Last updated October 8, 2026
The business responsible for the information described here is DTR Operations Group, LLC, a Virginia limited liability company (SCC ID 12072658). This page describes what DTR Operations Group LLC actually does with information submitted through our intake forms and client practice portal — not a generic template. The public sample report does not require you to submit business information. If our practices change, this page changes with them.
Depending on which form you use, we collect:
We do not use cookies for advertising or third-party tracking. Netlify, our hosting provider, keeps standard server request logs (IP address, browser type, timestamps) for operating the site.
Solely to produce the business assessment or diagnostic you requested, to follow up with you about it, and to keep a record of what you submitted so there's never a question later about what you told us.
Your submission is stored in a Supabase database and Supabase Storage (for attachments and generated reports), both accessed only through our own server-side functions using credentials that never reach a browser.
We keep two short-lived items in your browser tab's session storage, not in cookies. Only our own pages use them, and they reach DTR only through an action you take, such as redeeming a code or submitting a form:
Switched answers are removed when the new form opens and are not used if more than two hours old. Your browser discards both when the tab's session ends.
If you sign in to your client portal, your browser also keeps that sign-in in its local storage so you stay signed in; signing out removes it.
For the paid, full DTR Diagnostic, we use Anthropic's Claude API to conduct the automated research pass across our six lenses. Only the business information needed for the analysis is sent — our system removes designated name, email, and phone fields from the typed intake payload. Attachment processing has a separate permission and the limitations described below. The intake requires you to check an explicit consent box before submission; submission alone does not start AI research. According to the provider's current commercial API policies, data submitted through the API is not used to train their models by default; vendor policies are the vendor's and can change, and we will update this page if our own practices change. See our AI & Data Practices page for more detail.
If you select automatic attachment review, supported files become client-supplied evidence in the assessment. TXT and DOCX text is extracted on our server. PDFs and images may be sent intact to Anthropic's Claude API to extract selected relevant passages and visual information; contact details inside those files cannot be reliably removed beforehand. Please redact unnecessary personal information before uploading. Known contact details are removed from extracted text where possible, but this is not a guarantee that every personal detail is detected. Files without attachment-specific permission, legacy uploads and unsupported formats require manual handling. Unreadable material and processing limits are disclosed. Providing a link does not authorize or cause automatic retrieval of its contents.
Access to the client practice portal is restricted to exactly two accounts: Donald Roberts and Tiffany Roberts, DTR's co-founders. There is no other staff, analyst, or contractor with access. Every full assessment is personally reviewed by one of us before anything is shared with you.
We follow a structured retention framework. Deletion is currently performed manually by a DTR co-founder — we do not claim automated deletion, because we have not built it. Our target retention periods, pending professional legal review, are:
To request deletion: email dtroperationsgroup@gmail.com from the address you used on your intake. We will verify the request, identify your records and uploaded files, check whether anything must be kept for a legitimate legal, accounting, contractual, or dispute-related reason (we'll tell you if so), delete everything eligible — including stored files, not just the database entry — log the action internally, and confirm completion to you. We cannot delete information from third-party systems beyond our actual ability to cause deletion there.
Please do not include Social Security numbers, passwords, full financial account or card numbers, or medical/health records in any form field or attachment. None of that information is needed for a business assessment, and we have no reason to receive it.
We never publish your name, your company, your results, or anything identifying you as marketing material without your separate, explicit, voluntary permission — feedback you give us privately stays private. Permission is tracked per use, is never a condition of any pricing or service, and you can revoke it for future uses at any time by emailing us.
By submitting any of our forms, you consent to the collection and use of your information as described on this page. If you have questions before submitting, contact us first.
Email us at dtroperationsgroup@gmail.com, reach out through the contact form on our homepage, or reply to any email you've received from us.
Note: this policy describes our actual current practices. It is not a substitute for legal advice, and has not been reviewed by an attorney. We recommend professional legal review before treating this as a final, binding policy.