Privacy Policy

1. Introduction

AI Business Review (“we,” “our,” “us”) is an SMB automation assessment service. This Privacy Policy explains what information we collect when you use our service, how we use it, who we share it with, and what rights you have over your data.

This policy covers all data collected through our website (theaibusinessreview.com), our intake form, and our assessment call system. By using our service, you agree to the practices described here.

2. Information We Collect

We collect the following categories of information:

• Intake data: Your name, email address, business name, industry, website URL, and optional context such as company size, revenue range, and primary challenge. This is information you provide directly when purchasing an assessment.
• Call recordings and transcripts: Your 60-minute assessment call is recorded and transcribed in full. This recording is the primary input for your findings report.
• Payment metadata: Payment is processed by Stripe. We receive a confirmation token and the last four digits of your card for receipt purposes. We do not store your full card number, CVV, or billing address.
• Analytics data: We use Vercel Analytics to collect aggregated page-view counts and Web Vitals metrics. Vercel Analytics does not collect personally identifiable information and does not use cookies. No personal data is sent to third-party analytics services.

3. How We Use Your Information

• To deliver your assessment — generating your findings report from your call transcript and intake data.
• To schedule and conduct your follow-up consultation — the human consultant reviews your report and call summary before your session.
• To communicate with you about your order, report delivery, and follow-up scheduling via email.
• To improve our service — we review anonymized patterns in assessment transcripts to improve agent question quality and report accuracy.

We do not use your data for advertising, and we do not sell it.

4. Subprocessors

We rely on the following third-party services to operate. Each receives only the data necessary for its function:

• Supabase — database and file storage for intake data, transcripts, and report assets.
• Vercel — hosting, CDN, and aggregated web analytics (no PII).
• VAPI — voice AI infrastructure for conducting and recording assessment calls.
• Anthropic Claude — AI model used during the synthesis step to analyze transcripts and generate structured findings.
• Stripe— payment processing. Stripe's privacy policy governs data handled on its platform.
• Resend — transactional email delivery for report delivery and follow-up scheduling.

5. Data Retention

We retain intake data, call recordings, transcripts, and reports indefinitely by default. This allows us to reference your history if you return for a future assessment and to maintain quality assurance records.

You can request deletion of your data at any time by emailing hello@theaibusinessreview.com. We will process deletion requests within 30 days and confirm by email when complete.

6. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about you.
• Correction: Ask us to correct inaccurate information.
• Deletion: Request deletion of your data (subject to any legal retention obligations).

To exercise any of these rights, email hello@theaibusinessreview.com. Jurisdiction-specific rights (e.g., CCPA, GDPR) will be addressed in a future policy revision as part of our launch compliance review.

7. Security

We implement industry-standard security practices. Data is stored in Supabase (SOC 2 Type II compliant), hosted on Vercel (ISO 27001 certified), and transmitted over HTTPS. Sensitive fields such as recordings are stored with access controls limiting who can retrieve them.

No system is completely secure. If you become aware of a security issue, please disclose it responsibly by emailing hello@theaibusinessreview.com.

8. Children

This service is not intended for users under 18 years of age. We do not knowingly collect information from minors. If you believe a minor has submitted data to us, please contact us immediately so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the most recent revision. For material changes, we will notify you by email if we have your contact information.

10. Contact

Questions about this Privacy Policy? Contact us at hello@theaibusinessreview.com.