Privacy Policy

1. Who we are

AI Governance International (“we”, “us”) is an independent advisory based in Boston, Massachusetts, United States. We are the controller for personal data collected through this website.

Contact for any privacy matter: [email protected].

2. Scope

This policy covers aigovernanceinternational.org only. It does not cover third-party sites we link to, which operate under their own policies.

This website does not offer user accounts, does not process payments, does not sell anything, and does not operate an API or an application. The only personal data it collects is what you choose to send us through the contact form, plus the technical data described in section 4.

3. Data you give us

If you submit the contact form, we receive:

• Contact name and email address (required — we cannot reply without them)
• Organization and website (optional)
• The content of your message

Please do not send confidential, special-category, or client-privileged information through the form. If a matter requires that, we will agree a secure channel first.

Purpose and lawful basis

We use this data solely to read and respond to your enquiry and, where it leads to an engagement, to carry out pre-contractual discussions at your request. Under the GDPR our lawful basis is Article 6(1)(b) (steps at your request prior to a contract) and, where that does not apply, Article 6(1)(f) (our legitimate interest in responding to enquiries about our services).

We do not add you to a mailing list. We do not operate a newsletter. We do not use your data for advertising, profiling, or automated decision-making, and we do not sell or rent it.

4. Data collected automatically

This site is hosted on Cloudflare Pages. Cloudflare processes technical data inherent to serving a web page — including IP address, browser and device characteristics, and request timestamps — for delivery, security, and abuse prevention.

Where site analytics are enabled, we use Cloudflare Web Analytics, which is aggregated and does not use cookies or fingerprinting to track individuals across sites or sessions.

Cookies

This website sets no advertising, analytics, or cross-site tracking cookies. Cloudflare may set cookies strictly necessary for security and traffic management. Because we set no non-essential cookies, no consent banner is presented.

If you follow our scheduling link, Calendly may set its own cookies on its own domain under its own policy.

5. Processors and third parties

We use the following service providers, each processing data on our behalf or under their own terms:

Web3Forms

Processes contact form submissions and delivers them to us by email. Receives whatever you enter in the form. See the Web3Forms privacy policy.

Cloudflare, Inc.

Hosting, content delivery, DNS, security, and — where enabled — aggregated analytics. Processes technical request data. See the Cloudflare privacy policy.

hCaptcha (Intuition Machines, Inc.)

Spam and abuse prevention on the contact form. Processes technical and interaction data to distinguish humans from bots. See the hCaptcha privacy policy.

Calendly

Scheduling. If you book a call, you leave this website and provide your details directly to Calendly under its own policy. See the Calendly privacy policy.

Email provider

Our info@ address is delivered via Cloudflare Email Routing to our mailbox provider. Correspondence is retained there as described in section 7.

Fonts are self-hosted on this domain. This site does not load fonts, scripts, or assets from Google or any advertising network.

We may disclose personal data where legally required to do so by a valid legal request. We do not otherwise share it.

6. International transfers

We are established in the United States and the processors above are predominantly US-based. If you are in the European Economic Area or the United Kingdom, your data will be transferred outside your jurisdiction.

These transfers rely on the European Commission's Standard Contractual Clauses, and/or the EU–US Data Privacy Framework where the recipient is certified, as set out in each provider's terms. [Review point: confirm the transfer mechanism relied on for each processor before launch.]

7. Retention

Contact form correspondence is retained for as long as needed to handle your enquiry and any resulting relationship. Where an enquiry does not lead to an engagement, we delete it within 24 months. Where it does, records are retained for the duration of the engagement and afterwards as required for legal, tax, and professional record-keeping.

Technical logs held by Cloudflare are retained per Cloudflare's own retention periods.

8. Your rights

Subject to your jurisdiction, you may have the right to access your personal data; to have it corrected; to have it erased; to restrict or object to processing; to data portability; and to withdraw consent where processing is based on consent.

To exercise any of these, email [email protected]. We will respond within one month. We may ask you to verify your identity where we cannot otherwise confirm it.

If you are in the EEA or UK and believe we have handled your data improperly, you may lodge a complaint with your national supervisory authority. We would appreciate the chance to address it first.

9. Security

This site is served over HTTPS. Form submissions are transmitted over encrypted connections. We limit access to enquiry correspondence to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

This site is aimed at businesses and professionals. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

11. Changes

We may update this policy to reflect changes to the site or to legal requirements. The current version is always posted here with its last-updated date.

12. Contact

AI Governance International
Boston, Massachusetts, United States
[email protected]