Privacy
What this site collects, why, who handles it, and how to have it removed.
Updated 2026-11-10
Short version
dee.agency is a one-person studio run by Dmitry (Dee) Kargaev in Los Angeles, California. I am the controller of your data. I don't sell your data or share it for advertising, and there are no advertising trackers on this site.
What the contact form sends
When you send the contact or quote form, I receive:
- your email address, and your name if you give it
- your message, the service you picked and your budget
- on the AI visibility brief: your website URL, what AI tools should recommend you for, your target buyer, competitors, the issue you've seen and any proof links
- the page you sent it from and the page that sent you to the site (referrer)
- your browser's timezone and language setting, so I know your local time
Your IP address is used to stop the form being flooded. It is held briefly in memory for that and not saved. Our host Vercel also logs requests, including IP addresses, for a short time.
I use this to reply and, if we work together, to run the project and send invoices. It isn't added to a mailing list. The legal basis is taking steps you asked for before a contract, and my legitimate interest in answering enquiries.
The instant reply is drafted by AI
When you send the form, your message and the details above go to an AI model through OpenRouter, which passes them to the model's provider (currently Anthropic or Google). The model drafts a short first reply, which is emailed to you straight away. Nobody reads that reply before it goes out. It is checked automatically and swapped for a fixed message if it looks wrong, and it says it is automated. I read every enquiry myself and send the real reply.
Emails and notifications
The form emails your enquiry to me and sends the instant reply to you through Cloudflare's email service or Resend. A short summary of the enquiry also goes to the messaging tools I use to get notified of new enquiries. If you email me directly, your message goes to my inbox.
Nothing from the form is stored in a database. Enquiries stay in my inbox as long as they're useful, and project records as long as tax and legal rules require.
Booking a call
The "book a call" links go to Cal.com. What you enter there is handled by Cal.com under its own privacy policy, and I receive the booking details.
Analytics
I use Umami, an open-source analytics tool that runs on my own server. It does not use cookies and does not follow you across other websites.
When you load a page, Umami records:
- the page you visited and the page that sent you here (referrer)
- browser, operating system, device type and screen size
- language and approximate location (country, region, city), worked out from your IP address
- clicks on a few buttons and links, such as calls to action and outbound links
It does not record form contents or email addresses. Your IP address is used to work out location and to group visits into a session, then dropped. It is not stored. The session ID is a one-way hash that changes every month, so it can't be used to recognise you over time. The data is kept as long as it's useful for site statistics; it can't be used to identify you.
I use these numbers to see which pages people read. I don't sell them, share them, or combine them with other data.
The legal basis under the GDPR is my legitimate interest in understanding how the site is used. To opt out, block
tail.deeflect.com in your browser or content blocker, or run
localStorage.setItem('umami.disabled', 1) in your browser console on this site.
Fonts
The site's own fonts are served from this site. Case study pages also load the client's brand fonts from Google Fonts, which receives your IP address when those pages load.
Who processes it
- Vercel hosts the site and runs the contact form.
- OpenRouter, and the model provider it routes to, drafts the instant reply.
- Cloudflare or Resend delivers the form emails.
- Cal.com handles call bookings.
- Google Fonts serves fonts on case study pages.
These providers work worldwide, so your data may be processed outside your country, including in the United States. Where required, transfers rely on safeguards such as standard contractual clauses.
Cookies
This site sets no cookies. Cal.com uses its own cookies on its own site.
Your rights
Depending on where you live (including under the GDPR, the UK GDPR and California law), you can ask what I hold about you, ask me to correct, delete or export it, and object to how I use it. Email hi@dee.agency from the address you used, with "Privacy request" in the subject, and I'll reply within 30 days. I won't treat you differently for asking. In the EU and UK you can also complain to your data protection authority.
Children
This site is for businesses. I don't knowingly collect data from anyone under 16. If you think I have, email me and I'll delete it.
Changes
If this page changes in a way that matters, the date at the top changes with it.