Privacy Policy

This policy explains what AI Experts, LLC collects about you when you use aiexperts.com, the free AI Workflow Plan, our email lists, our courses and certification, and the client portal. It says why we collect it, who else sees it, how long we keep it, and what you can ask us to do with it. We have tried to write it in plain English and to describe only what we actually do.

1. Who we are

AI Experts, LLC is an AI consulting company based in New York, NY 10003, United States. We are the data controller for the personal information described in this policy, which means we decide why and how it is processed. For questions or requests, email privacy@aiexperts.com or contact@aiexperts.com.

2. What we collect, and when

We only collect personal information when you give it to us or when it is generated by your use of the site. This section goes through each thing you might do on aiexperts.com and says what is collected.

Visiting the site

Like every website, our hosting provider records technical details of each request: your IP address, browser and device type, the page requested, the page you came from, and the time. We use these to run the site, to keep it secure and to find faults.

We measure how public pages are used with the tools below:

• Vercel Web Analytics and Speed Insights, which count page views and measure loading speed without cookies and without identifying you across sites. Private plans, client pages and downloads are excluded; URL query strings are removed. You can turn anonymous measurement off in Privacy preferences.
• Google Analytics, enabled only after you allow visitor analytics, which uses cookies to tell returning visitors from new ones and reports aggregate usage to us. Google’s own policy governs what Google does with that data. You can block it with the Google Analytics opt-out add-on or a content blocker.
• PostHog, which works in two tiers. As part of anonymous measurement it counts public-page views, actions and conversions without cookies or browser storage: PostHog’s servers group one day’s events under a salted hash of connection details that is discarded daily, so it cannot recognise you tomorrow. Requests go through our own domain. When one of our forms is saved, our server also records that a conversion of that kind happened (for example “newsletter subscription”), without your name or email. Turning anonymous measurement off in Privacy preferences stops both. Only after you allow visitor journeys and recordings does PostHog set a cookie to recognise return visits, measure paths across them, and record a sample of public interactions with form inputs masked. Private plans and client pages are excluded; the workflow form is excluded from recordings. After a workflow lead is saved, its internal record ID may link consented events to that lead. We do not send names, emails, answers or private plan tokens to PostHog, and do not identify unknown visitors through data brokers.
• Meta Pixel, on the course pages only (see Courses below). It is not loaded anywhere else on the site. It starts only after you allow advertising tracking.

Contacting us or booking a call

The contact form sends your name, email address, company and message to our team by email. Booking a discovery call uses a scheduling widget from Cal.com, so the name, email address and notes you enter there go to Cal.com as well as to us, under Cal.com’s privacy policy.

Downloads, waitlists, webinars and job applications

When you request a report, a chart pack or a prompt pack, join a waitlist, or sign up for a webinar, we collect your name and email address, send you the thing you asked for, and keep your address so we can follow up. When you apply for a job, the details and documents you send go to our hiring inbox and are used only for that application.

The AI readiness scorecard

Your name, email address, company, your answers and your score are emailed to our team so we can follow up with you about the result. The score itself is calculated in your browser.

Email lists

You can subscribe to our daily AI brief, to new blog posts and to new skills. We store your email address, which lists you are on, and an unsubscribe token. Every email we send has an unsubscribe link, and replies go to a person, not a mailbox nobody reads. Unsubscribing takes effect immediately. We keep a record that you unsubscribed so we do not email you again by mistake.

The free AI Workflow Plan

The plan asks for your name, work email address, phone number, company, role, company size and the team involved, then for details about one of your team’s workflows: the tools you use, the steps, the problems, and what a good result looks like. Here is exactly what happens with that:

• Your answers are saved as you type, from the first filled field, both in your browser (so you can close the tab and come back on the same device) and in our database. This includes partial entries, even if you never press Begin or finish the form.
• Your answers are sent to Anthropic, where a Claude model writes the plan. See How AI is involved. A member of our team may also read your answers and the plan.
• Our team receives an email when you start filling in the form, including any answers saved at that point and a link to your saved entry. If you finish, the plan is emailed to you and a copy of all your answers goes to our team, through our email provider.
• Your plan lives at a private, unguessable web address. That address is excluded from search engines, is never passed to other sites by your browser, and is left out of our analytics. Anyone who has the address can open the plan, so share it with care.
• We will follow up by email or phone about your plan and about working together. If you would rather we did not, reply to any email, or write to privacy@aiexperts.com, and we will stop.
• We delete your answers and your plan on request.

Please do not put anything in your answers that you are not allowed to share with us, such as another company’s confidential information or personal details about colleagues or customers.

Courses

Course payments are handled by Stripe. Your card details go directly to Stripe and we never see or store them. Stripe tells us the email address, and the phone number if you gave one, of each purchase so we can deliver the course.

The course pages load the Meta Pixel and send purchase and sign-up events to Meta (Facebook) through its Conversions API, so we can measure our advertising. Those events include your IP address, your browser, Meta’s own cookies if you have them, and, for a purchase, your email address and phone number. If you enter your email on a course page, it is also saved in your browser so the page remembers you. You can block the Pixel with a content blocker, and you can ask us not to send your details to Meta.

Certification

To claim a certificate you give us your name, work email, personal email, company and job title, and tell us whether you want to hear from us. We store the certificate record and email the details to our team. Anyone who has a certificate ID can look it up on our site and see the holder’s name, the certification, its level and the date it was issued, so that an employer can check it is genuine. Nothing else about you is shown.

The client portal

The portal is for clients we work with under a contract. That contract, and any data processing agreement that comes with it, governs client data; this section describes the personal information involved.

• Signing in. Sign-in is handled by WorkOS. We receive your name and email address and set a session cookie. Requesting access collects your name, work email, company and an optional note, which are stored for our team to review.
• Chat. Your messages, the assistant’s replies, your email address and your client account are stored so you can return to a thread. Messages are sent to Anthropic to produce the reply. Our staff can read threads for support and to improve the service.
• Documents. Only our team uploads documents. Each file is encrypted with its own key before it is stored, is held in private storage with no public address, and is served only to signed-in members of the client it belongs to.
• Comments and ideas are stored with your email address as the author. You can delete your own comments.
• Usage tracking. The skills and plugins we install for clients report when they are used. A report contains the skill’s name, the source, an outcome, how long it took and token counts, and may include a display name, user ID or team if your organization chooses to send them. It never contains prompt text, output text, file names or arguments.
• Microsoft 365. If your administrator connects your Microsoft tenant, we read the Microsoft Graph Copilot usage report, which lists which licensed users used Copilot and when. We request only that reporting permission. We do not read email, files, chats or calendars. The connection settings are stored encrypted, and removing the connection deletes them.

3. How we use it

We use personal information to:

• deliver what you asked for: a plan, a report, a course, a certificate, an email list, portal access;
• reply to you and provide support;
• follow up about our services when you have shown interest, with an easy way to say no;
• run, secure and improve the site and the portal, including finding and fixing faults;
• measure how the site and our advertising perform;
• meet legal obligations, enforce our terms and protect our rights.

We do not sell personal information. We do not use it to train AI models, and our providers do not either. We do not make automated decisions about you that have legal or similarly significant effects.

If you are in the European Economic Area, the United Kingdom or Switzerland, the law requires us to have a legal basis for each use:

4. How AI is involved

Three features send data to a large language model. In each case the model is a Claude model from Anthropic, PBC, reached through its API.

• The AI Workflow Plan sends your answers so the model can write your plan. The draft is checked by automated rules before it is sent to you, and a member of our team may read it afterwards.
• Portal chat sends your message, the thread so far and relevant passages from your client’s documents so the model can reply.
• Workflow maps for clients are drawn from meeting transcripts that the client has shared with us, which the model turns into a diagram.

Under Anthropic’s commercial terms, data sent through its API is not used to train Anthropic’s models and is kept by Anthropic only for the limited period its terms allow. Anthropic’s privacy policy describes its handling. The models can make mistakes, so treat what they produce as a starting point, and tell us if something in your plan is wrong.

5. Who we share it with

We share personal information only with the service providers below, who process it on our instructions and under contracts that restrict what they can do with it, and in the limited situations listed after the table.

We may also share personal information:

• with professional advisers such as lawyers, accountants and insurers, when they need it;
• when the law requires it, or to respond to a valid request from a court or authority;
• to protect the rights, safety or property of AI Experts, our clients or others;
• with a buyer or successor if our business is sold or merged, who would be bound by this policy.

6. Cookies and browser storage

Cookies are small files a site stores in your browser. Local storage is similar, but it is never sent to the server. This is everything we store in your browser:

Use Privacy preferences in the footer to reject optional tracking or change your choices. Visitor analytics and advertising are disabled until you opt in, and withdrawing permission stops future capture. Anonymous Vercel measurement can also be turned off. Advertising is blocked when your browser sends Global Privacy Control. Do Not Track is not supported. Blocking optional tracking will not stop the site working; the portal still needs its separate session cookie to keep you signed in.

Form submissions and password sign-in use Vercel BotID to check for automated abuse. These security checks operate independently of your optional analytics choices. They use browser and request signals to verify a submission before we process it.

7. How long we keep it

We keep personal information only as long as we need it for the purpose we collected it, and then delete it.

Backups are overwritten on a rolling schedule, so deleted data may survive in a backup for a short time before it is gone for good.

8. How we protect it

• Every connection to the site uses TLS encryption.
• Public form submissions are verified for automated abuse before we save details, send emails or start AI work.
• Client documents and Microsoft connection settings are encrypted at rest with keys that are held separately from the data.
• Portal data is checked against the client it belongs to on every request, and only signed-in members of that client can reach it.
• Plan links are long random addresses that are never indexed, never passed on by your browser, and never stored in analytics.
• We never see or store card numbers; Stripe holds them.
• Access to stored data inside AI Experts is limited to the people who need it for their work.

No system is perfectly secure. If we discover a breach that puts your information at risk, we will tell you and any regulator the law requires us to tell, without undue delay.

9. Your rights and choices

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct anything that is wrong;
• delete it;
• stop using it for marketing, or stop a particular use;
• give it to you in a portable form.

If you are in the EEA, the UK or Switzerland, you also have the rights to restrict processing, to object to processing based on our legitimate interests, to withdraw consent at any time without affecting what was done before, and to complain to your data protection authority. We would rather hear from you first, so please write to us before you do.

To exercise any right, email privacy@aiexperts.com from the address we hold for you, or tell us which address that is. We may ask for enough detail to be sure the request is really from you. We answer within 30 days, and we never charge for a request or treat you differently for making one.

To opt out of specific things:

• Email lists: use the unsubscribe link in any email.
• Follow-up about our services: reply to any email and say so, or write to us.
• Website analytics and advertising: use Privacy preferences in the footer. You can also use a content blocker or ask us to delete identified analytics associated with your lead.
• The client portal: your organization’s administrator can remove your access, and you can ask us to delete your account data.

10. Notice for California residents

This section adds what the California Consumer Privacy Act (CCPA), as amended by the CPRA, asks us to say. In the last 12 months we have collected the categories of personal information described in section 2: identifiers such as name, email address and phone number; professional information such as company and role; commercial information such as purchases; internet activity such as pages viewed; and the content you provide, such as Workflow Plan answers and portal messages. We collect it from you and from your browser, use it for the purposes in section 3, and disclose it to the service providers in section 5.

We do not sell personal information. Sending purchase and sign-up events to Meta from the course pages may count as “sharing” for cross-context behavioral advertising under the CCPA. You can opt out of that at any time by emailing privacy@aiexperts.com with the subject “Do not share”, and we will stop sending your details. We do not knowingly sell or share the personal information of anyone under 16.

You have the right to know what we collect, to delete it, to correct it, to opt out of sharing, and not to be discriminated against for using those rights. You can appoint an authorized agent to make a request for you; we will ask the agent for proof that you gave them permission.

11. Where your data is processed

We are based in the United States, and our providers process data mainly in the United States. If you use the site from elsewhere, your information is transferred to the United States. For transfers from the EEA, the UK and Switzerland we rely on our providers’ certification under the EU-U.S. Data Privacy Framework where they hold it, and otherwise on the European Commission’s standard contractual clauses and the UK addendum.

12. Children

Our services are for businesses and the people who work in them. They are not aimed at anyone under 16, and we do not knowingly collect information from anyone under 16. If you believe a child has given us personal information, email privacy@aiexperts.com and we will delete it.

13. Changes to this policy

When we change this policy we update the date at the top. If a change is significant, such as a new use of your information or a new category of provider, we will tell email list subscribers and portal users by email before it takes effect.

14. How to contact us

AI Experts, LLC
New York, NY 10003, United States
Privacy requests: privacy@aiexperts.com
Everything else: contact@aiexperts.com