LEGAL / DATA PRIVACY POLICY
Your data.
A clear route.
Effective November 4, 2026
This Data Privacy Policy explains how the public SoFloAI Solutions website, journal and inquiry experience handle personal information. SoFloAI Solutions is the commercial brand shown on this Site. The legal service provider for paid work is identified in the signed agreement for that engagement.
1. Scope
This Policy applies to sofloai.solutions and public pages that link to it. It does not replace a customer agreement or service-specific notice, and it does not govern websites operated by The FotoBoyz, Scotts Medical Supply, MediHarbor or another portfolio brand. Those sites and any third-party links have their own privacy practices.
2. Information you choose to provide
The SoFloAI inquiry form asks for a company name, your name, one way to reach you, an inquiry type and a short description. A company website and additional contact method may be optional. If you arrived through a recognized event, card or referral link, the form may include the short source tag shown to you on the page.
When the button says “Send inquiry,” the Site stores the inquiry in a private inbox for review and reply. If email notification is configured, the inquiry may also be sent to the professional mailbox. “Open in email instead” prepares a message in your own email application; you decide whether to send it. A professional inquiry does not enroll you in marketing.
If you contact SoFloAI by email or another channel, the message and contact details you provide are used to respond and maintain the professional conversation.
3. Technical and security information
The Site’s hosting and security provider processes ordinary request information needed to deliver and protect the Site, such as network address, browser or device details, requested page, time and security signals. When the inquiry form uses Cloudflare Turnstile, Turnstile processes the data needed to distinguish a person from automated traffic; Cloudflare states that Turnstile does not access form entries or other page inputs.
To limit repeated inquiry attempts, the Site converts the network address into a daily one-way hash rather than putting the raw address in the rate-limit table. That short-lived record is cleared after it is more than 24 hours old as requests are processed.
4. Information kept in your browser
If you open a recognized printed-code or referral link, the Site may save its short tag and the arrival date in this browser’s local storage. The tag changes the page wording and can accompany an inquiry so SoFloAI knows where the conversation started. It is not sent to SoFloAI unless you submit an inquiry. It remains on the device until you choose “Forget where we met” on this Site or clear this Site’s browser data. Topic-only links may apply only to the current visit and are not saved.
The Site may also keep display preferences or a current-session choice in browser storage so the interface behaves consistently. Apart from the DMEStudios pages described below, the public Site does not use advertising trackers. If blog search is available, it runs in the browser and the search words are not submitted to SoFloAI.
Advertising and measurement on DMEStudios pages
If you arrive at sofloai.solutions/dmestudios/ from an ad or campaign link, the page keeps that link’s campaign labels (such as utm_campaign or gad_campaignid) and any ad click identifier (such as gclid, gbraid, wbraid, fbclid, msclkid, li_fat_id or ttclid) in this browser session. Campaign labels usually describe the ad, but a search-term label can include the words you searched. Links to the DMEStudios site may carry these details with you. Until you accept the tags described below, they go no further than SoFloAI’s own sites. If you send an inquiry, they are saved with it, along with the page you landed on, the site that referred you and your cookie choice, so SoFloAI can see which campaign led to the conversation. This session also keeps those details and a one-way fingerprint of your answers, so that sending the same request twice counts as one inquiry.
Those pages can also run measurement and advertising tags from Google, Microsoft, LinkedIn or Meta. A tag runs only if SoFloAI has switched it on and you have chosen Accept in the cookie banner. The banner shows until you choose, unless Global Privacy Control is on or the address could carry personal details; in either case the tags stay off and no banner appears. If you accept, your choice applies across sofloai.solutions sites and tags keep running on these pages without asking again for up to 180 days. After you accept, those providers can receive information such as the page address, your browser and device details, the ad you clicked and the fact that an inquiry was sent. They may also set cookies or browser storage, which last as long as each provider decides. If SoFloAI turns on enhanced conversions, a one-way hash of the work email you entered is sent to Google with the conversion. If you accepted, SoFloAI may later report to that ad provider that your click led to a qualified conversation or a customer. Session replay, where used, is set to hide form entries.
These tags are never placed on the sign-in, client portal, meeting-link or other private pages. These pages are for business inquiries; do not enter patient information.
Choosing Decline, or sending a Global Privacy Control signal, keeps those tags off. From then on, ad click identifiers are not kept or sent with an inquiry, and each of these pages clears what those tags left in its cookies and browser storage when it loads. Anything a provider already received is held under that provider’s terms, and an inquiry saved before you declined keeps what was sent with it. Campaign labels, the landing page and the referring site may still accompany an inquiry. To change your mind, use Cookie choices at the bottom of those pages; it is not offered while Global Privacy Control is on. Your choice is remembered in a small first-party cookie for up to 180 days. If a Decline has to reload the page, a half-written form is kept in this session until the page returns.
5. Why information is used
Information is used to deliver and secure the Site; respond to inquiries; remember the source or preference you asked the browser to keep; diagnose abuse or reliability problems; maintain business records; establish, exercise or defend legal claims; and comply with law. Where a law requires a legal basis, the basis is the steps you request before a possible contract, legitimate interests in operating and protecting the Site and responding to business communications, consent where expressly requested, and legal obligations where applicable.
6. Providers and disclosures
Cloudflare provides Site delivery, security, Turnstile verification and the D1 database used for the inquiry inbox. If configured, Resend provides an additional email-notification channel for an inquiry. An email provider processes a message when you send email directly. If you accept advertising tags as described in Section 4, Google, Microsoft, LinkedIn or Meta may receive the information listed there. These providers process information for their service under their own terms and privacy commitments.
Information may also be disclosed when required by law, to protect a person or system, to investigate misuse, or as part of a business transaction subject to appropriate safeguards. SoFloAI does not sell personal information for money. Advertising tags on DMEStudios pages run only with your choice to accept, as described in Section 4; everywhere else, SoFloAI does not share personal information for cross-context behavioral advertising.
7. Customer service data
When a customer hires SoFloAI to build or operate a system, the customer usually decides why its business data is processed. The signed agreement, service-specific privacy notice and, where incorporated, the Data Processing Agreement govern that work. Do not send patient data, payment-card details, government identifiers, passwords or other sensitive information through the public inquiry form.
8. Retention
Inquiry and correspondence records are kept for as long as reasonably needed to respond, follow up, maintain business records, resolve disputes and meet legal obligations, then deleted or de-identified when they are no longer needed. No single fixed period fits every conversation; the criteria are the status of the inquiry, any resulting agreement, recordkeeping duties and unresolved claims. A verified deletion request will be honored unless a record must be kept for a lawful reason.
The rate-limit table uses the short period described above. Browser-stored information stays on the device until it is removed as described in Section 4. Providers may keep security, delivery or backup records under their applicable terms and legal duties.
9. Security
SoFloAI uses access restrictions and provider security features intended to protect Site information, and limits the public form to the information needed to begin a conversation. No Internet service can promise absolute security. If you believe information submitted through the Site has been exposed or misused, use the contact below.
10. Your choices and rights
You may ask what personal information the Site holds about you, request a correction or deletion, or object to or restrict a use. Depending on where you live and the law that applies, you may have additional rights, including a copy of information, portability, withdrawal of consent, or an appeal of a request decision. SoFloAI may need to verify the request and may retain information where the law permits or requires it. You can also withdraw a choice about advertising tags at any time with Cookie choices on the DMEStudios pages. Exercising a privacy right will not result in unlawful discrimination.
11. Children
The Site is for businesses and professional audiences and is not directed to children. Do not submit personal information about a child through the public inquiry form.
12. International processing
Site providers may process information in the United States and other locations where they operate. Where applicable law requires a transfer safeguard, the responsible party will use an approved mechanism. Customer-project locations and safeguards are documented in the applicable agreement.
13. Changes
Material updates will be posted here with a new effective date. A change to this public Policy does not replace a signed customer agreement.
14. Contact
Send a privacy request or question to Support@sofloai.solutions or mail it to SoFloAI Solutions, PO Box 1484, Boca Raton, FL 33431. Include enough information to identify the relevant inquiry or conversation, but do not send sensitive documents until a secure method is arranged.