Legal

Privacy Policy

Last updated: July 19, 2026

AI Arbitrage Agency (“we,” “us,” or “our”) provides AI-powered automation, chat, and lead-generation services to businesses (“Clients”). This policy explains what information we collect from visitors to our website, from Clients, and from the end customers who interact with the AI systems we operate on a Client’s behalf, and how we use, share, and protect that information.

1. Information we collect

Depending on how you interact with us, we may collect:

Contact and inquiry information you submit through our website forms (name, email, phone number, company, and message content) at pages like /contact and /book-demo, or through our AI chat widget.
Conversation content when you message a Client’s AI assistant via web chat, SMS, email, Facebook Messenger, or Instagram Direct — including the messages you send and any contact details you share in that conversation.
Business and account information for Clients using our platform, including company details, billing information (processed by Stripe — we do not store full payment card numbers), and CRM records created through the course of service.
Usage data such as pages visited and general device/browser information, collected automatically through standard web server logs and hosting infrastructure.

2. How we use information

To respond to inquiries, schedule demos, and provide the services requested.
To operate AI chat, phone, email, SMS, and social messaging assistants on behalf of our Clients, including generating responses, scoring and routing leads, and escalating conversations to a human when appropriate.
To send account, billing, proposal, and service-related communications.
To improve our services, troubleshoot issues, and maintain security.
To comply with legal obligations.

We do not sell personal information. We do not scrape or collect data from social media platforms in a manner that violates those platforms’ terms of service.

3. AI-generated communications

Some of the messages you receive through chat, email, SMS, Messenger, or Instagram may be generated by an AI system rather than a human. We disclose this where required, and every AI conversation includes a path to reach a human team member. Message content may be processed by our AI provider (Anthropic) solely to generate a response and is not used to train third-party models outside the terms of our provider agreement.

4. Third-party service providers

We use the following categories of service providers to operate our platform, each of which processes data only as necessary to provide their service to us:

Database and authentication hosting (Supabase)
Application hosting (Vercel)
AI response generation (Anthropic)
Email delivery (Resend)
SMS delivery (Twilio)
Facebook Messenger and Instagram messaging (Meta Platforms)
Payment processing and invoicing (Stripe)
E-signature processing for proposals (Documenso)

5. Data retention

We retain personal information for as long as reasonably necessary to provide our services, maintain business records, and comply with legal obligations. You may request deletion of your information as described below.

6. Your rights

You may request access to, correction of, or deletion of your personal information by contacting us at jordanloveridge173@gmail.com. Depending on your location, you may have additional rights under applicable law (such as the GDPR or CCPA); we will respond to verified requests consistent with those laws.

7. Children’s privacy

Our services are intended for businesses and their customers and are not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

9. Contact us

Questions about this policy can be sent to jordanloveridge173@gmail.com.

This page is a general-purpose privacy policy template and is not a substitute for advice from a qualified attorney. Review it (and update the contact details, entity name, and any jurisdiction-specific requirements) before relying on it for a live business.