Privacy Policy
How we collect, use, and protect information related to inquiries and workflow implementation work.
Who We Are
D2 GROUP operates the website located at d2group.co. We are a workflow design and implementation partner structured to serve founder-led B2B service firms and lean operations teams. We do not sell client data. We collect only what is necessary to evaluate your inquiry, build your workflows, and manage our business relationship.
Information We Collect
During the scope of an inquiry or engagement, we collect:
- Commercial Context: Names, business emails, company details, and descriptions of the workflows you wish to automate.
- Operational Assets: Process maps, standard operating procedures (SOPs), or loom videos demonstrating your current state.
- System Credentials: Scoped login access, API keys, or sandbox access to third-party tools (like n8n, Make, CRM systems), subject to our least-necessary access standards.
- Technical Data: Standard analytics (IP, browser type, navigation behavior) to monitor website performance and routing.
How We Use Your Data
- To qualify your inquiry and determine if we are the right implementation partner.
- To architect, test, and document the automated workflows we build for your operations team.
- To issue invoices, manage billing, and enforce commercial contracts.
- To improve our delivery models (we anonymize systems architectures for internal learning, but never expose your proprietary data or client lists).
Sub-Processors & Vendor Boundaries
To deliver our services, we use a small number of trusted sub-processors. We do not share your data with these vendors for their own marketing purposes:
- Cloud Infrastructure: AWS (US regions), Vercel (Frontend hosting).
- Productivity: Google Workspace (Email, Docs), Slack (Communication).
- Implementation: Make.com, n8n.io, OpenAI/Anthropic (via API only).
Note: Whenever possible, we build workflows inside YOUR accounts so that the data processing agreement exists directly between you and the vendor.
AI Use and Data Guardrails
Because we implement AI-assisted workflows, data handling is critical:
- We configure API connections (e.g., to OpenAI or Anthropic) using zero-retention parameters wherever the vendor supports them.
- We do not unilaterally submit your proprietary data to public model training data sets.
- We advise building workflows within your own cloud infrastructure (your AWS, your n8n) so you maintain persistent ownership of the data boundary.
Data Subject Rights (GDPR & Beyond)
Regardless of your location, we honor standard privacy rights:
- Access: You can request a summary of the personal or project data we hold.
- Correction: You can request updates to inaccurate commercial or contact information.
- Deletion: You can request the deletion of your data once a project concludes, subject to our tax and legal record-keeping requirements.
Data Retention & Handoff
At the conclusion of an engagement, we perform a formal handoff. We instruct you on rotating API keys, downgrading our administrative access, or removing our seats from your tools entirely. We retain project scoping documents, commercial agreements, and technical architecture notes for ongoing support and historical record-keeping, but we do not persistently store raw production data flowing through the systems we build.
Contact
If you have specific compliance, routing, or access control questions prior to engagement, please direct them to: