Privacy policy
Last updated: September 29, 2026
This Privacy Policy explains how iForAI, Inc. ("iForAI", "we", "our" or "us") collects, uses, shares and protects personal data when you visit ifor.ai, fill in one of our forms or apply for a role with us.
We collect only what we need to answer you, run the website and understand how it is used. We do not sell your personal data. This policy follows US state privacy laws, and we extend the rights described in section 10 to visitors from the EU, EEA and UK.
Who we are
iForAI, Inc. is a US-based AI consulting and implementation company and the controller of the personal data described in this policy, which means we decide why and how it is processed.
For any privacy question or request, write to hi@ifor.ai.
What this policy covers
This policy covers personal data we collect through ifor.ai and its pages, including our contact form, content downloads and job applications.
It does not cover personal data we process on behalf of clients during an engagement. That processing is governed by our agreement with the client, including any data processing agreement.
Websites we link to, including LinkedIn, YouTube, Instagram and the AI assistants listed in our footer, have their own privacy policies.
What data we collect
Information you give us
- Contact form: first name, last name, company, work email and the message you write.
- Content downloads, such as the AI Hackathon Playbook: full name, email, company and industry.
- Job applications, when we have open roles: name, email, location, your CV and anything else you include in it.
Information collected automatically
- IP address and the approximate location derived from it, at country or city level
- Browser, device type, operating system and screen size
- Pages you visit, how you arrived and how you interact with them
- Cookie and similar identifiers
Analytics and advertising data is collected only after you accept it in our cookie banner.
We do not ask for sensitive data, such as health information or government ID numbers. Please do not include it in your messages or CV.
Filling in our forms is voluntary. Without the details a form asks for, we cannot reply to you or send you what you requested.
How we use your data
- To reply to your inquiry and discuss a possible engagement. Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business inquiries (Art. 6(1)(f)).
- To send you content you requested, such as a playbook. Legal basis: steps taken at your request (Art. 6(1)(b)).
- To follow up with relevant information about our services after an inquiry or download. Legal basis: legitimate interest in business communication (Art. 6(1)(f)), or your consent where the law requires it. You can opt out at any time.
- To review job applications. Legal basis: steps taken before an employment contract (Art. 6(1)(b)), and your consent if we keep your CV for future roles (Art. 6(1)(a)).
- To understand how the website is used and improve it. Legal basis: consent (Art. 6(1)(a)).
- To measure the performance of our LinkedIn advertising. Legal basis: consent (Art. 6(1)(a)).
- To keep the website and forms secure and free of spam. Legal basis: legitimate interest in security (Art. 6(1)(f)).
- To meet legal obligations and to establish or defend legal claims. Legal basis: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).
Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
International data transfers
Some of the providers above are based in, or process data in, the United States or other countries outside the EU, EEA and UK. Our team also works from outside the EU and may access your data from there. When personal data leaves these regions, we rely on one of the following safeguards:
- An adequacy decision, including the EU-US Data Privacy Framework, its UK Extension and the Swiss-US framework, for providers certified under them
- Standard Contractual Clauses approved by the European Commission, with the UK Addendum where relevant
You can request a copy of the safeguards that apply by writing to hi@ifor.ai.
How long we keep data
- Inquiries: up to 24 months after our last contact, unless we start working together
- Content downloads: up to 24 months, or until you ask us to delete them
- Job applications: up to 12 months after the role is filled, or longer only with your consent
- Analytics data: for the retention period set in Google Analytics, after which it is deleted automatically
- Cookies: for the period shown in the cookie settings panel
When a period ends, we delete or anonymize the data. We may keep it longer where the law requires it or to handle a legal claim.
Data security
We protect personal data with technical and organizational measures appropriate to the risk, including:
- Encryption in transit (HTTPS) across the website and all forms
- Access limited to team members who need the data for their work
- Service providers bound by data processing agreements
- Collecting only the data we need
No system is completely secure. If a breach puts your rights at risk, we will notify the relevant authority and, where required, you.
Your rights under GDPR
If you are in the EU, EEA or UK, you have the right to:
- Access the personal data we hold about you and receive a copy
- Correct data that is inaccurate or incomplete
- Have your data deleted
- Restrict how we process your data
- Receive your data in a portable format, or have it sent to another organization
- Object to processing based on legitimate interests, and to direct marketing at any time
- Withdraw your consent at any time, without affecting earlier processing
You also have the right to lodge a complaint with the data protection authority where you live or work, or where you believe a breach took place. We would appreciate the chance to address your concern first.
Your US state privacy rights
If you live in California, Virginia, Colorado, Connecticut or another US state with a comprehensive privacy law, you may have the right to:
- Know what personal information we collect, use and disclose, and receive a copy
- Correct inaccurate personal information
- Delete your personal information
- Opt out of the sale or sharing of your personal information and of targeted advertising
- Appeal our decision if we decline your request
We will not discriminate against you for exercising any of these rights. We do not collect or use sensitive personal information for purposes that would give you a right to limit its use.
Categories collected in the last 12 months
- Identifiers, such as name, email address and IP address. Source: you and your device. Disclosed to: hosting, analytics and form-processing providers.
- Professional information, such as company, industry and, for applicants, work history in a CV. Source: you. Disclosed to: hosting, form-processing and file-upload providers.
- Internet activity, such as pages viewed and interactions. Source: your device, through cookies. Disclosed to: analytics and advertising providers.
- Approximate location derived from IP address. Source: your device. Disclosed to: analytics providers.
We use these categories for the purposes in section 04 and keep them for the periods in section 08. We share identifiers and internet activity with LinkedIn for advertising measurement, only with your consent. We do not sell personal information, and we do not knowingly sell or share the personal information of anyone under 16.
How to exercise your rights
- Email hi@ifor.ai with the subject "Privacy request" and tell us what you would like us to do.
- To opt out of analytics and advertising, use Cookie settings or turn on a GPC signal in your browser.
We may ask you to confirm your identity before acting on a request, using information we already hold. An authorized agent can submit a request for you with your signed permission. We may still ask you to confirm your identity directly.
We reply within one month under GDPR, extendable by two more months for complex requests, and within 45 days under US state laws, extendable by another 45 days where the law allows. We will tell you if we need the extra time.
If we decline a request under a US state law, you can appeal by replying to our decision with the subject "Privacy appeal". We will answer within the time your state's law sets, and no later than 60 days. If the appeal is declined, you can contact your state Attorney General.
Children's privacy
Our website and services are meant for businesses and professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
Updates to this policy
We review this policy at least once every 12 months and whenever our processing changes. The "Last updated" date at the top shows when it last changed. If we make a significant change, we will say so clearly on this page.
Contact us
For any question about this policy or how we handle your data, write to hi@ifor.ai.
