Skip to content

Privacy policy

Last updated 24 July 2026

This policy explains what this website collects, why, who processes it, how long it is kept, and how to have it removed.

Who we are

This site is operated by gavAI LLC, registered in Scottsdale, Arizona, United States. gavAI is the data controller for the information described here. Contact: privacy@gavai.io.

What we collect and why

When you use the contact form: your email address and your message, so we can reply and keep a record of the conversation.

When you request data removal: your email address, so we can confirm the request came from you and act on it.

As you browse: standard technical data such as your IP address, browser type, pages viewed, and rough location, gathered through analytics and server logs. We use it to keep the site working, spot abuse, and understand what people read.

That is the full list. We collect nothing else, and we do not sell or rent your data to anyone.

Who processes it

We use a small set of established providers, each receiving only what its task requires: Vercel (hosting, server logs, and cookieless traffic and page-speed measurement), HubSpot (contact form and email records), PostHog (analytics), Sentry (error reporting), and Resend (transactional email such as removal confirmations).

Each is a separate company operating under its own privacy terms. We do not share your data with anyone else except where the law requires it.

Cookies

PostHog sets cookies to tell repeat visits apart and measure usage. HubSpot sets a cookie called hubspotutk that links a form submission to the visits that led to it. Neither is essential.

Where a consent banner is shown, non-essential cookies are set only if you accept, and you can change your mind later. You can also refuse or clear cookies in your browser. The site works either way.

Error reporting (Sentry) and Vercel's traffic and page-speed measurement run regardless of your cookie choices. None of them set cookies or track you between pages: Sentry records a diagnostic report, including your IP address, only when something breaks, and Vercel's counts are aggregated with no identifier stored on your device. We rely on legitimate interest to keep the site working and fast, and you can object by writing to privacy@gavai.io.

Legal basis

For visitors in the UK and EU: we rely on legitimate interest to run and secure the site and to answer enquiries, on consent for non-essential cookies, and on legal obligation where the law requires us to keep records. You can withdraw consent at any time without affecting anything that happened before.

How long we keep it

Contact-form records: up to 24 months after the last exchange, then deleted.

Analytics data: 12 months under PostHog's retention settings.

Server logs and error reports: 30 days.

Records we are legally required to keep, such as invoices, are kept for the period the law sets. You can ask us to delete everything else sooner.

Where it is processed

Our providers process data in the United States. For transfers from the UK and EU, each relies on the EU-US Data Privacy Framework, the UK extension to it, or standard contractual clauses. Details are in each provider's privacy terms.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or object to how we use it, and ask for it in a portable format. We answer within one month.

The quickest route to deletion is the data removal page. It emails you a confirmation code, you enter it on that page, and we then erase the records we hold against your address. Analytics is the one thing it cannot reach: we never send your email address to PostHog and never name you to it, so there is no record there tied to you to find. That data is not linked to you and ages out on the schedule above. You can also write to privacy@gavai.io.

If you are in the UK or EU and are unhappy with how we handled your data, you can complain to your local supervisory authority, such as the ICO in the UK.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe we have, email privacy@gavai.io and we will delete it.

Changes to this policy

If this policy changes, we update the date at the top of this page. If a change meaningfully affects how your data is handled, we say so on this page rather than changing it silently. Questions can go to privacy@gavai.io.