Privacy Policy
What we collect when you use aibrigade.ai or send us an enquiry, why we hold it, who it reaches, and how to have it removed. In short: we collect what you send us and a small amount of anonymous usage data. We do not sell anything to anyone.
Last updated
Who we are
AI Brigade builds production AI systems for financial services and healthcare organisations. This policy covers aibrigade.ai and any enquiry you send through it.
For the purposes of the UK and EU General Data Protection Regulation, AI Brigade is the data controller for the information described in this policy. Where we process information inside a system we have built for a client, that client is the controller and we act as their processor. See “Client data and the systems we build”.
You can reach us about anything in this policy at contact@aibrigade.ai, or by post at AI Brigade, 370 Federal Court, Perth Amboy, NJ 08861, USA.
What we collect
We collect two kinds of information: what you choose to send us, and a small amount of technical data your browser reports automatically.
Information you give us
- Your name and email address, which the enquiry form requires.
- Your company, phone number, the type of work you are interested in, your budget range and your timeline. All of it is optional and used only to route your enquiry to the right person.
- Whatever you write in the message field, and anything you send us by email, phone or during a call.
- Your acceptance of this policy, recorded with the enquiry so we can show the basis on which we hold it.
Information collected automatically
- Standard server logs from our hosting provider: IP address, user agent, the pages requested and when. These are kept short-term for security and troubleshooting.
- Analytics events delivered through Google Tag Manager: pages viewed, approximate location at city level, device type, and how you arrived at the site.
- A record of enquiry submissions per connection, held in memory for ten minutes, used only to stop the same connection flooding the form.
We do not ask for, and the site has no field for, financial details, government identifiers, health information or any other special category of personal data. Please do not send them to us in the message field.
How we use information
- To read your enquiry and reply to it. This is the only reason the form exists.
- To prepare a proposal, a scope or an estimate you have asked for.
- To deliver and support work under a signed engagement.
- To keep the site working, secure and reasonably fast, and to understand in aggregate which pages are useful.
- To meet our legal, accounting and regulatory obligations.
We do not use your information to train models. We do not sell it, rent it, or share it with anyone for their own marketing. We do not add you to a mailing list because you sent an enquiry.
Our legal bases
If you are in the United Kingdom, the European Economic Area or another region with similar law, we rely on the following bases:
- Consent: for analytics cookies, and for holding the enquiry you chose to send. You can withdraw it at any time.
- Legitimate interests: to respond to business enquiries, to secure the site and to keep records of the work we have done. We have weighed these against your rights and consider them proportionate.
- Performance of a contract: where we are delivering an engagement to you or your organisation.
- Legal obligation: where tax, accounting or regulatory rules require us to keep something.
Where information goes
We work from the United States, the United Arab Emirates and Pakistan, and our providers operate globally. Information you send us may therefore be processed outside the country you are in, including in countries that have not been assessed as providing an equivalent standard of protection.
Where we transfer personal data out of the UK or the EEA we rely on the UK Addendum and the European Commission's Standard Contractual Clauses, together with any additional measures the transfer needs. You can ask us for details of the safeguards in place for a specific transfer.
How long we keep information
- Enquiries that do not become engagements: up to 24 months from your last message, then deleted.
- Client records: for the life of the engagement and for as long afterwards as tax, accounting and limitation rules require.
- Server logs: short-term, on our provider's standard retention.
- Analytics: on the retention period configured in the analytics product, in aggregate form.
If you ask us to delete your enquiry sooner, we will, unless we are required to keep a copy.
How we protect it
Traffic to and from this site is encrypted in transit. Mail credentials live only on the server and are never present in anything sent to your browser. Access to the enquiry mailbox is limited to the people who need it, and everyone working with client information is under a written confidentiality obligation.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information and is likely to present a risk to you, we will tell you and the relevant regulator within the time the law requires.
Your rights
Wherever you are, you can ask us to show you what we hold about you, correct it, or delete it. Depending on where you live you may also have the right to:
- object to processing we carry out on the basis of legitimate interests,
- ask us to restrict processing while a question about it is resolved,
- receive a copy in a portable, machine-readable format,
- withdraw consent at any time, without affecting anything done before you withdrew it,
- know the categories of personal information collected and disclosed, and to opt out of its sale or sharing (we do not sell or share personal information as those terms are defined under California law),
- be free from discrimination for exercising any of these rights.
Write to contact@aibrigade.ai and we will respond within one month, or sooner where the law requires it. If you are not satisfied, you can complain to your data protection authority: in the UK, the Information Commissioner's Office.
Client data and the systems we build
This section matters more than the rest of this policy for anyone who engages us.
When we build or operate a system that processes your organisation's data, your organisation remains the controller of that data and we act solely as its processor. What we may do with it is set by the engagement agreement and its data processing terms, not by this policy, and those terms always govern where they differ from anything written here.
- We process client data only on documented instructions from the client.
- We do not use client data to train models for ourselves or for anyone else.
- We do not move client data outside the environments agreed in writing, and in regulated engagements that usually means it never leaves the client's own infrastructure.
- Sub-processors are named, and a client can object to a new one before it is engaged.
- On termination we return or delete client data, at the client's choice.
Please do not send confidential material through the enquiry form. Ask us for an NDA first. We will send one the same day and give you a secure route for anything sensitive.
Children
This is a business-to-business site. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us something, write to us and we will delete it.
Changes to this policy
We update this policy when what we do changes. The date at the top is the date of the current version, and material changes will be announced on this page before they take effect. This version is effective from 22 September 2026.
Contact us
Questions, requests and complaints about this policy all go to the same place: contact@aibrigade.ai, or +1 (845) 300-2429 during business hours, or by post to AI Brigade, 370 Federal Court, Perth Amboy, NJ 08861, USA.
Something here unclear? Write to contact@aibrigade.ai and a person will answer.