Privacy Policy

BIT California, LLC, a California limited liability company, doing business as Document Fulfillment Services (“DFS,” “we,” “us,” or “our”), provides this Privacy Policy on behalf of itself, its parent, subsidiaries, and affiliates.

This Privacy Policy explains how we handle personal information in two contexts:

This Privacy Policy is intended to align with a SOC 2 Type II control environment by clearly describing data handling, retention, and accountability boundaries. This Privacy Policy does not replace contractual terms (including confidentiality, data protection, and security obligations) agreed to with a customer.

In performing contracted services, DFS may receive files or data from a customer that can contain personal information about the customer’s end users or recipients (“Customer Data”). DFS processes Customer Data only to perform the services the customer has contracted for. The customer remains the controller (or business) for Customer Data, and DFS acts as a service provider or processor.

DFS is not the custodian of Customer Data for purposes of individual access, correction, deletion, portability, or similar requests. Requests and disputes related to Customer Data must be directed to the customer. If we receive such a request directly, we will refer the request back to the customer, unless required by law.

When you visit our corporate website, we may collect certain information automatically (including through cookies) and use it for marketing, analytics, and to better understand and engage prospective business customers.

DFS does not seek to collect personal details about individuals for its own purposes in service operations. However, Customer Data provided by the customer may include personal information (for example, names, addresses, account-related fields, or other information the customer includes in production files).

We may collect business contact information, such as:

When you use our website, we may collect:

We use cookies and related technologies and may attempt to identify or associate a website visitor with a business contact or company for marketing purposes. We may also use marketing automation and enrichment vendors to augment or enrich website and cookie-derived data to improve marketing insights and outreach.

We use Customer Data only as needed to perform the contracted services, including:

DFS does not sell Customer Data and does not use Customer Data to market to the customer’s end users.

We may use business contact information to:

We may use website data to:

We may share personal information with vendors who provide services to DFS, such as:

We require vendors to protect information and to use it only to provide services to DFS, consistent with applicable agreements.

We may share information as directed by a customer, consistent with our contract, for example to support a customer workflow or request.

We may disclose information if necessary to comply with law or legal process, including subpoenas, court orders, or other lawful requests, or to protect the rights, property, and safety of DFS, our customers, or others.

If DFS is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be disclosed as part of that transaction subject to appropriate confidentiality protections.

DFS retains Customer Data only for as much use and as much time as needed to perform the contracted services. As a standard practice, DFS purges Customer Data no later than 45 days after work order completion, unless:

We retain website and marketing data for as long as reasonably necessary to support marketing, analytics, security, and business recordkeeping, subject to applicable law and our internal retention standards.

DFS is not the custodian or controller for Customer Data. Any request to access, correct, delete, or otherwise exercise rights over Customer Data must be directed to the customer that owns the relationship with the individual. If DFS receives a request regarding Customer Data, DFS will refer the requester to the customer and may notify the customer of the request where appropriate.

Depending on your location and applicable law, you may have rights regarding personal information we control in a business contact or website context. You may contact us as described in Section 12.

You can control cookies through your browser settings and, where available, consent or preference tools on our website. Disabling certain cookies may affect website functionality. You may also opt out of certain marketing communications by using the unsubscribe mechanism included in those communications.

DFS maintains an information security program designed to protect Customer Data and other information. Our safeguards are intended to be consistent with a SOC 2 Type II control environment and may include administrative, technical, and physical controls such as access controls, least privilege, monitoring, and security incident response procedures.

No method of transmission or storage is completely secure. We work to maintain appropriate safeguards, but we cannot guarantee absolute security.

DFS primarily operates in the United States. If information is transferred across borders, DFS will take steps designed to maintain appropriate protections consistent with applicable law and contractual obligations.

Our services and website are intended for business use and are not directed to children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent revision. If we make material changes, we will post the updated policy on our website and may provide additional notice where required by law.