Privacy Policy

1. Information Collected

When you use the contact form, DBJ Technologies collects the information you provide: your name, email address, phone number (optional), company name (optional), project details, and budget range. Standard server logs including IP address and browser type are also collected for security and analytics purposes.

2. How Your Information Is Used

The information you provide is used solely to respond to your inquiries, deliver services, and communicate about your projects. DBJ Technologies does not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Security

DBJ Technologies implements industry-standard security measures to protect your personal information, including encrypted data transmission (TLS/SSL), secure server infrastructure, and access controls. However, no method of transmission over the Internet is 100% secure.

4. Cookies

This website uses essential cookies required for site functionality and two first-party analytics cookies (a visitor identifier and a session identifier, described in the Analytics section). That is the complete list. No third-party analytics cookies, no advertising cookies, and no cross-site trackers are set, which is why you are not asked to answer a cookie banner when you arrive.

5. Analytics

Analytics on this site are entirely in-house and first-party. I measure page views, sessions, traffic sources, approximate geographic region, device type, and Core Web Vitals. Two first-party cookies support this: a visitor identifier (lifespan approximately 13 months) and a session identifier (idle 30-minute window). Both are marked HttpOnly, so no script on the page can read them, and neither is readable by any other site. IP addresses are never stored in raw form. They are hashed at the moment of collection using a daily-rotated salt and discarded immediately afterward; only the hash and the country/region/city derived from the request are persisted. Because the salt rotates daily, the hash cannot be used to follow you from one day to the next. Raw page-view rows are retained for 90 days; aggregated session data is retained for 13 months.

This data stays in my own database. It is not sold, not shared with an advertising network, and not sent to a third-party analytics provider. Google Analytics was removed from this site in August 2026, and with it the cookie banner that existed only to ask permission for it. I also use Vercel Speed Insights, which is a separate, cookieless performance measurement tool that records anonymous page load timings without tracking individuals.

If you identify yourself to me, by running a Pathlight scan or submitting the contact form, I connect that inquiry to the visit history of the browser you did it from, so that when we talk I have the context of what you have already seen. That association lives in the same private database, is never shared with anyone, and is deleted on request like everything else.

If you would rather not be counted at all, browsing in a private window or clearing cookies for this site resets both identifiers, and any browser setting or extension that blocks the request to /api/track/view stops the measurement entirely. You can also email me and I will delete what is associated with you.

6. Third-Party Services

DBJ Technologies may use third-party services for hosting (Vercel), email delivery (Resend), performance measurement (Vercel Speed Insights), and bot protection on forms (Cloudflare Turnstile). These providers have their own privacy policies and may process data in accordance with their terms. No third-party analytics or advertising provider receives your browsing on this site.

7. Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting DBJ Technologies through the form on the Contact page. A response will be provided within 30 days.

8. The DBJ Canopy Mobile App

DBJ Canopy is the iOS and Android app for Canopy, the business system I build and operate. This section covers the app. The rest of this policy covers the website.

What the app collects. The email address of the person signing in. It arrives from Google or from Apple when you sign in with them in the app, or from your Canopy install's own sign-in page when you sign in there (with Microsoft or an emailed sign-in link, for example), and it is used to identify you to your own Canopy install and for nothing else. The app never receives or stores your Google, Apple or Microsoft password.

What the app keeps on your device. A sign-in token, a refresh token, the expiry of the first, the email address you signed in with and the address of the Canopy install you signed in to, all held in the operating system's own secure storage (the Keychain on iOS and the Keystore on Android). Since version 2 the app shows your Canopy install's own pages, so it also keeps what a browser would keep for them: that install's sign-in cookie, the pages' own small store of settings, and a short-lived cache, all in the app's private storage; your choice of a light or dark look is kept too. A file you open or export from Canopy, such as an invoice or a spreadsheet, is written to the app's cache so the share sheet can offer it. Version 1 of the app instead kept the latest Today and Pipeline summaries (counts, dollar totals, stage and deal names) in the app's own storage, which the operating system encrypts. Signing out removes all of it.

What your Canopy install keeps about your sign-in. For each device you sign in from: the sign-in provider (Google or Apple), the device name, platform and app version the app sends, and when the session was created and last used. Canopy also keeps a security log of account activity, so that questions such as whether a lost phone was used have an answer. It records each sign-in, sign-out, change to notifications and account deletion, with the email address, the device details sent at sign-in, a short fragment of the notification token, and the IP address and user agent of the request. This security log is the one place the app's IP addresses are kept as they arrive; the website analytics described above never store them that way. The IP address and user agent are cleared from each entry after 90 days, and entries are deleted after 13 months, except those about invoices, quotes, proposals and subscriptions, which are kept seven years for tax records. Deleting the app account does not remove these entries sooner. Sign-ins and deletions are also noted in Canopy's operations monitoring with the email address, and those entries are removed automatically after 30 days.

Notifications. If you turn notifications on, the app registers a push token that Apple or Google issues for your device, and that token is stored with your account so Canopy can notify you about your own business activity, such as an incoming message or a signed agreement. The token identifies the device to the notification service and nothing else. When you sign out or turn notifications off, the token is switched off and nothing is sent to it again. Deleting your account removes it. Notifications are delivered through Apple's and Google's notification services and through Expo's push service, which relays them.

What the app does not do. There is no advertising identifier, no third-party analytics or crash-reporting service, and no attribution or tracking of any kind in this app. Nothing you do in it is shared with an advertiser or a data broker, and nothing is sold. The app does not read your contacts, your location or your calendar, and it never browses your photo library or listens on its own.

Photos, voice notes and files. When you take a photo, choose a photo or a file, or record a voice note in Canopy (a business card, a job photo, a daily log), the app asks the phone for the camera, the photo picker, your files or the microphone for that one action, with your permission, and what you capture goes only to your own Canopy install, exactly as it would from a browser.

Crash reports. When the app hits an error, it sends a short report to your own Canopy install so the fault can be fixed: the error message and where in the app it happened, with email addresses, tokens and long numbers removed first, plus the app version, the update it was running and the phone's operating system. A report never includes your name, your email address or anything from your records, and it goes to no one else.

Sign in with Apple. If you use Apple's private relay address, that relay address is what I receive and what is stored. I never see the address behind it.

Where the data goes. Requests go to your own Canopy install over an encrypted connection. If your company operates its own Canopy, your records live in your company's own database, under your company's control, and I hold them only insofar as I operate that install for you.

What you write in the app. Everything you write or upload in the app, from notes and call logs to email replies, photos and voice notes, is sent to your own Canopy install and stored there, exactly as if you had done it in Canopy on the web. A reply is sent from your company's own mailbox to the person you are writing to.

Deleting your account. You can delete your account from inside the app, in its settings. Deletion removes the sign-in sessions and the device notification registrations tied to your email address. You can also ask me to do it at joshua@dbjtechnologies.com and I will confirm when it is done. Business records your company owns are your company's to keep or remove, and are governed by the agreement I have with your company rather than by this section. The steps for both routes, and what is kept afterward, are on the account deletion page.

Children. The app is a business tool and is not directed at children.

9. Text Messages

When you text DBJ Technologies at (682) 325-8324, or agree to receive texts about your inquiry or project, your phone number, your messages and the times they were sent are kept in the business's own records so the conversation can be answered and followed up. Texts are carried by Twilio, the messaging provider.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third party.

Reply STOP at any time to stop receiving texts, or HELP for help. The text messaging terms are in section 9 of the Terms of Service.

10. Changes to This Policy

This privacy policy may be updated from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

If you have questions about this privacy policy, please reach out through the form on the Contact page.