AiVortX LLC Privacy & Security Policy

At AiVortX LLC (“AiVortX,” “we,” “us,” or “our”), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy & Security Policy explains how we collect, use, disclose, and protect information when you use our website at www.aivortx.com (the “Website”), our AI-powered software-as-a-service platform (the “Platform”), and related services (collectively, the “Services”). This policy applies to all users, including individuals and businesses accessing our Services, and covers both personal and non-personal information.

By using our Services, you consent to the practices described in this Privacy & Security Policy. If you do not agree with this policy, please do not use our Services. We may update this policy periodically, and changes will be effective upon posting on our Website. Your continued use of the Services after such changes constitutes your acceptance of the updated policy.

1. Information We Collect

We collect information to provide, improve, and personalize our Services, comply with legal obligations, and protect our Platform. The types of information we collect include:

1.1 Information You Provide

• Account Information: When you create a Platform Account, we collect details such as your name, email address, phone number, billing information (e.g., credit card details), and business information (if applicable).
• User Contributions: Content you submit, upload, or share on the Platform, such as text, images, videos, or other materials used in connection with our Services (e.g., marketing campaigns, customer data).
• Communications: Information you provide when you contact us via email (e.g., [email protected]), support tickets, including feedback or inquiries.
• Third-Party Integrations: Data you authorize us to import from third-party services (e.g., CRM tools, email platforms) to enhance your use of the Platform.

1.2 Information Collected Automatically

• Usage Data: We collect information about your interactions with the Platform, such as pages visited, features used, time spent, and IP address.
• Device Information: Details about your device, including operating system, browser type, device identifiers, and network information.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track user activity, personalize content, and analyze trends. You can manage cookie preferences through your browser settings.
• Analytics: We use tools like Google Analytics to collect aggregated data about Platform usage, which may include anonymized user behavior data.

1.3 Information from Third Parties

• Third-Party Services: If you integrate third-party services (e.g., payment processors, marketing tools) with our Platform, we may receive data from those providers as authorized by you.
• Publicly Available Data: We may collect publicly available information (e.g., business profiles) to enhance our Services, subject to applicable laws.
• Customer Data: If you are a business user, you may provide us with data about your customers (e.g., names, contact details) to use our Services. You are responsible for obtaining necessary consents for this data.

2. How We Use Your Information

We use your information to operate, improve, and secure our Services, as well as to comply with legal obligations. Specific purposes include:

• Providing Services: To create and manage your Platform Account, process payments, deliver features (e.g., AI-powered analytics, communication tools), and fulfill your requests.
• Personalization: To tailor content, recommendations, and user experiences based on your preferences and usage patterns.
• Customer Support: To respond to inquiries, provide technical support, and address issues related to the Platform.
• Analytics and Improvement: To analyze usage trends, monitor Platform performance, and develop new features or services.
• Marketing and Communications: To send you updates, promotional offers, or newsletters (with your consent where required). You can opt out of marketing communications via the unsubscribe link or by contacting [email protected].
• Security and Fraud Prevention: To detect, prevent, and investigate security incidents, fraud, or unauthorized access.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including responding to law enforcement requests.
• AI Features: To train and improve our AI models, using anonymized and aggregated data, in compliance with our Artificial Intelligence Acceptable Use Policy (see Terms of Service, Exhibit B).

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with trusted third-party vendors (e.g., hosting providers, payment processors, analytics services) who assist in operating our Services, subject to strict confidentiality agreements.
• Third-Party Integrations: If you enable third-party integrations, we may share data with those providers as necessary to facilitate the integration, per your authorization.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity, subject to this policy.
• Legal Obligations: We may disclose information to comply with legal requirements, enforce our Terms of Service, or protect the rights, property, or safety of AiVortX, our users, or others.
• With Your Consent: We may share information when you explicitly consent, such as when you authorize data sharing with a third-party service.
• Aggregated or Anonymized Data: We may share non-identifiable, aggregated data (e.g., usage statistics) for research, marketing, or analytics purposes.

4. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, use, or disclosure. These measures include:

• Encryption: Data is encrypted in transit (using TLS/SSL) and at rest (using AES-256 or equivalent) to safeguard sensitive information.
• Access Controls: Strict access controls limit data access to authorized personnel only, with multi-factor authentication required for critical systems.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential risks.
• Incident Response: We maintain a robust incident response plan to address security breaches promptly and notify affected users as required by law.
• Secure Development: Our Platform is developed using secure coding practices to minimize vulnerabilities.

Despite these measures, no system is completely secure. You acknowledge that internet and telecommunications networks are inherently insecure, and we cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your Login Credentials and for any actions taken under your Platform Account.

5. Your Data Rights

Depending on your jurisdiction (e.g., GDPR for EU residents, CCPA for California residents), you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention obligations.
• Restriction: Request restriction of processing under certain conditions.
• Data Portability: Request a transferable copy of your data in a structured, commonly used format.
• Objection: Object to certain types of processing, such as direct marketing.
• Withdraw Consent: Withdraw consent for data processing where applicable, without affecting prior lawful processing.

To exercise these rights, contact us at [email protected] or submit a request through your Platform Account. We will respond within the timeframes required by law (e.g., 30 days for GDPR, 45 days for CCPA). We may require verification of your identity before processing requests.

6. Customer Data Responsibilities

If you are a business user providing customer data to the Platform (e.g., contact lists for marketing campaigns), you represent and warrant that:

• You have obtained all necessary consents and permissions to collect, process, and share such data with AiVortX, in compliance with applicable laws (e.g., GDPR, CCPA, TCPA, CAN-SPAM Act).
• You maintain your own terms of service and privacy policy for your customers, providing at least the same level of protection as AiVortX’s policies.
• You are solely responsible for the accuracy, quality, and legality of customer data you provide.

AiVortX is not responsible for your compliance with data protection laws or for disputes arising from your handling of customer data.

7. International Data Transfers

AiVortX is based in the United States, and your information may be processed or stored in the U.S. or other countries where our service providers operate. If you are located outside the U.S., your data may be transferred to jurisdictions with different data protection laws. We implement safeguards, such as Standard Contractual Clauses (SCCs) for EU data, to ensure compliance with applicable regulations.

If you are in an embargoed country or a sanctioned individual/entity, you are prohibited from using our Services, per our Terms of Service.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. Types of cookies include:

• Essential Cookies: Necessary for the Platform’s operation (e.g., authentication, session management).
• Analytics Cookies: Track usage patterns to improve our Services.
• Marketing Cookies: Enable personalized ads and promotions (with your consent where required).

You can manage cookie preferences via your browser settings or our cookie consent tool (if available). Disabling cookies may affect Platform functionality.

9. Third-Party Services and Links

Our Platform may integrate with third-party services (e.g., payment processors, analytics tools) or link to external websites. These third parties have their own privacy policies, and we are not responsible for their practices. You should review their policies before using their services or clicking their links.

10. Data Retention

We retain your information for as long as necessary to provide the Services, comply with legal obligations, or resolve disputes. Account information is retained while your Platform Account is active and for a reasonable period thereafter (e.g., 90 days for inactive accounts, per our Terms of Service). Customer data you provide is retained according to your instructions or legal requirements. You may request deletion of your data, subject to our retention obligations.

11. Children’s Privacy

Our Services are not intended for individuals under 18 years old. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us at [email protected] to request its deletion.

12. Changes to This Policy

We may update this Privacy & Security Policy to reflect changes in our practices, legal requirements, or Services. Updates will be posted on our Website with the “Last Updated” date revised. We encourage you to review this policy periodically. Significant changes may be communicated via email or Platform notifications.

13. Contact Us

For questions, concerns, or to exercise your data rights, please contact us at:

For opt-out requests or to unsubscribe from marketing communications, contact [email protected] or use the unsubscribe link in our emails.

14. Governing Law

This Privacy & Security Policy is governed by the laws of the State of Delaware, without regard to its conflict of laws principles. Any disputes arising under this policy are subject to the arbitration provisions in our Terms of Service.