Legal
Privacy policy
Last updated 9 October 2026
The short version. We collect what you type into our contact form or booking page, and nothing else. We set no cookies and run no advertising trackers. We don't sell your data, and we don't send marketing you didn't ask for. Email hello@aiagentcrew.ai and we will delete everything we hold about you.
Who we are
This site is operated by AI Agent Crew, based in San Jose, California, United States. We are the controller of the personal data described below. A postal address is available on request.
Questions, requests or complaints: hello@aiagentcrew.ai.
What we collect
When you submit the contact form. Your name, work email, and optionally your company name, phone number, the category you selected, and whatever you write in the message box. The email and name are required because we cannot reply without them; everything else is yours to leave blank.
When you book a call. Our scheduling runs on Cal.com. Booking a slot gives us your name, email address, the time you chose and anything you type into the booking form. Cal.com also holds that data under its own privacy policy.
When you simply read the site. Our host, Vercel, writes standard server logs — IP address, browser user-agent, the page requested and a timestamp. These are generated automatically by the web server, are used for security and diagnosing faults, and are not combined with anything else to identify you.
If you email us directly. Whatever is in your message, plus your email address and anything your mail client attaches as headers.
What we don't do
- We don't set cookies. The site stores nothing in your browser.
- We run no analytics, no advertising pixels, no session recording and no fingerprinting.
- We don't sell or rent personal data, and never have.
- We don't add you to a mailing list because you filled in the contact form. If we ever start a newsletter, you'll have to ask for it.
- We don't use your contact details or message content to train AI models.
Why we're allowed to hold it
If you are in the UK or EU: we rely on your consent when you choose to send us a message, and on our legitimate interest in responding to business enquiries and in keeping our site secure. Where we go on to work together, we rely on the necessity of processing to perform our contract with you.
Who else touches your data
We keep the list short on purpose. Each of these is a processor acting on our instructions, and each has its own privacy policy:
| Service | What it handles |
|---|---|
| Formspree | Delivers contact form submissions to our inbox |
| Cal.com | Scheduling and calendar invitations |
| Vercel | Website hosting and server logs |
| Cloudflare | DNS, and routing inbound mail to our inbox |
| The mailbox where your message lands |
We will also disclose data where the law requires it. If the business is ever sold or merged, your data may transfer with it, and we'll tell you before that happens.
Your data during a paid engagement
This policy covers the website. It does not govern client data we are given access to during a project — your tickets, documents, CRM records or customer data. That is covered by the signed agreement and any NDA or data processing terms between us, which take precedence over this page. As a matter of practice, during an engagement we work in your systems where possible, we take the minimum access needed to do the job, and we return or destroy copies at the end of it.
How long we keep it
- Enquiries that don't become projects: deleted within 24 months.
- Client correspondence and project records: kept for the engagement and 7 years after, because tax and contract law require it.
- Server logs: retained by Vercel on their standard schedule, typically around 30 days.
Your rights
Wherever you live, you can email us and ask for a copy of what we hold, a correction, or deletion — and we'll do it within 30 days. You never need to use a legal term to make the request.
If you are in California: under the CCPA and CPRA you have the right to know what we collect and why, to request deletion, to request correction, and to not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined, so there is nothing for you to opt out of.
If you are in the UK or EU: under the UK GDPR and GDPR you additionally have the right to object to processing, to restrict it, to data portability, and to withdraw consent at any time. You also have the right to complain to your supervisory authority — the ICO in the UK, or your national data protection authority in the EU.
Where your data goes
We are based in the United States and our processors are predominantly US-based, so if you contact us from outside the US your data will be transferred there. Where that transfer involves UK or EU personal data, it is made under the Standard Contractual Clauses our processors maintain.
Security
The site is served over HTTPS. Access to the inbox and to our processor accounts is protected by two-factor authentication, and the number of people who can read your message is small. No system is perfectly secure, and we won't pretend otherwise — but if a breach ever affects your data, we will tell you and the relevant regulator within 72 hours of becoming aware of it.
Children
This is a business-to-business site and is not directed at anyone under 16. We don't knowingly collect data from children. If you believe a child has sent us something, tell us and we'll delete it.
Changes
If we change this policy we'll update the date at the top. Material changes will be flagged on this page rather than made quietly.
Contact
Email hello@aiagentcrew.ai. We answer privacy requests ourselves, and a postal address is available on request.