Privacy Policy

Last updated: October 11, 2026

This Privacy Policy explains how DGY Group LLC, a Wyoming limited liability company that operates the Digitalegy brand ("Digitalegy," "we," "us" or "our"), collects, uses, discloses and protects personal information, and the choices and rights you have. This policy is effective as of October 11, 2026.

The short version

  • We are a business-to-business (B2B) Revenue Operations and HubSpot consulting firm. Our website and services are meant for people acting on behalf of businesses.
  • We collect the information you give us through forms, meetings, chat, email and our online tools, plus information collected automatically through server logs, cookies and pixels.
  • We use it to respond to you, provide our services, send you information you can opt out of at any time, understand how our website is used, and measure and show our ads.
  • We do not sell personal information for money. Some tools on our website, including advertising and social sharing tools from Google, TikTok, Meta, LinkedIn and X, may count as "selling" or "sharing" personal information, or as "targeted advertising," under some U.S. state laws. Section 6 explains how to opt out.
  • You can ask to access, correct or delete your information, and more, by emailing hi@digitalegy.io.

Contents

  1. Who we are and what this policy covers
  2. Information we collect
  3. How we use information
  4. Legal bases for international visitors
  5. Cookies, pixels and similar technologies
  6. Targeted advertising and your choices
  7. How we disclose information
  8. How long we keep information
  9. How we protect information
  10. International transfers
  11. Your privacy rights and how to use them
  12. Information for California residents
  13. Children
  14. Emails, calls, text messages and WhatsApp
  15. Other websites and services
  16. Changes to this policy
  17. Contact us

1. Who we are and what this policy covers

Who we are

Digitalegy is a DGY Group LLC company. DGY Group LLC is a limited liability company organized under the laws of the State of Wyoming, United States of America, and it is the controller (in Spanish, "responsable") of the personal information described in this policy. For all purposes of this policy, including requests under Mexican and Colombian law, our contact address is the email address hi@digitalegy.io. We provide B2B Revenue Operations consulting and HubSpot partner services, including HubSpot implementation, onboarding, self-onboarding and support, marketing operations, growth-driven web design, answer engine optimization (AEO) for AI search, AI WhatsApp agents and strategy consultations. Our clients are companies in the United States and Latin America.

For anything related to this policy, including privacy requests, please email us at hi@digitalegy.io. Requests sent to that address are handled by the person we have designated to handle personal information requests.

What this policy covers

This policy applies to personal information that we handle for our own business purposes, including information we collect through:

  • our website at https://digitalegy.io, in English and in Latin American Spanish, including our blog (/blog/ and /es/blog/) and our landing pages (/landing/ and /es/landing/);
  • the forms, meeting scheduler, chat and online tools on our website;
  • emails and other messages you send us;
  • event registrations and content downloads, such as ebooks and templates;
  • job applications; and
  • our business relationships with clients, prospective clients and partners, and the people who work for them.

This policy does not cover websites, apps or services that other companies run, even when we link to them or embed their content on our pages (see Section 15).

When we work on behalf of our clients

When we implement, manage or support a client's HubSpot portal, AI WhatsApp agent or other systems, we may handle personal information about that client's own contacts, such as its customers, leads or employees. In that work we act as a service provider (also called a processor, or "encargado") under our agreement with the client, and we process that information only on the client's instructions. The client's own privacy notice governs that information, not this policy. If your information is in a system we manage for one of our clients and you want to exercise your privacy rights, please contact that client directly. If you contact us instead, we will refer you to the client, or pass your request on to the client where our agreement allows it.

This policy replaces our earlier notice

This Privacy Policy replaces the privacy notice (aviso de privacidad) previously published on this website by Digitalegia, S.A.S. de C.V. The Digitalegy business now operates through DGY Group LLC. If you gave personal information to Digitalegia, S.A.S. de C.V. before October 11, 2026, any of that information that DGY Group LLC now holds, for example in our customer relationship management (CRM) system, is handled under this policy. If you do not want us to keep or use that information, email hi@digitalegy.io with the subject "Earlier notice" and we will delete it, except for information the law requires us to keep.

2. Information we collect

The information we collect depends on how you interact with us. Most of it is business contact information about people acting for their companies.

Information you give us

  • Forms. When you fill out a form on our website, for example to contact us, request a proposal, register for an event or download an ebook or template, we collect what you enter. This can include your name, email address, phone number, company name, company website, job title and other details about your role, and your written answers about your business and its challenges. Our forms are provided by HubSpot. If a form on our website that HubSpot does not provide asks for your email address, HubSpot's collected forms feature may also record what you enter in it.
  • Meetings. When you book a meeting or consultation through HubSpot Meetings, we collect your name, email address, the time you choose and your answers to any booking questions.
  • Chat. When you use the chat on our website, we collect your messages and anything you share in them, such as your name and email address. Chat conversations are recorded and stored in HubSpot, and they may be handled in part by automated or AI-assisted tools. If you prefer, you can email us at hi@digitalegy.io instead.
  • Email. When you email us, for example at hi@digitalegy.io, we receive your email address, your message and any attachments. Our email runs on Google Workspace.
  • Newsletter and blog subscriptions. When you subscribe, we collect your email address and your subscription preferences.
  • Online tools. When you use our HubSpot ROI calculator or total cost of ownership (TCO) calculator, we receive the business figures you enter and, if you download your results, your first name, last name and work email address. When you use the HubSpot Website Grader on our website, we receive the website address you want graded and your email address.
  • Job applications. When you apply through our careers page, we collect your resume, cover letter, contact details and any other information you choose to include.
  • Client relationships. If your company works with us, we keep the business contact details of the people we work with, our communications, proposals and agreements, records of the services we provide, and billing records. We do not take payments on our website.

Information collected automatically

  • Server logs. Our website is hosted by HostGator. Its servers automatically log your IP address, your browser's user agent (which describes your browser and device), the page or file you request, and the date and time of the request.
  • Cookies, pixels and similar technologies. Our website uses cookies, pixels, tags and embedded content from HubSpot, Google, TikTok and other companies. Depending on the tool and on your choices, they can collect your IP address, cookie and device identifiers, browser and device type, the pages you view, the links you click, the page that sent you to us, how long you stay, and how you interact with forms, chat and videos. Section 5 describes each tool.
  • General location. Some of these tools estimate your general location, such as your country or city, from your IP address. We do not collect your precise geolocation.
  • Email activity. Our marketing emails are sent through HubSpot, which may record whether you open them and which links you click.

Information from other sources

  • People who refer you to us, such as a client, a colleague or a business partner.
  • Our analytics and advertising partners, which give us reports, mostly in aggregated form, about how people find and use our website and respond to our ads.
  • Publicly available sources, such as your company's website or professional profiles you have made public, which we may review to prepare for a meeting or a proposal.
  • Social networks, if you interact with our pages or contact us through them. We receive the information the network makes available to us, such as your profile name.

Please do not send us sensitive information

We do not ask for sensitive information on our website. Please do not include Social Security or tax identification numbers, government ID or driver's license numbers, financial account or card numbers, passwords, health or health insurance information, biometric data, or information about your racial or ethnic origin, religious beliefs, sex life or sexual orientation in our forms, chat, calculators or emails. The only exception is an identity document that we ask for to verify a privacy request under Mexican law (see Section 11). Send it only when we ask, and you may cover any numbers we do not need to confirm who you are.

3. How we use information

We use personal information to:

  • respond to your questions, requests and chat messages;
  • schedule and hold meetings and consultations;
  • deliver what you ask for, such as downloads, event registrations, calculator results and Website Grader reports;
  • prepare proposals, and provide, manage and improve our services, including support, client communications and billing;
  • review job applications and contact candidates;
  • send newsletters, blog updates and information about our services, events and resources that we think may interest you (you can opt out at any time, as explained in Section 14);
  • understand how visitors use our website and content, and improve them (analytics);
  • measure the results of our advertising, and show our ads on other websites, apps and social networks to people who have visited our website (targeted advertising, explained in Section 6);
  • keep our website, systems and records secure, and detect and prevent spam, fraud and abuse;
  • comply with the law, respond to lawful requests, enforce our Terms and Conditions, and protect our rights and the rights of others;
  • carry out a business transfer (see Section 7); and
  • carry out other purposes that we describe to you when we collect the information, or that you consent to.

We may combine the information we collect from different sources, for example your form submissions with your earlier visits to our website, to understand your interests and to serve you better. We may also use automated tools, including AI-assisted features of the software we use, to help us answer chats, summarize conversations and organize our records. We do not make decisions about you based solely on automated processing when those decisions have legal or similarly significant effects on you.

The laws of some countries require a legal reason, or "legal basis," for using personal information. Depending on the law that applies to you and on the purpose, we rely on one or more of the following:

  • Steps you ask us to take, or a contract. For example, to answer your inquiry, prepare a proposal, or provide services to you or your company.
  • Your consent. For example, for the cookies and advertising pixels that our cookie banner controls, for marketing messages where the law requires consent, and for marketing text or WhatsApp messages. You can withdraw your consent at any time. Withdrawing it does not affect what we did before. Some third-party tools load before you make a choice in our banner, as explained in Section 5.
  • Our legitimate interests, where the law allows it, in running, securing and promoting our business, as long as your rights do not outweigh those interests.
  • Legal obligations, such as tax, accounting and record-keeping requirements.

Mexico: primary and secondary purposes

For people in Mexico, our primary purposes are those necessary for our relationship with you: responding to your requests, scheduling meetings, delivering what you ask for, preparing proposals, providing and managing our services, reviewing job applications, keeping our website secure and complying with the law.

Our secondary purposes are not necessary for that relationship, and you can refuse them at any time: sending marketing communications, analytics, and advertising measurement and targeted advertising. To refuse or withdraw your consent for secondary purposes, unsubscribe from our emails, decline cookies in our cookie banner (if you already accepted, delete the cookies for digitalegy.io in your browser so the banner appears again, as explained in Section 5), use the tools in Section 6, or email hi@digitalegy.io with the subject "Secondary purposes." Refusing secondary purposes will not affect the services you ask us for. Where Mexican law allows tacit consent, if you give us your information after this policy has been made available to you and you do not object, you consent to the uses described in it, except where this policy says we ask for your express consent, such as for marketing text and WhatsApp messages.

Colombia: authorization

Where Colombian law applies, we need your prior, express and informed authorization to process your personal data, unless an exception in Colombian law applies. Authorization can be given in writing, orally, or through conduct that clearly and unequivocally shows that you authorize us. Silence is never treated as authorization. You can revoke your authorization or ask us to delete your data at any time, as explained in Section 11. However, the TikTok Pixel, the sharing tools on our blog, embedded content and some files from other servers currently load before you make a choice in our cookie banner, so they can collect information before you give your authorization. Section 5 explains these tools and how to block them.

5. Cookies, pixels and similar technologies

Cookies are small text files that a website stores in your browser. Pixels, tags and scripts are small pieces of code that send information to the company that provides them. Embedded content, such as a video player, loads from another company's servers. We use these technologies to:

  • run the website, protect it, remember your cookie choices and keep the chat working (necessary);
  • understand how visitors use our website (analytics);
  • remember visitors who use our chat (functionality); and
  • measure our ads and show them to people who visited our website (advertising).

Our cookie banner

When you first visit our website, a cookie banner provided by HubSpot asks you to accept or decline cookies. This section explains what accepting and declining mean. Until you accept:

  • HubSpot does not set its analytics cookies, although it uses the necessary cookies listed below and may still receive limited information about your visit that does not rely on cookies;
  • Google Analytics and Google Ads run in Google's consent mode with cookies turned off, which means Google's tags still load and may send Google limited signals that do not use cookies; and
  • the advertising pixels we manage through HubSpot's ads tool (the Meta Pixel, the LinkedIn Insight Tag and a Google Ads tag) do not load.

Your choice applies only to the browser and device you are using. To change it, delete the cookies for digitalegy.io in your browser settings. The banner will appear again on your next visit, and you can make a new choice.

What the banner does not control. The following tools load when a page loads, whether or not you accept cookies, and declining cookies in our banner does not stop them:

  • the TikTok Pixel, which loads on every page of our website;
  • the LinkedIn, Facebook and X (formerly Twitter) sharing tools on our blog;
  • embedded content, such as YouTube videos, on the pages that contain it; and
  • the fonts, icons, images and video player code that some pages load from Google and from content delivery networks, as described below.

You can block these tools with your browser's privacy settings or with a content-blocking browser extension, and you can limit how these companies use information for advertising with the tools listed in Section 6.

Tools that load on our website

  • HubSpot (HubSpot, Inc.). HubSpot provides our forms, meeting scheduler, chat, calls-to-action and other interactive elements, videos, calculators, Website Grader, cookie banner and website analytics. The HubSpot tracking code loads on every page. HubSpot hosts our account in its United States data center and processes this information for us as our service provider. If you accept cookies, HubSpot's cookies record your visits, and when you later submit a form, HubSpot links those earlier visits to your contact record. HubSpot's privacy policy explains that HubSpot also uses certain information about website visitors, collected through its tracking code, for its own purposes. You can ask HubSpot to remove your information from its commercial dataset through HubSpot's privacy preferences page. Read the HubSpot Privacy Policy.
  • Google Analytics 4 (Google LLC). Loads on every page through HubSpot's Google Analytics integration and helps us understand how visitors use our website. Google says that Google Analytics 4 does not log or store IP addresses. Learn how Google uses information from sites or apps that use its services, read the Google Privacy Policy, or opt out of Google Analytics on all websites with the Google Analytics Opt-out Browser Add-on.
  • Google Ads (Google LLC). Conversion tags on a few pages, such as the page you see after booking a meeting, tell us when our ads lead to an action. If you accept cookies, a Google Ads tag managed through HubSpot's ads tool also loads on our pages. Google and other third-party vendors may use cookies to show you our ads on other websites based on your past visits to our website. You can control ad personalization in Google's Ads Settings (or in My Ad Center when you are signed in to Google).
  • TikTok Pixel (TikTok). Loads on every page as soon as the page loads, and currently does not wait for your choice in our cookie banner. It sends TikTok information such as your IP address, browser and device identifiers, and the pages you view and actions you take on our website, so that we can measure our TikTok ads and show them to people who visited our website. Read TikTok's Privacy Policy, which shows the version for your region (in the United States, TikTok's U.S. Privacy Policy).
  • Meta Pixel (Meta) and LinkedIn Insight Tag (LinkedIn). Loaded through HubSpot's ads tool, and only after you accept cookies. They help us measure our ads and show them on Facebook, Instagram and LinkedIn to people who visited our website. Read the Meta Privacy Policy, the Meta Cookies Policy, the LinkedIn Privacy Policy and the LinkedIn Cookie Policy.
  • Sharing tools on our blog (LinkedIn, Meta and X). Our blog pages load LinkedIn's share plugin, Facebook's JavaScript SDK and X's widgets script so that you can share our articles. These scripts load with the page, even if you do not click a share button, so LinkedIn, Meta and X can receive your IP address, browser information and the address of the page you are reading, and can set or read their own cookies. Read the LinkedIn Privacy Policy and the Meta Privacy Policy; X's privacy policy is available on x.com.
  • Embedded content. Some pages include YouTube videos and Google Maps (Google LLC), HubSpot videos, Vimeo videos (Vimeo.com, Inc.), Spotify players (Spotify USA Inc.), GIPHY images (Giphy, Inc.), Facebook share buttons and LinkedIn posts. When a page with embedded content loads, the provider may receive your IP address, browser information and the address of the page, and may set its own cookies. For example, Vimeo's player sets a cookie called vuid. Their own policies apply: Google Privacy Policy (YouTube and Google Maps), HubSpot Privacy Policy, Vimeo Privacy Policy, Spotify Privacy Policy, GIPHY Privacy Policy, Meta Privacy Policy and LinkedIn Privacy Policy.
  • Fonts, icons, images and code from other servers. A few pages show images, such as emoji, that are stored on Google servers. Some of our Spanish-language landing pages load fonts from Google Fonts (Google LLC), and some load an icon stylesheet from BootstrapCDN. On some pages, playing a video in a pop-up player also loads the player's code from the Plyr content delivery network (cdn.plyr.io). When these files load, the provider receives your IP address, browser information and the address of the page.

Cookies set on our website

HubSpot, necessary cookies (set without consent):

  • __cfruid and __cfuvid: set by HubSpot's content delivery provider for rate limiting; they expire at the end of your browser session.
  • __cf_bm: bot protection; expires after 30 minutes.
  • __hs_opt_out (6 months), __hs_do_not_track (6 months), __hs_initial_opt_in (7 days) and __hs_cookie_cat_pref (6 months): remember your cookie choices.
  • hs-messages-is-open (30 minutes) and hs-messages-hide-welcome-message (1 day): keep the chat widget working.

HubSpot, analytics cookies (set only after you accept):

  • __hstc (6 months): HubSpot's main cookie for tracking visitors, including the times of your first, last and current visits and your session number.
  • hubspotutk (6 months): keeps track of your identity as a visitor; it is passed to HubSpot when you submit a form and is used to avoid duplicate contact records.
  • __hssc (30 minutes): keeps track of sessions.
  • __hssrc (end of session): detects whether you restarted your browser.

HubSpot, functionality cookie: messagesUtk (6 months) recognizes visitors who use our chat. Depending on a setting in our chat tool, HubSpot either treats it as a necessary cookie, which is set without consent, or sets it only with your consent.

For HubSpot's full and current list, see What cookies does HubSpot set in a visitor's browser.

Google Analytics (set only after you accept): _ga (2 years), which distinguishes visitors, and a cookie that starts with _ga_ followed by our measurement ID (2 years), which keeps track of your session.

TikTok Pixel (set when the page loads): _ttp, cookies that start with ttcsid_, and ttclid. TikTok says these advertising cookies last 13 months from the last time they were used.

Other providers. Google Ads, the Meta Pixel, the LinkedIn Insight Tag, the sharing tools on our blog and the providers of embedded content may set their own cookies, which are described in their own policies.

6. Targeted advertising and your choices

We use Google Ads, the TikTok Pixel and, if you accept cookies, the Meta Pixel and the LinkedIn Insight Tag to measure our advertising and to show our ads, on other websites, apps and social networks, to people who have visited our website. These partners collect information such as your IP address, device and browser identifiers and the pages you view. They may combine it with information from other websites and apps and use it for their own purposes, as described in their privacy policies. Under some U.S. state laws, this may be considered "selling" or "sharing" personal information, or "targeted advertising." We do not sell personal information for money.

How to opt out

  • Our cookie banner. Declining cookies, or deleting the cookies for digitalegy.io so that you can decline on your next visit, stops HubSpot's analytics cookies, Google's advertising and analytics cookies, the Meta Pixel and the LinkedIn Insight Tag. It does not stop the TikTok Pixel, the sharing tools on our blog, embedded content, or the fonts, icons, images and code that some pages load from other servers (see Section 5).
  • Your browser. You can block third-party cookies, delete cookies, browse in a private window, or install a content-blocking extension that stops pixels and scripts, including the TikTok Pixel. These choices apply to each browser and device separately, and deleting your cookies can also delete opt-out cookies you set earlier.
  • Google. Use Google's Ads Settings or My Ad Center, and the Google Analytics Opt-out Browser Add-on.
  • TikTok. If you do not have a TikTok account, use TikTok's privacy webform to manage the ads that TikTok serves elsewhere online. If you have an account, use the ad settings in the TikTok app.
  • Meta. If you have a Facebook or Instagram account, use the ad settings in your account. The Meta Cookies Policy explains these settings and other choices.
  • LinkedIn. If you are not a LinkedIn member, use LinkedIn's guest controls. If you are a member, use the advertising settings in your LinkedIn account.
  • HubSpot. Use HubSpot's privacy preferences page to ask HubSpot to delete your information from its commercial dataset. HubSpot treats this as an opt-out of the "sale" of data under applicable law.
  • Industry opt-out tools. The Digital Advertising Alliance's WebChoices tool and the Network Advertising Initiative's opt-out page let you opt out of interest-based advertising from participating companies in the browser you are using.
  • Email us. Send an email to hi@digitalegy.io with the subject "Opt out of targeted advertising." We will not use your contact information for targeted advertising. Choices about the tools that run in your browser are stored in your browser, so we cannot set them for you, but we will tell you how to make them.

Global Privacy Control

Global Privacy Control (GPC) is a setting offered by some browsers and browser extensions that tells websites you want to opt out of the sale or sharing of your personal information. Some U.S. state laws require the businesses they cover to treat a GPC signal as a valid opt-out request. Our website does not currently detect or respond to GPC signals, so turning on GPC does not change which tools load on our website. To opt out, please use the choices above. If we start responding to GPC signals, we will update this policy to explain how.

Do Not Track

Some browsers can send a "Do Not Track" (DNT) signal to the websites you visit. We have not configured our website to respond to DNT signals. Some providers of tools on our website, such as TikTok and GIPHY, state that they do not act on DNT signals either.

Tracking across websites

Third parties, including Google, TikTok, Meta, LinkedIn, X, HubSpot and the providers of embedded content, may collect personal information about your online activities over time and across different websites when you use our website.

7. How we disclose information

We do not sell personal information for money. We disclose personal information in the following ways.

Service providers

These companies process personal information on our behalf, under their agreements with us. Where noted, they also use some of it for their own purposes:

  • CRM, marketing, forms, meetings, chat and website tools: HubSpot, Inc., which hosts our account in its United States data center.
  • Email and office tools: Google LLC, through Google Workspace. Google processes the content of our email as our processor under its Cloud Data Processing Addendum. The Google Cloud Privacy Notice covers the information Google collects for its own operation of the service.
  • Website hosting: HostGator, a brand of Newfold Digital, Inc. Newfold states that it acts as a processor for the data its customers manage. Read the Newfold Digital Privacy Notice.
  • Website analytics: HubSpot, Inc. and Google LLC (Google Analytics). Both also use some of this information for their own purposes, as described under "Advertising, analytics and social media partners" below.
  • Professional advisers, such as lawyers and accountants, who owe us duties of confidentiality.

Advertising, analytics and social media partners

Google (Google Ads, Google Analytics and YouTube), TikTok, Meta, LinkedIn and X receive information through the tools described in Section 5, and they also use it for their own purposes under their own privacy policies. HubSpot also uses certain information about website visitors, collected through its tracking code, for its own purposes, as its privacy policy describes.

Embedded content and other servers

Google (YouTube and Google Maps), HubSpot, Vimeo, Spotify, GIPHY, Meta and LinkedIn receive information when you view a page that includes their content. Google (through Google Fonts and the images it stores), BootstrapCDN and the Plyr content delivery network receive information when a page loads files from them (see Section 5).

Companies under common control

We may share personal information with companies under common ownership or control with DGY Group LLC that help us run our business or provide our services, only for the purposes described in this policy.

Legal reasons and protection

We may disclose personal information when we believe in good faith that the law, a court order, a subpoena or another legal process requires it, or when it is reasonably necessary to protect the rights, property or safety of DGY Group LLC, our clients, you or others, including to prevent fraud and security threats.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, personal information may be disclosed during the process (for example, during due diligence) and transferred as part of the transaction. The recipient will be bound by this policy, unless we give you notice of a different policy.

With your consent or at your direction

We may disclose personal information to other parties when you ask us to or agree to it, for example when you ask us to introduce you to one of our technology partners.

Transfers under Mexican law

Under Mexican law, sharing personal information with service providers that act on our behalf is not a "transfer." Disclosures to the advertising, analytics, social media and embedded content providers described above are transfers to third parties that use the information for their own purposes. For the tools that wait for your choice in our cookie banner, as described in Section 5, you accept these transfers by accepting cookies in our banner, and you can refuse them at any time with the choices in Section 6. The tools listed in Section 5 under "What the banner does not control" load without that acceptance, so for those tools you can refuse the transfer only with the browser and provider choices in Section 6. We may also transfer personal information without your consent where Mexican law allows it, for example to companies under common control with us, when necessary to perform a contract in your interest or to maintain our legal relationship with you, or when the law requires it.

8. How long we keep information

We keep personal information only as long as reasonably necessary for the purposes described in this policy, including to meet legal, tax, accounting and reporting requirements, resolve disputes and enforce our agreements. When we no longer need it, we delete it or anonymize it, or, where the law requires, we first block it and then delete it. We use these criteria:

  • Inquiries and prospects (forms, meetings, chat, calculators and Website Grader): as long as we have, or reasonably expect to have, a business relationship with you or your company, or until you ask us to delete the information.
  • Clients: for as long as we work together, and afterwards for as long as needed to meet legal, tax and accounting obligations and to handle any claims.
  • Marketing lists: until you unsubscribe or ask us to delete your information. After that, we keep a minimal record of your email address and your opt-out so that we do not contact you again.
  • Emails: for as long as needed to handle the conversation, and then according to the category it relates to (for example, inquiry or client).
  • Job applications: for as long as needed to review your application, and afterwards for a reasonable period in case of future openings or legal claims, unless you ask us to delete your application sooner.
  • Server logs: for the period set by our hosting provider's log retention, and longer only if needed to investigate a security issue.
  • Analytics and advertising data: according to the retention settings of each tool and the provider's own policies. Cookie durations are listed in Section 5.

9. How we protect information

We use reasonable administrative, technical and physical safeguards designed to protect personal information, we limit access to the people who need it for their work, and we choose service providers that offer security protections for the information they process for us. No website, transmission or storage system is completely secure, so we cannot guarantee the security of your information. If a security breach involving your personal information occurs, we will notify you and the relevant authorities when, and in the manner, the laws that apply require. For example, where Wyoming law applies, we give notice in the most expedient time possible and without unreasonable delay, consistent with the needs of law enforcement.

10. International transfers

DGY Group LLC is a United States company. HubSpot hosts our account in its United States data center. Our other service providers, including Google (Google Workspace and Google Analytics) and HostGator (Newfold Digital), may store and process information in the United States and in other countries where they or their subcontractors operate. Our team members work from the United States, Canada, Mexico and Colombia and may access information from those countries. If you are outside the United States, including in Mexico, Colombia or elsewhere in Latin America, your personal information will be transferred to and processed in the United States, and possibly in other countries, where data protection laws may differ from those of your country. We rely on our service providers' agreements with us to protect information they process on our behalf.

11. Your privacy rights and how to use them

Choices available to everyone

Wherever you live, you can ask us to:

  • confirm whether we hold personal information about you and give you a copy of it (access), in a portable and commonly used format where feasible (portability);
  • correct information that is inaccurate or incomplete (correction);
  • delete your information (deletion), except information we must keep, for example for legal, tax or accounting reasons;
  • stop sending you marketing messages;
  • stop using your contact information for targeted advertising, and not sell or share it (the tools that run in your browser depend on the choices described in Section 6, which we cannot make for you); and
  • review our decision on your request (appeal).

We will not discriminate against you for using these rights. For example, we will not deny you services or offer you a different quality of service because you made a request. If you ask us to delete information that we need to provide a service, we may not be able to provide that service.

Residents of U.S. states with privacy laws

Several U.S. states, including California, Colorado, Connecticut, Delaware, Oregon, Texas and Virginia, have laws that give their residents rights such as access, correction, deletion, data portability, and opting out of targeted advertising, the sale of personal information and certain profiling, plus the right to appeal a business's decision. Many of these laws apply only to businesses above certain size or data volume thresholds, and several do not cover information about people acting in a business or employment role.

DGY Group LLC is a small business. Based on our current size and the volume of personal information we handle, we do not believe we are currently subject to the California Consumer Privacy Act. Whether or not a particular state law applies to us, we offer every visitor the rights and choices in this policy, including the advertising choices described in Section 6, and we respond within the timelines in this section. If our obligations change, we will update this policy.

Mexico: ARCO rights

Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), issued in 2025, you have the right to access, rectify, cancel and oppose the processing of your personal data, known as "ARCO" rights. You can also revoke your consent and limit the use or disclosure of your personal data.

  • What to include in your request: your name and a way for us to send you our answer; documents that prove your identity (for example, a copy of an official identification, on which you may cover any numbers we do not need; we use it only to verify your identity and keep it only as long as needed to handle and document your request) or, if a representative acts for you, documents that prove the representative's identity and authority; a clear description of the personal data and of the right you want to exercise; and anything else that helps us locate your data.
  • Timing: we will tell you our decision within 20 business days after we receive your request. If we grant it, we will carry it out within 15 business days after we tell you. When justified, each period can be extended once for an equal period, and we will let you know.
  • Cost: exercising ARCO rights is free. We may only charge reproduction, copying or shipping costs.
  • Automated processing: you can oppose processing by automated means, without human intervention, that produces unwanted legal effects or significantly affects you. We do not make decisions of that kind, but you can always ask for a person to review any matter.
  • Authority: if you disagree with our answer, or if we do not answer in time, you can file a request for the protection of your data (solicitud de protección de datos) with the Secretaría Anticorrupción y Buen Gobierno within 15 business days after you receive our answer, or after the response period ends without an answer.

Colombia: your rights under Law 1581 of 2012

Under Colombia's Law 1581 of 2012 and its regulations, you have the right to:

  • know, update and correct your personal data;
  • request proof of the authorization you gave us;
  • be told, on request, how we have used your personal data;
  • file complaints with the Superintendencia de Industria y Comercio (SIC), after first completing our query or claim process;
  • revoke your authorization or ask us to delete your data; and
  • access your personal data free of charge, at least once each calendar month and whenever this policy changes substantially.

Queries (consultas). If you ask to see your data or how we use it, we will answer within 10 business days after we receive your query. If we cannot meet that deadline, we will tell you why and when we will answer, which will be no later than 5 business days after the first deadline.

Claims (reclamos). If you want your data corrected, updated or deleted, or you believe we have not met our duties, send us a claim with your name, a description of the facts, the email address where you want our answer, and any supporting documents. If your claim is incomplete, we will ask you, within 5 days after we receive it, to complete it. If you do not complete it within 2 months after our request, we will consider the claim withdrawn. Once your claim is complete, we will mark the data concerned as "claim in process" within 2 business days and resolve the claim within 15 business days. If we cannot meet that deadline, we will tell you why and when we will resolve it, which will be no later than 8 business days after the first deadline.

This policy is effective as of October 11, 2026. We keep our databases for as long as DGY Group LLC carries out the activities described in this policy, and we keep personal data in them according to the criteria in Section 8.

Nevada

Nevada residents may submit a verified request not to sell covered information to our designated request address, hi@digitalegy.io. We do not sell covered information as defined by Nevada law (NRS 603A.333).

How to make a request

Email hi@digitalegy.io, if possible from the email address you used with us. Tell us what you are asking for and the country (and, in the United States, the state) where you live. Please send privacy requests by email so that we can verify and track them. To stop marketing messages, you can also use the unsubscribe link in our emails or reply STOP, as described in Section 14.

Verifying your identity. To protect your information, we must confirm your identity before we act on a request. Usually we do this by confirming the request with the email address in our records, or by asking for information we already hold about you. We may ask for more information when needed, and for requests under Mexican law we will ask for the identity documents described above. We use the information you give us for verification only for that purpose. If we cannot verify your identity, we will tell you.

Authorized agents and representatives. Someone else may make a request for you. We may ask that person for proof of your written permission or legal authority, and we may ask you to confirm your identity with us directly.

How quickly we respond

  • General rule: unless a different deadline below applies, we respond within 45 days after we receive your request. When reasonably necessary, we may extend this once by up to 45 more days, and we will tell you about the extension and the reason within the first 45 days.
  • Mexico: our decision within 20 business days, and the result within 15 business days after that, as described above.
  • Colombia: queries within 10 business days and claims within 15 business days, as described above.
  • Appeals: within 60 days, as described below.
  • Marketing opt-outs: within 10 business days (see Section 14).

If a law that applies to your request sets a shorter deadline than the ones above, we will meet that shorter deadline.

Appeals

If we decline your request in whole or in part, we will explain why. You can appeal by replying to our decision with "Appeal" in the subject line. We will respond to your appeal within 60 days after we receive it and explain our decision in writing. If we deny your appeal, you may contact the attorney general of your state. People in Mexico and Colombia may also go to the authorities named above.

12. Information for California residents

This section gives California residents the disclosures required by the California Online Privacy Protection Act (CalOPPA) and, for transparency, describes our practices using the terms of the California Consumer Privacy Act. It does not mean that the California Consumer Privacy Act applies to us (see Section 11).

Categories of personal information

In the past 12 months, we have collected the following categories of personal information. The sources are described in Section 2, the purposes in Section 3, the recipients in Section 7, and how long we keep information in Section 8.

  • Identifiers, such as your name, email address, phone number, IP address, and cookie and device identifiers. Disclosed to our service providers, and to the advertising, analytics, social media and embedded content providers described in Section 5.
  • Personal information described in California's customer records law, such as your name, phone number, education and employment history. Disclosed to our service providers.
  • Commercial information, such as the services you asked about, our proposals and the services we provide. Disclosed to our service providers.
  • Internet or other electronic network activity information, such as the pages you view, the links you click, the page that sent you to us, your chat interactions and your activity with our emails. Disclosed to our service providers, and to the advertising, analytics, social media and embedded content providers described in Section 5.
  • Geolocation data, limited to the general location estimated from your IP address. Disclosed to our service providers, and to the advertising, analytics, social media and embedded content providers described in Section 5.
  • Professional or employment-related information, such as your company, job title and role, and, if you apply for a job, your work history. Disclosed to our service providers.
  • Inferences drawn from the information above, such as your likely interest in our services. Disclosed to our service providers.

Sensitive personal information. We do not ask for sensitive personal information, except a copy of an identity document when we need one to verify a privacy request under Mexican law. We use that document only for verification, and we do not use or disclose sensitive personal information to infer characteristics about you.

Selling and sharing. We do not sell personal information for money. In the past 12 months, these companies may have received identifiers, internet or other electronic network activity information, and general geolocation data through tools on our website, and may use it for their own purposes, including advertising: Google (Google Ads, Google Analytics, YouTube and Google Maps), TikTok (the TikTok Pixel), Meta (the Meta Pixel and Facebook's sharing tools), LinkedIn (the LinkedIn Insight Tag, its share plugin and embedded posts), X (its sharing tools), HubSpot (through its tracking code) and Vimeo, Spotify and GIPHY (through embedded content). California law and some other state laws may treat these disclosures as a "sale" or as "sharing" for cross-context behavioral advertising. You can opt out as described in Section 6.

Consumers under 16. We have no actual knowledge that we sell or share the personal information of consumers under 16 years of age.

Reviewing and correcting your information

You can review your personal information and ask us to correct it by emailing hi@digitalegy.io, as described in Section 11. You can also update your email preferences through the links at the bottom of our marketing emails.

Do Not Track and tracking by other parties

How we respond to Do Not Track signals, and which other parties may collect personal information about your online activities over time and across different websites, are explained in Section 6.

Changes and effective date

How we notify you of material changes is explained in Section 16. The effective date and the date of the last update appear at the top of this policy.

13. Children

Our website and services are intended for adults acting on behalf of businesses. They are not directed to children, and we do not knowingly collect personal information through our website from anyone under 18, including children under 13. If you believe that a child has given us personal information, please contact us at hi@digitalegy.io and we will delete it. We have no actual knowledge that we sell or share the personal information of consumers under 16 years of age.

14. Emails, calls, text messages and WhatsApp

Email

We send marketing emails, such as newsletters, blog updates, event invitations and information about our services, to business contacts. Our marketing emails include an unsubscribe link, and you can also unsubscribe by emailing hi@digitalegy.io. We honor opt-out requests within 10 business days. After you opt out, we may still send you messages that are not marketing, such as replies to your requests, meeting confirmations and messages about services you receive from us.

Phone calls, text messages and WhatsApp

If you give us your phone number, we may call you about your request, for example to answer a question or confirm a meeting. We send text or WhatsApp messages about your request only if you ask us to contact you that way or agree to it.

If we send marketing text messages or WhatsApp messages, we send them only to people who have given us their prior express written consent to receive them at the phone number they provided. Your consent is not a condition of buying any of our services. Giving us your phone number in a form does not, by itself, mean that you agree to receive marketing text messages or WhatsApp messages.

You can withdraw your consent at any time by replying STOP (or QUIT, END, REVOKE, OPT OUT, CANCEL or UNSUBSCRIBE) to one of our text messages, by telling us in the WhatsApp conversation, by emailing hi@digitalegy.io, or in any other reasonable way. We honor these requests within 10 business days. WhatsApp's own terms and policies also apply to messages sent through WhatsApp. You can ask us at any time to stop calling you, and we will honor that request within 10 business days.

15. Other websites and services

Our website links to, and embeds content from, websites and services that other companies run, such as HubSpot, Google, YouTube, LinkedIn, Meta, X, TikTok, Vimeo, Spotify and GIPHY. We do not control them, and their own privacy policies apply to the information they collect. We encourage you to read those policies.

16. Changes to this policy

We review this policy at least once a year and update it when our practices change. When we update it, we will change the "Last updated" date at the top of this page. For material changes, we will tell you before they take effect by posting a notice on our website and, where we have your email address, by email. If a change means using your personal information for a new purpose that requires your consent, we will ask for your consent first.

17. Contact us

If you have questions, requests or complaints about this policy or about how we handle personal information, please email us at hi@digitalegy.io. Please use email for all privacy questions and requests.

Digitalegy, a DGY Group LLC company. DGY Group LLC is a Wyoming limited liability company.

This policy is also available in Latin American Spanish (or select Español in the language menu of this page). If the two versions differ, the English version controls, unless the law that applies to you requires otherwise. Our Terms and Conditions also apply to your use of our website.