending on where you live, you may have the right to request access to the personal information we hold about you; correction of inaccurate information; deletion of your information; a portable copy of information you provided to us; details about the categories of information we collect and disclose; and to opt out of the sale or sharing of personal information or of targeted advertising. Where the GDPR applies, you may also object to or request restriction of certain processing, withdraw consent, and lodge a complaint with your local supervisory authority.

How to make a request

Email info@dolfinintelligence.com with the subject line “Privacy Request” and tell us what you would like us to do. We will verify your identity before acting, usually by confirming details we already hold, and we may decline a request where an exception applies. You may use an authorized agent where the law allows; we may ask for proof of that authority. We will not discriminate against you for exercising your rights.

13. Children's privacy

The Website is intended for business and professional audiences and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date identifies the most recent revision. Changes take effect when posted unless a later date is stated. If we make a material change, we will provide additional notice where required by law. Please review this page periodically.