1. Who controls the data
DSGNBRF controls account, billing, security and service-operation data. For client names, contact details, questionnaire answers and project files entered on an agency’s instructions, the agency ordinarily decides why the information is collected and DSGNBRF processes it to provide the service. Clients should contact the inviting agency first about project-content requests.
2. Information we collect
- Agency account and profile information, including name, business details, contact information and logo.
- Client and project information supplied by the agency.
- Questionnaire answers, clarification messages, brief status and uploaded references or operational documents.
- Authentication, security, rate-limit and audit records.
- Plan, entitlement, transaction and refund records where paid services apply.
- Technical information needed to operate and protect the service, such as timestamps, request outcomes and limited device or network data.
3. Private invitation links
An invitation token grants access to one project and is intended for the invited client. We process the token to authenticate that project session, save progress and permit submission. The token should not be placed in public posts, analytics, support messages or shared devices. Agencies can revoke and replace it.
4. Why we use information
We use information to authenticate agencies, operate client briefings, save answers and files, deliver invitations, provide support, enforce security and usage limits, process purchases or refunds, maintain audit records, diagnose failures and comply with legal obligations. Where required, our basis may be performance of a contract, legitimate interests in operating and securing the service, consent, or compliance with law.
5. Service providers and disclosure
We use infrastructure and specialist providers to host the application and database, store private files, authenticate accounts, send email, monitor failures and process payments. They receive only the information needed for their function and act under their own contractual and security obligations. We may also disclose information when legally required, to protect users or the service, or as part of a business transfer subject to appropriate safeguards. We do not sell questionnaire answers or uploaded files.
6. Storage, security and international processing
Project files are kept in private storage and authorized downloads pass through DSGNBRF. We use tenant access controls, restricted service credentials, rate limits and audit records, but no online service can guarantee absolute security. Providers may process information in countries different from yours; where required, appropriate transfer safeguards should be used.
Analytics
DSGNBRF uses Google Analytics to understand aggregated use of eligible public pages and free tools, such as page visits, general usage patterns, device/browser information, and tool interactions.
Google Analytics is not enabled on private authentication, invitation, client brief, or other sensitive routes, or on URLs containing sensitive access tokens.
DSGNBRF does not intentionally send names, email addresses, organisation details, project or brief content, uploaded filenames, payment information, invitation tokens, or other sensitive account data to Google Analytics.
Analytics information is used to understand website performance, improve usability, and evaluate which public resources are useful to visitors.
7. Retention
We keep account, project and file data while needed to provide the service, meet plan terms, resolve disputes, protect security or comply with law. Billing and audit records may be retained longer where legally necessary. Free projects are designed for a 30-day retention period. Automatic retention enforcement and warning emails are not currently active until formally launched. A proposed plan feature or pricing statement does not activate automatic deletion by itself. When the policy becomes active, affected agencies will be told its timing and available actions before eligible content is removed.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection. Agency users should contact us; invited clients should normally contact the agency that invited them because that agency controls the project purpose. We may need to verify identity and authority before acting.
9. AI features
If an AI-assisted feature is offered, the interface will identify its purpose and applicable credit allowance. We will not treat AI output as verified project fact. Questionnaire content will not be used for unrelated model training unless that use is separately disclosed and lawfully authorized.
10. Contact
Privacy and data requests may be sent to support@dsgnbrf.com with “Data / Privacy” in the subject. Do not include passwords or private invitation links.