Last Updated: July 23, 2025
- 1. IntroductionAt aiworksforus ("we," "us," or "our"), we build and operate AI‑driven voice, SMS, WhatsApp, and web‑chat services. Protecting your personal information is fundamental to how we design and deliver our services. This Privacy Policy explains what data we collect, how we use it, the legal basis for processing, and the comprehensive controls you have over your information.This policy applies to all users of our services, websites, APIs, and applications. By using our services, you acknowledge that you have read and understood this Privacy Policy.
- Information We Collect
Information You Provide Directly
- Account and Profile Information:
- Personal details: full name, email address, phone number, job title
- Company information: business name, industry, company size, address
- Billing information: payment details, billing address, tax identification numbers
- Profile preferences: language settings, timezone, notification preferences
Communications and Content:- Support requests, feedback, and survey responses
- Content you upload, create, or transmit through our services
- Messages, scripts, and configurations for your AI agents
- Training data and conversation logs you provide
- Files, documents, and media uploaded to our platform
Verification Information:- Identity verification documents when required
- Business registration information for enterprise accounts
- Tax forms and compliance documentation
Information We Collect AutomaticallyUsage and Performance Data:- Features accessed, frequency of use, and session duration
- API calls, response times, and error rates
- User interactions with our platform and AI agents
- Performance metrics and system diagnostics
- Search queries and navigation patterns
Technical Information:- IP address, MAC address, and device identifiers
- Browser type, version, and language settings
- Operating system and device specifications
- Network information and connection quality
- Referral sources and click-through rates
Location Information:- General geographic location based on IP address
- Timezone information for scheduling features
- Country and region for compliance and service delivery
Information from Third-Party SourcesIntegration Data:- Data from CRM systems, calendar applications, and other integrated services
- Social media profile information when you connect social accounts
- Contact information from third-party data providers (with proper consent)
Business Information:- Company data from business directories and databases
- Industry benchmarks and market research data
- Lead qualification data from marketing partners
3. Legal Basis for ProcessingWe process your personal data based on the following legal grounds:Contract Performance: Processing necessary to provide our services and fulfill our contractual obligations to you.Legitimate Interests: Processing for our legitimate business interests, including:- Improving and developing our services
- Ensuring security and preventing fraud
- Direct marketing (where not requiring consent)
- Analytics and performance monitoring
Consent: Where you have given explicit consent for specific processing activities, such as:- Marketing communications
- Optional data collection for service improvement
- Sharing data with specific third parties
Legal Compliance: Processing required to comply with legal obligations, such as:- Tax and accounting requirements
- Regulatory reporting obligations
- Law enforcement requests
4. How We Use Your InformationService Delivery and Management- Create, configure, and manage your AI‑driven agents
- Authenticate your account and manage access permissions
- Process payments and manage billing
- Provide customer support and troubleshoot issues
- Deliver notifications and service updates
AI Training and Improvement- Train and improve our AI models using aggregated, anonymized data
- Develop new features and enhance existing functionality
- Conduct research and development for better AI performance
- Benchmark and validate AI agent effectiveness
Personalization and Optimization- Customize your user experience and interface
- Store preferences and settings across sessions
- Provide relevant recommendations and insights
- Optimize performance based on usage patterns
Security and Compliance- Detect and prevent unauthorized access or fraudulent activity
- Monitor for security threats and vulnerabilities
- Ensure compliance with legal and regulatory requirements
- Maintain audit logs and forensic capabilities
Communication and Marketing- Send transactional emails and service notifications
- Provide product updates and feature announcements
- Conduct customer surveys and collect feedback
- Send marketing communications (with appropriate consent)
Analytics and Business Intelligence- Analyze usage trends and service performance
- Generate insights for business decision-making
- Measure customer satisfaction and retention
- Conduct market research and competitive analysis
5. AI-Specific Privacy ConsiderationsAutomated Decision MakingOur AI systems make automated decisions that may affect you, including:- Lead qualification and scoring
- Response prioritization and routing
- Content moderation and filtering
- Anomaly detection and security alerts
You have the right to request human review of automated decisions that significantly affect you.AI Model Training- We use aggregated, anonymized conversation data to improve our AI models
- Personal identifiers are removed or pseudonymized before use in training
- You can opt out of contributing data to model training through your account settings
- Enterprise customers can request private model training with their data only
Bias and Fairness- We actively work to identify and mitigate bias in our AI systems
- Regular audits are conducted to ensure fair and equitable treatment
- We provide transparency reports on AI performance across different demographics
- Users can report suspected bias or discrimination for investigation
6. Data Sharing and DisclosureService Providers and ProcessorsWe share data with trusted third-party service providers who process data on our behalf:Infrastructure Providers: Cloud hosting, data storage, and content delivery networks
Payment Processors: Credit card processing and billing services
Communication Services: Email delivery, SMS, and notification services
Analytics Providers: Performance monitoring and business intelligence tools
Security Services: Threat detection, fraud prevention, and security monitoringAll processors are bound by contractual obligations to protect your data and use it only for specified purposes.Business Partners and Integrations- CRM systems, calendar applications, and other integrated platforms
- API partners and marketplace vendors (with your explicit consent)
- White-label partners and resellers (under appropriate data processing agreements)
Legal and Regulatory DisclosuresWe may disclose your information when required by law or to protect our rights:- Compliance with court orders, subpoenas, or other legal process
- Investigation of fraud, security breaches, or terms of service violations
- Protection of the safety and rights of our users and the public
- Merger, acquisition, or sale of business assets (with appropriate protections)
Aggregated and Anonymous DataWe may share aggregated, anonymized data that cannot identify you:- Industry benchmarks and performance statistics
- Research publications and whitepapers
- Public reporting on service performance and usage trends
7. Data RetentionGeneral Retention Principles- We retain personal data only as long as necessary for the purposes outlined in this policy
- Retention periods vary based on data type, legal requirements, and business needs
- Data is deleted or anonymized when no longer needed
Specific Retention PeriodsAccount Data: Retained for the duration of your account plus 90 days after terminationFinancial Records: Retained for 7 years to comply with tax and accounting regulationsCommunication Logs: Retained for 3 years for quality assurance and training purposesUsage Analytics: Aggregated data retained indefinitely; individual data retained for 2 yearsSecurity Logs: Retained for 1 year for incident investigation and complianceMarketing Data: Retained until you withdraw consent or 5 years from last interactionData DeletionUpon account termination or deletion request:- Personal data is deleted within 30 days unless legal retention is required
- Backups containing your data are overwritten within 90 days
- Anonymized data may be retained for research and improvement purposes
8. Your Rights and ChoicesUniversal RightsAll users have the following rights regarding their personal data: - Right of Access: Obtain confirmation of data processing and access to your personal data
- Right to Rectification: Correct inaccurate or incomplete personal information
- Right to Erasure: Request deletion of your personal data (subject to legal obligations)
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing purposes
- GDPR Rights (EU/EEA Residents)If you're located in the EU/EEA, you have additional rights under GDPR
- :Right to Restrict Processing: Limit how we use your personal data in certain circumstances
- Right to Withdraw Consent: Withdraw consent for processing activities that require it
- Right to Lodge a Complaint: File a complaint with your local data protection authority
- Right to be Informed: Receive clear information about how your data is processedCCPA Rights (California Residents)If you're a California resident, you have rights under the California Consumer Privacy Act:
- Right to Know: Request disclosure of personal information collected, sold, or disclosed
- Right to Delete: Request deletion of personal information we've collected about you
- Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal data
- )Right to Non-Discrimination: Receive equal service and pricing regardless of privacy choicesExercising Your RightsTo exercise any of these rights:
- Log in to your account and use the privacy controls in your settings
- Submit a request through our privacy portal at privacy.aiworksforus.io
- Email our Data Protection Officer at dpo@aiworksforus.io
- Call our privacy hotline at +1 (770) 718-6214
We will respond to your request within 30 days (or as required by applicable law).9. Cookies and Similar TechnologiesTypes of Cookies We UseStrictly Necessary Cookies: Essential for website functionality and security- Session management and authentication
- Security features and fraud prevention
- Load balancing and performance optimization
Performance and Analytics Cookies: Help us understand how you use our services- Website traffic and usage analytics
- Error tracking and performance monitoring
- A/B testing and feature optimization
Functional Cookies: Remember your preferences and settings- Language and regional preferences
- Interface customization options
- Accessibility settings
Marketing and Advertising Cookies: Used to deliver relevant advertisements- Retargeting and remarketing campaigns
- Conversion tracking and attribution
- Social media integration
Managing Cookie PreferencesYou can control cookies through:- Your browser settings to block or delete cookies
- Our cookie consent banner when you first visit
- Account settings to manage functional and analytics cookies
- Third-party opt-out tools for advertising cookies
Do Not TrackWe honor Do Not Track signals where technically feasible and legally required.10. Security MeasuresTechnical Safeguards- Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Multi-factor authentication, role-based permissions, and principle of least privilege
- Network Security: Firewalls, intrusion detection, and DDoS protection
- Data Loss Prevention: Automated backup systems and disaster recovery procedures
Administrative Safeguards- Employee Training: Regular security and privacy training for all staff
- Background Checks: Security screening for employees with data access
- Incident Response: Comprehensive breach response and notification procedures
- Regular Audits: Internal and external security assessments and penetration testing
Physical Safeguards- Data Centers: SOC 2 Type II certified facilities with biometric access controls
- Equipment Security: Encrypted storage devices and secure disposal procedures
- Environmental Controls: Fire suppression, temperature monitoring, and power redundancy
Breach NotificationIn the event of a data breach:- We will notify affected users within 72 hours of discovery
- Regulatory authorities will be notified as required by applicable law
- We will provide detailed information about the breach and remediation steps
- Credit monitoring or other protective services may be offered when appropriate
11. International Data TransfersTransfer MechanismsWhen transferring personal data internationally, we use appropriate safeguards:- Standard Contractual Clauses: EU-approved data transfer agreements
- Adequacy Decisions: Transfers to countries with adequate protection levels
- Binding Corporate Rules: Internal policies governing data transfers within our organization
- Certification Programs: Participation in recognized privacy frameworks
Data Localization- Primary data processing occurs in the United States
- EU customer data may be processed within the EU/EEA when requested
- Specific data residency requirements can be accommodated for enterprise customers
- Cross-border transfers are documented and governed by appropriate legal frameworks
12. Children's PrivacyOur services are not intended for children under 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child:- Contact us immediately at privacy@aiworksforus.io
- We will investigate and delete the information promptly
- We may request verification of parental authority before taking action
- Additional protections apply in jurisdictions with specific children's privacy laws
13. Marketing CommunicationsCommunication Types- Transactional: Account notifications, billing alerts, and service updates (cannot opt out)
- Promotional: Product announcements, feature updates, and educational content
- Newsletter: Industry insights, best practices, and company news
- Event Invitations: Webinars, conferences, and networking opportunities
Consent and Opt-Out- Marketing communications require explicit consent
- Clear unsubscribe options in all marketing emails
- Granular controls for different types of communications
- Respect for communication preferences across all channels
PersonalizationMarketing communications may be personalized based on:- Your account information and service usage
- Previous engagement with our communications
- Industry and company characteristics
- Geographic location and language preferences
14. California Consumer Privacy Act (CCPA) DisclosuresCategories of Personal InformationIn the past 12 months, we have collected the following categories:- Identifiers: Names, email addresses, phone numbers, IP addresses
- Commercial Information: Purchase history, service usage, billing records
- Internet Activity: Website usage, search history, interaction with advertisements
- Geolocation Data: General location based on IP address
- Professional Information: Job titles, company information, business contacts
- Inferences: Preferences, characteristics, and predictions based on your data
Sources and PurposesInformation is collected from:- Directly from you through account creation and service use
- Automatically through our websites and services
- Third-party integrations and business partners
- Public databases and business directories
Sharing and Sales- We do not sell personal information for monetary consideration
- We may share information with service providers and business partners
- Sharing is governed by contractual restrictions and purpose limitations
- You can opt out of certain sharing activities through account settings
6. Changes to This Privacy PolicyNotification Process- Material changes will be communicated via email to registered users
- Updates will be posted prominently on our website
- Previous versions will be archived and available upon request
- Significant changes may require renewed consent
Effective DateChanges become effective 30 days after posting unless:- Immediate implementation is required for legal compliance
- Changes are favorable to user privacy rights
- Users provide explicit consent to earlier implementation
By continuing to use our services after changes take effect, you accept the updated Privacy Policy.
20. Limitation of LiabilityTo the maximum extent permitted by law, neither party will be liable for lost profits, lost data, or any indirect, incidental, consequential, or punitive damages arising out of or related to these Terms or the Service—even if advised of the possibility of such damages. Our total aggregate liability under these Terms will not exceed the fees you paid to us in the three months preceding the event giving rise to liability
.21. IndemnificationYou agree to defend, indemnify, and hold aiworksforus and its officers, directors, and employees harmless from any claim, loss, or expense (including reasonable attorneys' fees) arising out of your violation of these Terms or your misuse of the Service.
22. Force MajeureNeither party will be liable for any delay or failure to perform resulting from causes beyond their reasonable control, including natural disasters, war, terrorism, strikes, government actions, or internet service provider failures.
23. Term and Termination24. Export ControlsYou will not export or re‑export the Service in violation of U.S. export laws or regulations.25. Reseller and Partner Terms
- Channel Partners. If you access the Service through a reseller or partner, additional terms may apply as specified in your agreement with that party.
- Partner Responsibilities. Partners must ensure their customers comply with these Terms.
26. Governing Law; Dispute ResolutionThese Terms and any disputes will be governed by the laws of New York, without regard to conflict‑of‑law principles. Any legal action must be brought in federal or state courts located in New York County, New York.
- Arbitration. For disputes involving amounts less than $10,000, either party may elect binding arbitration under American Arbitration Association rules.
- Class Action Waiver. You agree not to participate in class action lawsuits against us.
- Term. These Terms remain in effect while you use the Service.
- Termination by You. You may cancel your subscription at any time through your account settings.
- Termination by Us. We may suspend or terminate your access immediately if you breach these Terms or for security reasons.
- Effect of Termination. Upon termination, your right to use the Service ends; we may delete your data in accordance with our Data Retention Policy.
- Survival. Provisions regarding confidentiality, intellectual property, indemnification, and limitation of liability survive termination.