Privacy policy.

This policy covers this website and the work we do for clients. It is written to be read, not to be survived. If anything here is unclear, ask us and we will answer plainly.

What we collect

From this site, only what you type. The contact form takes your name, your email address and whatever you choose to tell us about your business. Booking a call through the scheduler on the contact page passes your name, email address and chosen time to Cal.com, who run that booking on our behalf.

We do not run analytics, advertising pixels or session recording on this site, and we set no cookies of our own. Our host keeps standard server logs, including IP addresses, for a short period for security and diagnostics.

During client work we see whatever sits inside the systems we are asked to automate. That can include personal data belonging to your customers and staff. We handle it as a processor acting on your instructions, under the agreement signed for that project.

How it is used

Enquiry details are used to reply to you, to scope the work and, if we go ahead, to run the project. That is the whole list. We do not sell data, we do not share it with advertisers, and we do not add you to a mailing list you did not ask for.

Client data is used only to deliver the agreed work. We do not use it to train models, we do not reuse it across clients, and we do not retain copies once a project closes beyond what is described under Retention.

Our basis for processing enquiry data is our legitimate interest in responding to people who contact us. Our basis for processing client data is the contract we have with that client.

Third parties

We keep this list short on purpose and we keep it current:

• Cal.com handles call scheduling. They receive your name, email address and booking time.
• Our email provider receives and stores the messages you send us.
• Our hosting provider serves this site and keeps the server logs described above.
• Model and cloud providers may process client data during a build. Which ones is agreed with the client before any work starts, and cloud and model accounts are the client's own, so that data stays under their control and their terms rather than ours.

We do not add a provider that touches client data without telling that client first.

Retention

Enquiries that do not become projects are deleted within twelve months. Project records are kept for the length of the engagement and for six years afterwards, which is the period we need them for tax and contractual purposes. Server logs are kept for thirty days.

Where we hold client data inside a client's own accounts, it stays under that client's retention rules, not ours. On handover we remove our access.

Your rights

You can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, ask for a copy in a portable format, or object to us holding it at all. Write to contact@aiagency.so and we will respond within thirty days.

If you are unhappy with how we have handled a request you can complain to the data protection authority where you live.

Getting in touch

Privacy questions go to contact@aiagency.so. A person reads that address and we aim to reply within two working days.

We will post any material change to this policy on this page and date it, rather than changing it quietly.