Privacy Policy

1.1Who this policy covers

• Visitors and prospects — people who browse our Site, use our chat assistant, fill out a form, or book a call with us.
• Clients — business owners who buy a website or AI worker from us.
• Our clients' customers — people who interact with a website, chatbot, or AI worker that we built or run for one of our clients. For this information, we act on our client's behalf (see Section 1.6).

1.2Information we collect

Information you give us

• Booking information. When you schedule a call, we receive your name, email, phone number, business name, the time you picked, and anything you write in the booking form. Booking is handled on a page run by our scheduling provider.
• Chat messages. If you use the chat assistant on our Site, we receive the messages you type and the assistant's replies.
• Contact forms and emails. Your name, email, phone number, business details, and whatever you choose to tell us.
• Client account and billing details. For clients: business name, contact details, billing address, and payment information. Card payments are handled by our payment processor; we do not store full card numbers.
• Content you send us for your website. Logos, text, photos, service lists, prices, and similar materials.

Information from systems you connect (clients only)

When a client asks us to set up an AI worker, the client may give us access to tools such as their calendar, CRM, phone/text system, email, quoting tools, or review profiles. Through that access we may process their customers' names, phone numbers, email addresses, messages, appointment details, quote and CRM records, and calendar data — only as needed to provide the service the client requested.

Information collected automatically

• Technical and browser data. Like most websites, our hosting provider receives basic technical data when you visit, such as your IP address, browser type, device type, and pages requested. This is used to deliver and secure the Site.
• Preferences stored in your browser. Our Site remembers your theme (light/dark) and language choice using your browser's local storage. This stays on your device and is not used to track you.
• Web fonts. Our Site loads a font from a font provider, which may receive your IP address and browser information when the font loads.
• Analytics. We do not currently use analytics or advertising cookies on the Site. If that changes, we will update this policy [and add any required cookie notice].

1.3How we use information

We use personal information to:

• respond to questions and run discovery calls;
• build, host, and maintain client websites;
• set up and operate AI workers (for example, answering customer messages, booking appointments, sending follow-ups, and requesting reviews) as each client directs;
• send schedule briefings and service updates by email or messaging app, where a client has chosen to receive them;
• bill clients and manage accounts;
• keep our Site and services secure and working properly, and prevent fraud or misuse;
• improve our services; and
• meet legal obligations.

1.4How AI processes your information

Our chat assistants and AI workers use an outside AI provider to understand messages and write replies. When you send a message, the text (and any context needed to answer it) is sent to our AI provider so it can generate a response.

• We do not sell your information.
• Training. We choose providers and settings that do not use your conversations to train public or general-purpose AI models, where the provider allows us to opt out. [Confirm current provider settings before publishing.]
• Accuracy. AI can make mistakes. Please do not rely on an AI reply for anything important without confirming it with a person. See our AI Disclosure.
• Sensitive information. Please do not share sensitive details (such as health, financial account, or government ID numbers) in a chat.

1.5How we share information

We share personal information only as described here:

• Service providers. Companies that help us run our business and our services, under contracts that limit how they can use the information. These include our hosting and website design provider, AI provider, scheduling provider, payment processor, phone and text messaging provider, email provider, messaging app provider (for schedule briefings), and cloud storage and productivity tools.
• Our clients. Information collected by an AI worker or website we run for a client (for example, a booking or a lead) is shared with that client, because it is their information.
• Legal requirements. When we believe in good faith that disclosure is required by law, subpoena, or court order, or is needed to protect the rights, property, or safety of anyone.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that deal, subject to this policy.
• With your permission. In any other case where you ask us to or agree to it.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

1.6Our role with our clients' customer data

When we process information about our clients' customers (for example, a homeowner who texts a plumber's AI assistant), we act as a service provider / processor on behalf of our client. That means:

• the client decides why and how the information is used, and is responsible for having the right to collect it and for giving any required notices and obtaining any required consents;
• we use it only to provide the services the client requested, and not for our own marketing;
• we do not sell it or use it to build profiles for other businesses.

If you are a customer of one of our clients and want to access or delete your information, please contact that business directly. If you contact us, we will pass your request to the right client and help them respond.

1.7How long we keep information

We keep personal information only as long as we need it for the purposes above, then delete or de-identify it. As a general guide:

• Prospect and booking data: [e.g., up to 24 months after our last contact].
• Site chat messages: [e.g., up to 12 months].
• Client account and billing records: for the life of the account plus [e.g., 7 years] for tax and accounting.
• Client customer data: for as long as the client's service is active, then deleted or returned within [e.g., 30–90 days] after cancellation, unless the client asks otherwise or the law requires us to keep it.

[Confirm retention periods.]

1.8Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, such as access controls, encrypted connections, and choosing reputable service providers. No system is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your information, we will notify you and/or the relevant client as required by law.

1.9Children

Our Site and services are meant for businesses and adults. We do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If you believe a child has given us information, contact us and we will delete it.

1.10Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose, and to get a copy of it;
• Delete personal information we hold about you, subject to certain exceptions;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months;
• Limit use of sensitive personal information. We do not use sensitive personal information for purposes that would require offering this right; and
• Non-discrimination. We will not treat you differently, charge you a different price, or give you a lower quality of service for using your rights.

Categories we collect (past 12 months): identifiers (name, email, phone, IP address); commercial information (services purchased, billing records); internet or network activity (basic technical data); professional or business information; and the content of messages you send us. Sources, purposes, and recipients are described in Sections 1.2–1.5.

How to make a request: Email contact@impulsorai.com with the subject line "Privacy Request" [or add a web form / toll-free number if required]. We will confirm receipt within 10 business days and respond within 45 days (we may extend once by another 45 days when reasonably necessary, and we will tell you if we do). We will need to verify your identity, usually by matching information you provide to what we have on file.

Authorized agents: You may use an authorized agent to make a request for you. We may ask the agent for signed proof of permission and may ask you to verify your identity directly with us.

Requests about client customer data: If your information was collected by one of our clients' websites or AI workers, we will forward your request to that client, as described in Section 1.6.

1.11Other U.S. state privacy rights

Residents of certain other states (such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others with similar laws) may have rights to access, correct, delete, or get a copy of their personal information, and to opt out of targeted advertising, sale, or certain profiling. We honor these requests where the law applies to us. To make a request, email contact@impulsorai.com. If we deny your request, you may appeal by replying to our decision with the subject line "Privacy Appeal."

1.12Canada (PIPEDA)

If you are in Canada, we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. We collect, use, and disclose personal information with your consent and only for the purposes described here. You may ask to access or correct your information and may withdraw consent (subject to legal or contractual limits) by contacting us. Some of our service providers may store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. Our privacy contact is [Name/title of privacy contact] at contact@impulsorai.com. You also have the right to complain to the Office of the Privacy Commissioner of Canada.

1.13International visitors

We are based in [Country/State]. If you visit from another country, your information may be transferred to and processed in the United States and other countries where we or our service providers operate.

1.14Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above, and if the changes are significant we will give more notice (for example, an email to clients or a notice on the Site).

1.15Contact us

[Legal entity name]
[Business address]
Email: contact@impulsorai.com