Privacy policy

This site is operated by gavAI LLC, an Arizona company based in Scottsdale, United States. gavAI is the data controller for the information described here. Contact: privacy@gavai.io.

When you use the contact form: your email address and your message, plus anything else you choose to add — your name, your company, and a few optional answers about your business — so we can reply and keep a record of the conversation.

When you request data removal: your email address, so we can confirm the request came from you and act on it.

As you browse: standard technical data such as your IP address, browser type, pages viewed, and rough location, gathered through analytics and server logs. We use it to keep the site working, spot abuse, and understand what people read.

When you arrive from an advertisement: whether the visit led to a contact form submission, sent back to the advertising platform so it can measure its own ads. Each confirmation includes a one-way scrambled version of your email address, which cannot be turned back into the address itself, and neither platform ever receives the address as you typed it. None of this happens unless you accept marketing cookies. We also record which advertisement and campaign brought you here, taken from the labels on the web address you arrived on, so we can tell which advert led to your inquiry.

That is the full list. We collect nothing else, and we do not sell or rent your data to anyone.

We use a small set of established providers, each receiving only what its task requires: Vercel (hosting, server logs, and cookieless traffic, page-speed and usage measurement), Resend (transactional email), Macro (the CRM that files your inquiry), Cloudflare (checking the contact form is not being filled in by a bot), Calendly (scheduling an intro call, only if you choose to book one), PostHog (analytics), Sentry (error reporting), OpenAI (measuring whether an advertisement in ChatGPT led to an inquiry), and Google (measuring whether an advertisement in Google search led to an inquiry). Your inquiry also passes through our email providers, Proton and Google.

Each is a separate company operating under its own privacy terms. We do not share your data with anyone else except where the law requires it.

PostHog sets cookies to tell repeat visits apart and measure usage. OpenAI sets one called __obref that links an inquiry back to an advertisement you clicked in ChatGPT. Google Ads sets _gcl and _ga cookies that do the same for an advertisement in Google search. None of them is essential, and none is set unless you accept, with one exception noted below. Separately from cookies, we keep those advertisement labels in your browser's session storage while you look around, so an inquiry written a few minutes later can still be matched to the advert. They hold nothing about you personally, and your browser discards them when you close the tab.

Where a consent banner is shown, non-essential cookies are set only if you accept, and you can change your mind later. The exception is a diagnostic link we use to check that our own advertising tags still work: a page opened with one loads those tags for that single visit. It is never recorded as a choice, so the banner returns next time, and an earlier decision to refuse still stands. You can also refuse or clear cookies in your browser. The site works either way.

Error reporting (Sentry) and Vercel's traffic and page-speed measurement run regardless of your cookie choices. None of them set cookies or track you between pages: Sentry records a diagnostic report, including your IP address, only when something breaks, and Vercel's counts are aggregated with no identifier stored on your device. We rely on legitimate interest to keep the site working and fast, and you can object by writing to privacy@gavai.io. Cloudflare's spam check works the same way: it loads only once you start filling the contact form in, and may set a short-lived cookie to remember that the check passed. The Calendly scheduler on the thank-you page loads only after you choose to open it, and then manages its own cookies inside its frame.

For visitors in the UK and EU: we rely on legitimate interest to run and secure the site and to answer inquiries, on consent for non-essential cookies, and on legal obligation where the law requires us to keep records. You can withdraw consent at any time without affecting anything that happened before.

Contact-form records: up to 24 months after the last exchange, then deleted.

Analytics data: 12 months under PostHog's retention settings.

Server logs and error reports: 30 days.

Records we are legally required to keep, such as invoices, are kept for the period the law sets. You can ask us to delete everything else sooner.

Our providers process data in the United States. For transfers from the UK and EU, each relies on the EU-US Data Privacy Framework, the UK extension to it, or standard contractual clauses. Details are in each provider's privacy terms.

You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or object to how we use it, and ask for it in a portable format. We answer within one month.

The quickest route to deletion is the data removal page. It emails you a confirmation code, and entering it on that page proves the request is yours. Records we can delete automatically go immediately; your inquiry itself sits in our email and CRM, and we remove it there within one month. We do not email you again afterwards, and we do not keep your address in order to do so. Analytics data is not linked to your identity and ages out on the schedule above. You can also write to privacy@gavai.io.

If you are in the UK or EU and are unhappy with how we handled your data, you can complain to your local supervisory authority, such as the ICO in the UK.

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe we have, email privacy@gavai.io and we will delete it.

If this policy changes, we update the date at the top of this page. If a change meaningfully affects how your data is handled, we say so on this page rather than changing it silently. Questions can go to privacy@gavai.io.

We publish this policy in English. Where we offer a translation and the two versions differ, the English version governs.