Privacy Policy

This website, sfaiconsultants.com (the "Site"), is operated by SF AI Consultants, Inc., a Delaware corporation doing business as SF AI Consultants ("SF AI Consultants", "we", "us" or "our"). SF AI Consultants, Inc. also operates SF AI Labs (sfailabs.com). Both brands are run by the same team, so information you give us through either website is handled by the same people under the same practices.

For the purposes of the EU and UK General Data Protection Regulation, SF AI Consultants is the controller of the personal information described in this policy. You can reach us at hello@sfaiconsultants.com or by post at 415 Mission St, San Francisco, CA 94105, United States.

This policy covers personal information we collect when you visit the Site (including our guides at sfaiconsultants.com/guides), subscribe to our newsletter, request a download, contact us, or book a call through a link on the Site.

It does not cover information we process when we deliver services to a client under a written agreement. That processing is governed by the agreement with that client. It also does not cover third-party websites and services that the Site links to, which have their own privacy policies.

Information you give us

• Newsletter and downloads. When you subscribe to our newsletter or request a resource such as a whitepaper or e-book, we collect your email address, your name if the form asks for it, the form you used, the resource you requested, the article you signed up from and any campaign parameters in the address of the page you arrived on (for example, utm_source and utm_campaign).
• Contact form. When you send us a message, we collect your name, email address, the topic you select and the content of your message. We keep your name and email address as a contact record in our email platform, without subscribing you to the newsletter, and forward your message to our team by email.
• Email. When you email us, we receive your email address, your message and any other information you choose to include.
• Job applications. If you apply for a role through the application form linked from our Careers page, we receive the information you submit in that form, such as your name, contact details and work history.

Please do not send us sensitive personal information (for example, health, financial account or government identification details) through the Site or by email.

Information from booking a call

Booking links on the Site open our scheduling page on Calendly, either on calendly.com or in a window on the Site. When you click a booking link that opens in a window on the Site, the Site loads Calendly's scheduling script at that moment, which gives Calendly technical information such as your IP address and browser type. Viewing a page without clicking a booking link sends nothing to Calendly. When you book, Calendly collects your name, email address, your chosen time and any answers you give, and shares them with us so we can hold the meeting. To understand which pages lead to bookings, we add campaign parameters and the random analytics identifier described below to the booking link. When a booking is made, we record it in our analytics tool together with that identifier and your email address.

Information collected automatically

• Analytics. We use PostHog to understand how the Site is used. When you visit, PostHog collects pages viewed, the page that referred you, campaign parameters, clicks and other interactions with page elements (for example, which button or link you used), approximate location derived from your IP address (city and country), browser, device and operating system type, screen size, and page performance measurements. PostHog assigns your browser a random identifier and a session identifier, stored in a cookie and in your browser's local storage. If you are in the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, PostHog loads only after you accept analytics cookies in the cookie banner. Elsewhere it loads with the page unless you reject analytics cookies. You can change your choice at any time with the Cookie settings link.
• Linking analytics to you. The analytics identifier is not tied to your name or email address when you browse. If you subscribe, request a download or book a call, we record that event in our analytics tool together with your analytics identifier and your email address, which links your earlier activity on the Site to your email address. We do this to understand which content was useful to you and which pages lead to signups and bookings.
• Hosting and security logs. The Site is hosted by Vercel and delivered through Cloudflare. When your browser requests a page, these providers process technical information such as your IP address, browser user agent, the page requested, the referring page and the time of the request, to deliver the page, keep the Site secure and protect it against abuse.

What we do not collect

We do not run advertising, advertising pixels or third-party tracking tags on the Site, and we do not use your information for targeted advertising. The fonts and images on the Site are served from our own hosting, so loading a page does not send requests to font or image services such as Google Fonts. We do not process payments through the Site.

We use personal information to:

• send you the newsletter you subscribed to and deliver resources you requested;
• respond to your messages and inquiries, and prepare for and hold calls you book;
• consider job applications;
• understand how the Site is used and which content is useful, and improve the Site and our content;
• measure the performance of our content and campaigns, including which pages lead to subscriptions and bookings;
• operate, secure and protect the Site, including detecting and preventing spam, fraud and abuse;
• comply with legal obligations, and establish, exercise or defend legal claims.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases.

Where we rely on legitimate interests, we have considered that those interests are not overridden by your rights and interests. You can object to this processing as described in Your rights and choices.

We use the following service providers to run the Site. They process personal information on our behalf and under our instructions, except where noted.

We do not sell personal information, and we do not share it with third parties for cross-context behavioral advertising. We disclose personal information only:

• to the service providers listed above, to perform services for us;
• if required by law, regulation, legal process or a valid request from a public authority;
• where needed to protect the rights, property or safety of SF AI Consultants, our clients, visitors or others, including to prevent fraud and abuse;
• to professional advisers, such as lawyers and accountants, under a duty of confidentiality;
• in connection with a merger, acquisition, financing or sale of all or part of our business, in which case the information remains subject to this policy or one with equivalent protections;
• with your consent or at your direction.

We use a small number of cookies and similar browser storage for analytics, campaign attribution and security, and Calendly may set cookies on pages where bookings open in a window on the Site. Our Cookie Policy lists each one, its provider, purpose and duration, and explains how to control them.

Do Not Track and Global Privacy Control. The Site does not currently change its behavior in response to Do Not Track browser signals. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or sharing for a Global Privacy Control signal to opt you out of.

We are based in the United States, and our service providers process information in the United States and other countries. If you are outside the United States, your information will be transferred to, stored and processed in countries whose data protection laws may differ from those where you live.

When we transfer personal information from the EEA, the UK or Switzerland, we rely on an adequacy decision, such as the EU-US Data Privacy Framework and its UK and Swiss extensions where the recipient is certified, or on the European Commission's Standard Contractual Clauses (with the UK addendum where applicable). You can ask us for more information about these safeguards using the contact details below.

We keep personal information only for as long as we need it for the purposes described in this policy, unless the law requires or permits us to keep it longer.

We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS) for the whole Site, access controls on the accounts we use to run it, and service providers that maintain their own security programs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Choices available to everyone

• Emails. Every newsletter includes an unsubscribe link. You can also email us to unsubscribe.
• Cookies and analytics. You can block or delete cookies and site data in your browser settings. See our Cookie Policy.
• Access and deletion. You can ask us what personal information we hold about you, and ask us to correct or delete it, by emailing hello@sfaiconsultants.com.

If you are in the EEA or the UK

You have the right to access your personal information, to have it corrected or erased, to restrict or object to our processing of it (including processing based on legitimate interests), and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect processing that took place before you withdrew.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work, or where you believe an infringement occurred. In the UK, this is the Information Commissioner's Office. We would appreciate the chance to address your concern first.

How to make a request

Email hello@sfaiconsultants.com with the subject line "Privacy request" and tell us what you would like us to do. We may need to verify your identity before acting on a request, usually by confirming control of the email address involved. We respond within the time the applicable law requires, generally within one month (EEA and UK) or 45 days (California), and we will tell you if we need an extension that the law allows.

This section applies to California residents and supplements the rest of this policy. It describes our practices under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), to the extent the CCPA applies to us.

Personal information we collect

In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described above.

We do not collect sensitive personal information as defined by the CCPA, and we do not use or disclose personal information for purposes that would give you a right to limit its use. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We have no actual knowledge of selling or sharing personal information of consumers under 16. Retention periods are listed in How long we keep information.

Your rights

Subject to exceptions in the law, you have the right to:

• know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties to whom we disclose it;
• delete personal information we have collected from you;
• correct inaccurate personal information;
• opt out of the sale or sharing of personal information (we do neither);
• not receive discriminatory treatment for exercising these rights.

To make a request, follow the steps in How to make a request. You may use an authorized agent; we may ask the agent for proof of your signed permission and ask you to verify your identity directly with us.

Other California notices

We do not disclose personal information to third parties for their own direct marketing purposes, as described in California Civil Code section 1798.83. Our response to Do Not Track signals is described in Cookies and analytics.

Residents of some other US states, including Colorado, Connecticut, Virginia and others with comprehensive privacy laws, may have similar rights to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising, sale or certain profiling. We do not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. To make a request, follow the steps in How to make a request. If we decline your request, you may appeal by replying to our response with the subject line "Privacy appeal".

The Site is intended for business audiences and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

The Site links to websites and services we do not operate, including Calendly, LinkedIn, X, Clutch, Upwork, Google Forms and Google Drive. When you follow those links or use those services, the third party's own privacy policy applies. We are not responsible for their privacy practices.

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page and, if the changes are material, take reasonable steps to tell you, for example with a notice on the Site or by email to newsletter subscribers.

For questions about this policy or to make a privacy request, contact us: