Privacy Policy
01 Overview
AIVI Labs SEZC ("AIVI Labs", "we", "us") builds and runs software that measures what AI assistants say about businesses. This policy explains what personal information we handle, why, who we share it with, and the rights you have.
It covers our website (aivilabs.io and our report pages), the forms on it, our studies, and how we contact businesses. AIVI Labs is the data controller. We're based in the Cayman Islands and follow the Cayman Islands Data Protection Act (2021 Revision).
02 Information we collect
| What | Examples | Where it comes from |
|---|---|---|
| Study requests | Name, work email, business or brand, your question | You, when you send the "Get your own study" form |
| Findings emails | Email address, and the consent wording you agreed to | You, when you sign up |
| Practice reports and city waitlist | Practice name, email address, city | You, on our report page |
| Orders | Product, order ID, purchase date, email address | Dodo Payments, our Merchant of Record |
| Study data | What AI platforms and Google answered to our questions. This includes the names of businesses and sometimes of individual professionals (for example, "Dr. Lee"), plus public business details such as website, address and listing information | The AI platforms, Google and public sources |
| Business contact details | Name, role, business email and business address of people at businesses we study | Public sources (business websites and listings) and business data providers |
| Website checks | Publicly available content from a practice's website, for dental practice reports | The practice's public website |
| Technical data | IP address and browser details | Sent automatically when your browser loads our pages or fonts, or sends a form |
03 How we use it
- To reply to study requests and run the studies you order.
- To send findings emails to people who signed up.
- To deliver practice reports and order emails.
- To measure how often businesses are named by AI, and to publish findings about how AI answers. We don't publish which businesses were named. Each business can get its own results.
- To contact businesses named in our studies about their results. This is business-to-business only, and every email lets you opt out.
- To keep our service secure, for example by limiting how many form submissions come from one address.
- To meet legal and accounting obligations.
We don't sell personal information. We don't make automated decisions that have legal or similarly significant effects on you.
05 Payments
Dodo Payments Inc. is the Merchant of Record and handles all payment details. We never see your card details. Dodo sends us a short confirmation (order ID, product and email address) so we can deliver your order. Dodo's privacy policy covers checkout.
07 How long we keep it
- Study requests and client records: while we work together, then 5 years for accounting and legal reasons.
- Order records: at least 5 years.
- Findings emails: until you unsubscribe. We keep a record of your consent and of your unsubscribe, so we don't email you again.
- Business contact details used for outreach: until you ask us to stop. After that, we keep only what's needed to keep you off our list.
- Study data: kept indefinitely as research records, so that published findings can be checked.
- Website checks for dental reports: up to 24 months.
- Server logs with IP addresses: a limited period, for security.
08 Your rights
You can ask us to:
- give you a copy of the personal information we hold about you;
- correct anything that's wrong;
- delete it, unless we have to keep it by law;
- stop using it, including for outreach or in our study data;
- stop sending you marketing emails (every email has an unsubscribe link);
- send it to you in a portable format, where that applies.
You can also withdraw your consent at any time. Email support@aivilabs.io. We'll reply within 30 days.
If you're unhappy with how we handle your information, you can complain:
- Cayman Islands: to the Office of the Ombudsman (ombudsman.ky).
- Elsewhere: if you're in the EEA, the UK or Canada, you may also have rights under the GDPR, the UK GDPR or PIPEDA.
We rely on these grounds:
- Contract: to deliver what you ordered.
- Legitimate interests: to run our studies, contact businesses about their results, and keep the service secure.
- Consent: for findings emails.
09 Security
We use encrypted connections (HTTPS), limit access to the people who need it, and use established service providers. No method of sending or storing data is completely secure, so we can't guarantee absolute security.
10 Children
Our services are for businesses and adults. We don't knowingly collect personal information from anyone under 18. If you think a minor has given us personal information, contact us and we'll delete it.
11 Changes to this policy
When we change this policy, we update the effective date at the top. For significant changes, we may also email our customers.
12 Contact
AIVI Labs SEZC
Cayman Enterprise City, Grand Cayman, Cayman Islands
support@aivilabs.io
aivilabs.io