Privacy Policy

1. Scope and roles

This Policy applies to aiandsons.com, our public tools, blog, account experiences, client portal, consulting intake, newsletter, and related communications operated by Ai and Sons LLC (“Ai and Sons,” “we,” “us,” or “our”).

For website visitors, prospects, account users, and business contacts, Ai and Sons generally determines why and how personal information is used. When we process personal information solely for a consulting client, the client generally controls that processing and our Data Processing Addendum governs.

2. Information we collect

• Contact and identity data: name, business email, organization, role, profile image, and Google account identifiers.
• Inquiry and engagement data: messages, chatbot assessments, business goals, budgets, project records, deliverables, approvals, support requests, and portal activity.
• Account and billing data: account identifiers, authentication events, Stripe customer and subscription status, invoices, quotes, and transaction metadata. Payment-card details are collected by Stripe, not stored by us.
• Content: blog comments, feedback, files or records intentionally shared in a client engagement, and AI tool inputs and outputs.
• Workspace integration data: authorized Gmail, Calendar, and Drive records and metadata used for client operations and project synchronization.
• Sales and professional data: business contact details and professional information obtained from public sources, referrals, clients, and approved data providers.
• Technical and usage data: IP address, device/browser details, page interactions, security events, cookies, local storage, analytics identifiers, and advertising signals.

3. Sources

We receive information directly from you; from your organization or an authorized client; through Google sign-in and connected services; from public professional sources, referrals, and approved business-data providers; from Stripe and other service providers; and automatically from devices when optional analytics or advertising is enabled.

4. How we use information

• Provide, secure, support, and improve the website, tools, accounts, portal, subscriptions, and consulting services.
• Respond to inquiries, prepare proposals, manage engagements, process billing, and maintain business records.
• Generate AI-assisted recommendations, drafts, classifications, summaries, and other requested outputs, subject to human review where appropriate.
• Send requested newsletters, transactional messages, and lawful business-to-business outreach; honor opt-outs and suppression requests.
• Measure site performance and, only with the required choice, personalize and measure advertising.
• Detect abuse, investigate incidents, comply with law, establish or defend legal claims, and enforce agreements.

5. AI processing and sensitive information

We may use disclosed AI providers to process non-PHI information for professional and business purposes. AI outputs can be inaccurate and should be reviewed before use.

Do not submit protected health information (PHI), payment-card data, account credentials, government identification numbers, biometric data, children’s data, or similarly sensitive information through public forms, chatbots, comments, or tools. PHI is prohibited unless a separate written Business Associate Agreement is active and the specific environment has been approved for PHI.

For healthcare software projects, we may build and test with synthetic data and deliver the system into a client-owned production environment without receiving or accessing the client’s PHI. That no-PHI build-and-handoff model does not authorize PHI in Ai and Sons systems, support tickets, screenshots, recordings, logs, backups, or AI tools.

6. Disclosures and subprocessors

We disclose information only as reasonably necessary to clients and authorized users; infrastructure, authentication, hosting, database, storage, AI, email, analytics, advertising, billing, collaboration, and security providers; professional advisers; transaction counterparties; and government authorities when legally required. Current provider categories are described in our Subprocessor List.

7. Advertising, sale, and sharing

We do not sell personal information for money. If you permit personalized advertising, advertising partners may process identifiers and activity in a way some US privacy laws define as “sharing” or targeted advertising. You can reject or withdraw advertising consent through Cookie Settings or a recognized Global Privacy Control signal.

8. Retention

• Executed contracts, invoices, approvals, and project audit records: seven years.
• Active working client data: returned or deleted within 90 days after termination unless an agreement, legal hold, or law requires otherwise.
• Leads and contact submissions: three years after last activity; closed accounts: two years.
• Analytics: fourteen months; security logs: twelve months; rate-limit IP records: thirty days.
• Privacy-request records: five years; minimal unsubscribe suppression records: indefinitely.
• Backups: designed to age out within ninety days unless subject to legal hold. PHI retention is controlled by an executed BAA and SOW.

9. Your choices and rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or an appeal; object to or opt out of targeted advertising, sale, or sharing; or withdraw consent. We voluntarily accept these requests even when a particular state-law threshold does not apply, subject to identity verification and lawful exceptions.

• Use our privacy request form or email team@aiandsons.com.
• Use Cookie Settings in the footer to change optional analytics and advertising choices.
• Use the unsubscribe link in marketing email or reply to the sender.

10. International visitors

We operate from the United States. Information may be processed in the United States and other countries where our providers operate. Where required for client-controlled data, our Data Processing Addendum provides appropriate transfer terms. We do not currently direct services to EU or UK consumers.

11. Children

Our services, accounts, subscriptions, and AI tools are for professional and business users who are at least 18. We do not knowingly collect personal information from children.

12. Security and changes

We use administrative, technical, and physical safeguards appropriate to the information and service. No system is completely secure. We will post material revisions with a new effective date and provide additional notice where required.

13. Contact

Ai and Sons LLC
111 Providence Dr, Clairton, PA 15025
team@aiandsons.com