Privacy policy

01Who we are

A2B · AI To Business ("A2B", "we", "us") is operated by [Company legal name], registered at [Registered address]. We are responsible for the personal data collected through this website and in our dealings with prospective clients.

For any privacy question, write to [privacy@yourdomain.com].

02What this policy covers

This policy applies to visitors of this website, people who contact us or book a free automation audit, and the contacts at the companies we work with.

When we handle data inside a client's systems as part of a project, we act on that client's instructions as a service provider (data processor). In that case the client's own privacy notice applies to its customers and staff, and our contract with the client governs how we handle the data. Section 6 explains how we protect it.

03Information we collect

• Information you give us: your name, company, role, email, phone or WhatsApp number, and anything you share in messages, forms or calls.
• Business information during an audit or project: how your processes work, the systems you use, and any sample files or reports you choose to share.
• Technical information: when you visit the site, our hosting servers record standard logs such as IP address, browser type, the pages requested and the time of the request. These keep the site secure and working.
• Billing details: the information needed to invoice our services. We do not store full card numbers.

We do not knowingly collect sensitive data, such as health or religious information, through this website. Please do not send it to us unless a project requires it and we have agreed how it will be protected.

04How we use information

• To reply to your enquiries and arrange your audit.
• To prepare proposals, and to deliver, support and improve the services you hired us for.
• To send service messages such as project updates, invoices and security notices.
• To keep this website secure and working well.
• To meet our legal, tax and accounting obligations.

We send marketing messages only if you agreed to receive them, and every message lets you opt out.

05Legal bases

Where the law requires a legal basis for using personal data, we rely on one or more of the following: performing a contract with you, or taking steps you asked for before entering one; our legitimate interests in running and improving our business, balanced against your rights; your consent, which you can withdraw at any time; and compliance with our legal obligations.

06Data inside client projects

• We access client systems and data only as needed for the agreed work, and only with the permissions the client grants us.
• Access is limited to the team members working on the project and protected by strong authentication.
• We do not use client data to train public or third-party AI models. Where an AI service processes client data, we use providers and settings that do not keep it for training, as agreed with the client.
• At the end of a project, or on request, we return or delete client data, except where the law requires us to keep it.
• We sign a data processing agreement (DPA) on request.

07Who we share information with

We do not sell or rent personal data. We share it only with:

• Service providers that help us operate, such as hosting, email, communication tools like WhatsApp, cloud storage and the AI model providers used in client projects. They are bound by confidentiality and data-protection obligations.
• Professional advisers such as lawyers and accountants.
• Authorities, when the law requires it or to protect our rights.
• A buyer or successor, if our business is reorganised or sold. This policy would continue to apply to your data.

08Third-party services and cookies

This website loads fonts from Google Fonts, so your browser connects to Google's servers, which receive your IP address. Links to WhatsApp, social networks and other websites are governed by those services' own privacy policies.

We do not use advertising or tracking cookies. If we add analytics in the future, we will update this policy and, where the law requires it, ask for your consent first.

09International transfers

Our team and service providers may be located in different countries. When personal data moves across borders, we take reasonable steps, such as contractual safeguards, to keep it protected to the standard described in this policy.

10How long we keep information

• Enquiries that do not lead to a project: up to [24] months after our last contact.
• Client and contract records: for the length of our relationship, then as long as tax and accounting law requires.
• Server logs: for a short period, normally no more than [90] days.

After these periods we delete or anonymise the data.

11How we protect information

We use encryption in transit, access controls, multi-factor authentication and the principle of least privilege, and we review our practices regularly. No method of transmission or storage is completely secure. If a breach affects your data, we will notify you and the relevant authorities as the law requires.

12Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• ask us to delete your data;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw your consent at any time;
• complain to your local data-protection authority.

To use any of these rights, email [privacy@yourdomain.com]. We reply within 30 days and may need to confirm your identity first.

13Children

Our services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children.

14Changes to this policy

We may update this policy as our services or the law change. The date at the top shows the latest version. If we make significant changes, we will tell you on this website or by email.