Privacy Policy

1 Introduction

Deep Love, operated by DLove, LLC (we, our, or us), is a Miami-based automotive technology company that develops autonomous driving systems, connected vehicle platforms, fleet intelligence tools, and automotive cybersecurity solutions. This Privacy Policy explains how we collect, use, store, share, and protect information when you interact with our website at dlove.autos, use our software products, or communicate with our team.

We are committed to protecting your privacy and handling your data with transparency and care. This policy applies to all visitors, customers, partners, and users of our services. By using our website or engaging our services, you acknowledge the practices described in this policy.

If you have questions or concerns about this policy, you may contact us at any time using the information provided in Section 14.

2 Information We Collect

We collect information that you provide directly to us, information that is collected automatically when you use our website, and information we receive from third parties in the course of business. The types of data we may collect include:

• Contact Information. Full name, business email address, phone number, company name, job title, and mailing address when you fill out forms on our website, request a demo, subscribe to our newsletter, or contact our sales team.
• Account Information. Username, password (stored in hashed form), profile preferences, billing details, and usage history if you register for a Deep Love account or customer portal.
• Technical Data. Internet Protocol (IP) address, browser type and version, time zone setting, operating system and platform, screen resolution, and browser plug-in types when you visit our website.
• Usage Data. Pages visited, time spent on pages, click patterns, referring URL, search terms, download activity, and other interaction data collected via analytics tools.
• Device Information. Device type, unique device identifiers, mobile network information, and application version data for users of our connected vehicle or fleet applications.
• Communication Data. Records of correspondence when you email us, submit support tickets, or communicate via chat. This may include recordings or transcripts where permitted by applicable law and with notice.

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes, or health information unless you voluntarily provide it in the context of a specific business engagement.

3 How We Use Your Information

We use the information we collect for the following business purposes:

• Provision of Services. To deliver our automotive software products and services, process transactions, manage accounts, provide technical support, and fulfill contractual obligations with our customers.
• Communication. To respond to your inquiries, send service-related announcements, provide product updates and security notifications, and deliver marketing communications where you have opted in to receive them.
• Improvement and Development. To analyze usage patterns, diagnose technical issues, improve our website and products, develop new features, and enhance user experience.
• Legal Compliance. To comply with applicable laws, regulations, legal processes, and governmental requests, including those under US federal and state law and international regulations where we operate.
• Security. To detect, prevent, and respond to fraud, unauthorized access, security incidents, and potential violations of our terms of service.
• Business Operations. For internal business purposes such as auditing, data analysis, research, and budgeting.

We will not use your information for purposes that are materially different from those described in this policy without providing you with notice and, where required by law, obtaining your consent.

4 Legal Bases for Processing

We process personal information under the following legal bases, depending on the nature of our relationship and the jurisdiction of the data subject:

US Law Under United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and the Utah Consumer Privacy Act (UCPA), we process personal information for business purposes as reasonably expected by consumers and as disclosed in this policy.

GDPR For individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland, our legal bases include your consent (where you have freely given it), the performance of a contract with you, compliance with a legal obligation, and our legitimate interests in operating and improving our business, provided those interests are not overridden by your data protection rights.

Other Jurisdictions For data subjects in other jurisdictions, we process personal information in accordance with applicable local privacy laws and the principles outlined in this policy.

5 Data Sharing and Disclosure

We may share your personal information with the following categories of third parties:

• Service Providers. Trusted third-party vendors who perform services on our behalf, including cloud hosting providers (Google Cloud Platform, AWS), analytics services (Google Analytics), email delivery services, customer relationship management (CRM) platforms, payment processors, and technical support tools. These providers are contractually bound to process data only as instructed by us and to maintain appropriate security measures.
• Business Partners. Authorized resellers, integration partners, and OEM customers with whom we collaborate to deliver our automotive solutions. We share only the information necessary for the specific collaboration.
• Professional Advisors. Lawyers, auditors, accountants, and insurance providers who require access to information in the course of providing professional services to DLove, LLC.
• Legal Authorities. Law enforcement, courts, regulatory agencies, and other government bodies where disclosure is required by applicable law, legal process, or governmental request, or where necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
• Corporate Transactions. In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control.

We do not sell your personal information for monetary consideration. Under the CCPA, certain types of data sharing for cross-context behavioral advertising may be considered a sale. We do not engage in such practices. If our practices change, we will update this policy and provide the required notices and opt-out rights.

6 Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, analyze traffic, and understand how our site is used.

Cookies We Use:

• Essential Cookies. Required for the basic functionality of our website, including session management and security. These cannot be disabled.
• Analytics Cookies. Help us understand how visitors interact with our website by collecting anonymized data about page visits, time on site, and navigation patterns. We use Google Analytics for this purpose.
• Functional Cookies. Remember your preferences and settings to provide a personalized experience.
• Marketing Cookies. Used only where you have consented, to deliver relevant content and measure the effectiveness of our marketing campaigns.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may affect website functionality. For more information about how Google Analytics collects and processes data, you may visit Google's Privacy Policy at policies.google.com.

7 Data Security

We implement and maintain reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS 1.2+ protocols for all web traffic and API communications.
• Encryption of sensitive data at rest using AES-256 encryption standards.
• Role-based access controls and multi-factor authentication for internal systems.
• Regular security assessments, vulnerability scans, and penetration testing.
• Employee training on data protection and privacy best practices.
• Incident response procedures and breach notification protocols in compliance with applicable law.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we take all commercially reasonable steps to safeguard your information.

8 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The specific retention periods depend on the type of data and the applicable legal requirements:

• Account Information. Retained for the duration of your account plus a reasonable period thereafter to allow for account reactivation or data export, typically up to 90 days after account closure.
• Transaction Records. Retained for the period required by applicable tax and commercial law, generally seven years from the date of the transaction.
• Analytics Data. Retained in aggregated form for up to 26 months, after which it is anonymized or deleted.
• Communication Records. Retained for the duration of the business relationship plus 12 months.
• Legal Holds. Data subject to litigation holds or regulatory investigations is retained until the hold is lawfully released.

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention and disposal policies.

9 Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

California Residents (CCPA/CPRA):

• Right to Know. You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for collection, and the categories of third parties with whom we have shared your information.
• Right to Delete. You have the right to request deletion of personal information we have collected from you, subject to certain exceptions such as completing transactions, detecting security incidents, and complying with legal obligations.
• Right to Correct. You have the right to request correction of inaccurate personal information we hold about you.
• Right to Opt-Out. You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information, but we will honor your preference.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny services, charge different prices, or provide a different quality of service based on your privacy choices.

EEA, UK, and Swiss Residents (GDPR):

• Right of Access. You have the right to obtain confirmation of whether we process your data and to request a copy of that data.
• Right to Rectification. You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure. You have the right to request deletion of your data where it is no longer necessary, where you withdraw consent, or where processing is unlawful.
• Right to Restrict Processing. You have the right to request restriction of processing in certain circumstances.
• Right to Data Portability. You have the right to receive your data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to Object. You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Virginia, Colorado, Connecticut, and Utah Residents: You have rights similar to those described above under your respective state privacy laws, including the right to access, delete, correct, and opt out of certain processing activities.

To exercise your rights: Please submit a request by emailing brown@dlove.autos or by writing to us at 201 SE 2ND Ave APT 1608, Miami, FL 33131-2234. We will verify your identity before processing your request. We will respond within the timeframe required by applicable law, generally within 45 days, with a possible extension of up to 90 days where permitted. You may designate an authorized agent to make a request on your behalf, provided we receive proof of authorization.

If you are dissatisfied with our response, you may have the right to appeal our decision by contacting us at the same email address, and if necessary, lodge a complaint with the relevant supervisory authority in your jurisdiction.

10 Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete that information promptly. If you believe that a child under 16 has provided personal information to us, please contact us immediately at brown@dlove.autos so that we can investigate and take appropriate action.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary to participate.

11 International Data Transfers

As a US-based company with global operations, we may transfer your personal information to the United States and to other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country of residence.

When we transfer data from the European Economic Area, the United Kingdom, or Switzerland to the United States, we rely on appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our agreements with service providers and business partners.
• The UK International Data Transfer Agreement (IDTA) for transfers from the United Kingdom.
• Data Processing Agreements (DPAs) that include the required contractual protections.
• Verification that the recipient maintains a level of data protection substantially similar to that required under applicable law.

For transfers from other jurisdictions, we take reasonable steps to ensure that your data receives an adequate level of protection. You may request a copy of the applicable safeguards by contacting us at brown@dlove.autos.

12 Third-Party Links and Services

Our website and services may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party services and are not responsible for their privacy practices. We encourage you to read the privacy policies of every website you visit and every service you use.

Integrated third-party services that may be present on our website include analytics providers (Google Analytics), font services, and embedded video players. Each of these services has its own privacy policy governing the collection and use of your information.

13 Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the Last Updated date at the top of this policy and provide prominent notice on our website or through other appropriate communication channels.

We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms, where permitted by law. If we make changes that materially affect your rights, we will obtain your consent where required by applicable law.

14 Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DLove, LLC
201 SE 2ND Ave APT 1608
Miami, FL 33131-2234
United States

Email: brown@dlove.autos
Phone: +1-309-608-8760

For privacy-related inquiries, we aim to respond within 10 business days. If you are located in the EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.