Privacy

Dream Futures Tech is a web development and AI automation studio in Palm Beach County, Florida. We build intake, follow-up and booking automation for local businesses. This page covers two different sets of people: visitors to this website, and the clients whose systems we automate.

What we collect from visitors

What we collect. The answers you give in the survey, the email address you give us to send the report to, and optionally your name, business name and phone number. We record a one-way hash of your IP address for rate limiting — never the address itself.

What we do with it. Generate your report, email it to you, and — if you consented — send follow-up emails about fixing what it found. Every email carries a one-click unsubscribe that we honour immediately.

Payments. Handled entirely by Square, and call bookings by Cal.com. We never see, store, or transmit your card details.

Who else sees it. The providers that run this site and nothing more: Netlify (hosting), Cloudflare (DNS and edge), Supabase (database), Resend (email), Square (payments) and Cal.com (scheduling). We do not sell data, we do not share it with advertisers, and we do not use it to train models.

Deleting it. Email [email protected] and we will delete your record and every survey attached to it. No forms, no retention period.

Google user data

Some of the automation we build for clients writes to Google Sheets. When a client connects their Google account to one of our applications, that application uses Google APIs, and the following applies to the Google account data it touches.

What it accesses. Spreadsheets in the connected Google account, through Google's Sheets and Drive APIs. It requests the narrowest scopes that do the job, and it does not read Gmail, Contacts, Calendar, Photos or files unrelated to the spreadsheets it was pointed at.

What it does with it. It accesses, uses and stores Google user data solely to update internal booking logs and CRM spreadsheets as directed by the client — appending a row when a call is booked, logging the outcome of a call, and reading those same rows back to count the day's activity. Nothing else.

What it never does. We do not sell Google user data, we do not share it with third parties, we do not transfer it for advertising, market research or credit assessment, and we do not use it to train generalised AI or machine learning models. No human at Dream Futures Tech reads a client's spreadsheet contents except with that client's explicit permission, to support or debug the integration they asked us to build, or where the law requires it.

Where it is stored. The spreadsheet stays in the client's own Google account; the client remains its owner. The OAuth token that lets the automation write to it is held encrypted on the server that runs the automation, and nothing else about the data is copied into our systems. If a write fails, the row waits in a local queue until it can be delivered or until we are told to discard it.

Revoking access. A client can disconnect us at any time at myaccount.google.com/permissions, or by emailing us. Revoking it stops all access immediately; we delete the stored token and any queued rows on request.

Google API Services User Data Policy. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Client and patient data we handle on a client's behalf

When we run intake or booking automation for a client, the people who contact that business are the client's customers, not ours. The client decides what is collected and where it goes; we operate the pipeline. We keep that data only as long as it takes to deliver it to the destination the client chose, and we do not reuse it for our own marketing. Where a client works in a regulated field, the handling is set out in the agreement with that client and that agreement wins over this page.

Security, changes and contact

Security. Tokens and keys live in server-side environment variables, never in the browser. Webhooks are signature-verified before they are acted on. Access to production is limited to the owner of this business.

Children. This site is for businesses. We do not knowingly collect information from anyone under 13.

Changes. If this policy changes materially, the date at the top changes with it. Nothing in it is applied retroactively to data we have already been asked to delete.

Contact. [email protected]. We answer privacy and deletion requests ourselves, usually the same day.

This page is written in plain English for a real business, not drafted by a lawyer. Have counsel review it before you rely on it in a regulated market. See also our terms.