Privacy Policy

Who We Are and What This Policy Covers

Week One AI provides done-for-you AI automation and consulting services to businesses. This Privacy Policy explains what information we collect through our website (weekoneai.com) and our client intake portal, how we use it, who we share it with, and the choices and rights you have.

This policy applies to visitors to our website and to clients who work with us. It does not cover the internal privacy practices of any third-party platform you reach through a link or integration; those services have their own policies.

If you have questions about this policy or your personal information, contact us at info@weekoneai.com.

Information We Collect

We keep data collection deliberately minimal. Here is everything we collect and how it reaches us.

Booking requests. When you book a session through either of our booking forms, we receive what you entered — your name, your email address, your company if you gave one, the time you picked, your answers to the short qualifying questions on our painting landing page, and your phone number and consent choice if you gave those. We store that booking in our scheduling and customer-records system so we can hold your slot, confirm it, and prepare for the call. If that system cannot be reached, the form falls back to composing an email to us in your own mail app instead, and we receive whatever you choose to send.

Phone number. If you give us a phone number — on either of our booking forms, on the call-back form described below, in an email, or in conversation — we receive and keep it so we can reach you about your enquiry or project, whether or not you agreed to receive text messages. A phone number is never required to use our website, and you can always reach us without one, by email, through the Contact form, or through the support chat. The booking flow on our painting landing page does ask for a number so we can confirm the meeting you are booking; agreeing to receive texts there remains optional, and giving us a number is never the same thing as consenting to be texted.

Call-back requests. Every page carries a “Call Rob” button. If you use it, we record the name and phone number you gave, the page you were on, the consent wording you agreed to, and the time — and we place one automated phone call to that number. We keep that record so we can show the call was requested and consented to, and so we can enforce our own limits on how often any number can be called. The number is used for that call and is not added to any marketing or messaging list.

Voice call recordings. Calls with our voice assistant are recorded, and the recording and a transcript are processed by our voice provider on our behalf so we can understand what you asked for and follow up. The call tells you it is recorded before anything else, and you can end it or opt out at any point.

Opt-in and consent records. When you consent to receive text messages from us through the booking form on our Contact page, we record what you agreed to, when, and how, and we retain that record. When you consent by any other channel — replying to an email, texting us first — we retain that message as the record. We keep these records to prove consent was given and to honor your opt-out requests. Consent records are treated as confidential and are never used for marketing or shared for marketing purposes.

Direct emails. If you email us at info@weekoneai.com, we receive the content of your message and your email address, along with anything you choose to include.

Client intake portal data. Signed clients receive private, unlisted links to a client intake portal. There, clients submit project information and upload files needed to deliver their engagement. This information is stored in a database (Supabase) protected by access controls and is used only to deliver the work you have engaged us to do.

Portal autosave (in your own browser). To prevent lost work, the intake portal automatically saves your in-progress entries in your own browser's local storage (localStorage). This data stays on your device. It is not transmitted to us until you submit the form, and you can clear it at any time through your browser.

Hosting and server logs. Our website and portal are hosted on Vercel. Like most web infrastructure, the hosting platform generates standard server logs (for example, IP address, browser type, and timestamps of requests) as part of operating and securing the service.

Support chat widget. Our site runs a general support chat widget that we built and operate ourselves. If you open it and send us a message, the name, email address, and company you give — along with your message text — are transmitted to and stored by our own backend (hosted on Supabase) so we can reply to you. The widget also stores a small session identifier in your browser so a conversation stays continuous across pages. If you never open the widget, you never give it anything. This widget does not collect a phone number and is not how you opt in to text messages — see "SMS / Text Messaging" below for that.

How you reached us. When you submit the booking form on our painting page, we store with your submission: the page address, the website that referred you, any campaign tags in the link you followed (for example utm_source or utm_campaign), the Meta click identifier (fbclid) if you came from a Facebook or Instagram ad, Meta's browser cookies (_fbp/_fbc), your browser's user-agent and your IP address. When you first arrive through a link carrying campaign tags or a click identifier, those tags, that link and the referring website are also saved in your own browser's storage, and are used only if you submit a form within 7 days. You can remove them at any time by clearing this site's data in your browser. When you use the support chat, we store the page you were on and your browser's user-agent. We use this to see which ad or page brought you, to measure our advertising, and to block spam and abuse. We keep it with your submission for 24 months and then delete it. If your browser sends a Global Privacy Control or Do Not Track signal, nothing is saved in your browser for this purpose, and the booking form stores none of the details above except the page address. The support chat still stores the page and your browser's user-agent.

Advertising measurement (Meta Pixel). On most pages of this site — never on this Privacy Policy, our Terms, or our SMS consent page — we use Meta's advertising pixel and its server-side counterpart (the Conversions API) to measure whether our own paid advertising works. The pixel records which of our pages you view, using Meta's own cookies (_fbp/_fbc), your IP address, and your browser's user-agent string. On qualifying form completions, our site or our server may tell Meta that the form was completed, sending Meta's browser identifiers (the _fbp cookie, and the _fbc cookie, which carries the Meta click identifier when you arrived from a Meta ad), the address of the page, your IP address, your browser's user-agent and a SHA-256 hash of your email. We do not send your name, phone number or form answers. We also keep a small flag in your browser so a completed form is reported to Meta only once. If your browser sends a Global Privacy Control or Do Not Track signal, we send none of this, from your browser or from our server.

Showing our ads to past visitors. We may also use the Meta Pixel to build an audience of people who visited our pages (for example our painting page) in the last 30 days, and in no case longer than 180 days, so that Meta can show our ads to them on Facebook and Instagram. Meta matches the visits to its own accounts; we never see who is in the audience. Meta may also use information from its pixel under its own terms, including to deliver ads. If your browser sends a Global Privacy Control or Do Not Track signal, the pixel does not load and you are not added. You can also limit ads based on your activity off Meta in your Meta account settings, and learn about interest-based advertising choices at https://www.aboutads.info/choices. Apart from this and the support chat widget described above, we do not run web analytics or any other advertising or social-media tracker on this site.

How We Use Information

We use the information we collect only for legitimate business purposes:

• To respond to your inquiries and booking requests.
• To scope, deliver, and support the engagement you have hired us for.
• To communicate with you about your project, invoices, and support requests.
• To operate, secure, and maintain our website and portal.
• To comply with legal obligations and enforce our agreements.

We do not sell your information. Its only advertising uses are the measurement and the past-visitor advertising described in "Advertising measurement (Meta Pixel)" above.

Who We Share It With

We share information only with service providers who help us run the business, and only as needed for them to perform their function. These include:

• Hosting — our website and portal infrastructure provider (Vercel).
• Email — the email service we use to receive and respond to your messages.
• Database — our client-data storage provider (Supabase) for portal submissions, booking-form submissions and support-chat records.
• Support chat platform — our own backend infrastructure (Supabase), which powers the support chat widget on this site. It processes what you send through the widget solely so we can respond and manage the conversation.
• Payment processors — when an engagement is paid, payment is handled by third-party payment processors or platforms. We never see or store your full card numbers.
• Scheduling and customer records — the booking platform that holds our calendar and our contact records. It is the same platform that delivers the text messages described below, and it receives what you submit on a booking form so we can book the appointment, confirm it, and honor an opt-out.
• SMS delivery — our text-messaging platform and the carriers/aggregators that carry the message (for example, Twilio). These providers act as delivery-only processors: they handle your phone number and message content solely to deliver the messages you consented to receive.
• Advertising — Meta (the parent company of Facebook and Instagram), only as described in "Advertising measurement (Meta Pixel)" above. Your phone number and your text messaging consent are never sent to Meta.

We do not sell your personal information. The only information we share for advertising is the pixel and form-completion data sent to Meta, described in "Advertising measurement (Meta Pixel)" above, which Meta uses to measure our ads and to show our ads to past visitors. Text messaging originator opt-in data and consent records are excluded from all sharing: they are not shared with any third party, other than the aggregators and messaging providers who need them solely to deliver the messages you have consented to receive. We may disclose information if required by law, to protect our legal rights, or in connection with a business transfer, but only to the extent necessary.

SMS / Text Messaging

We use text messaging only to talk to people who have asked us to. Here is exactly how it works.

Opting in. By opting into our SMS messaging services, you agree to receive text messages related to our services. We only send text messages to a phone number after you have explicitly opted in. There are two places on this website where you can opt in, and they are the same booking form in two places rather than two different programs: the booking form on our Contact page, and the “Check availability” booking flow on our painting landing page at weekoneai.com/painting. Both show the same consent checkbox, quoting the same wording word for word; both book through the same system; and both write the same consent record. The box is unticked by default in both places and you have to tick it yourself — consent is never pre-ticked, and it is never assumed from a form you filled in for another purpose. What ticking it authorizes is customer-care texts about your enquiry: replies to your enquiry, appointment confirmations, appointment reminders, and follow-ups.

Consent is never a condition of purchase. That is true in both places, though the two forms differ in one detail worth stating plainly. On the Contact form the phone number itself is optional: if you would rather not hear from us by text at all, leave the phone field blank and you can still book a session. If you do give a number there, you must tick the consent box before the form will submit — a number with the box left unticked is refused rather than treated as consent. On the painting form we ask for a phone number so we can reach you about the meeting you are booking, but the consent box beside it stays optional: leave it unticked and your session is booked exactly the same way, and we simply will not text you. You can also opt in by texting us first. In every case we record the exact consent wording you agreed to and a timestamp, so we can demonstrate that consent was given. Our SMS Opt-In page names both forms and quotes that wording in full.

Apart from the two booking forms described above, no other form on this website collects a phone number for text messaging, and no consent you give us is ever assumed from a form you filled in for another purpose. Our support chat widget asks only for your name, email and company; it does not ask for a phone number and it does not sign you up for texts. In particular, the “Call Rob” call-back form asks for a phone number in order to place one voice call, and giving it to us there does not opt you in to text messages of any kind.

What we send. Only customer-care messages about your enquiry: replies to a question you asked us, appointment confirmations, appointment reminders, and follow-ups about that enquiry. We do not send marketing or promotional text messages.

Opting out. You can cancel SMS notifications at any time by replying STOP. You will receive a final confirmation message, and then we will stop texting you. You can also opt out by emailing info@weekoneai.com or by telling us in any other reasonable way — we honor opt-outs however they reach us, not only by the word STOP.

Getting help. Reply HELP for assistance, or email us at info@weekoneai.com.

Rates and frequency. Message and data rates may apply for messages sent to you from us and to us from you. Message frequency varies. Contact your mobile provider for details about your plan.

Carriers. Carriers are not liable for delayed or undelivered messages.

Who your mobile information is shared with. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers solely for the purpose of delivering messages you've consented to receive.

Security

We take reasonable steps to protect your information. Client portal data is held behind access controls on a least-privilege basis, meaning access is limited to those who need it to deliver your engagement. Data is encrypted in transit. No method of transmission or storage is perfectly secure, but we work to keep our footprint small and our controls appropriate to the sensitivity of the data we hold.

Data Retention

We keep personal information only as long as needed for the purposes described in this policy — to deliver and support your engagement, meet our legal and accounting obligations, and resolve any disputes. When information is no longer needed, we take steps to delete or anonymize it. You may request deletion as described below, subject to obligations that require us to retain certain records. We retain consent and opt-out records for at least four years after the relevant communication, because we may need them to demonstrate that consent was given or honored.

International Transfers

Week One AI operates from India, and we serve clients internationally, including in the United States. Your information may be processed in India and on infrastructure operated by US-based providers (such as our hosting and database platforms). By using our services, you understand that your information may be processed in these locations, which may have data-protection laws different from those in your own jurisdiction.

Your Privacy Rights

Depending on where you live, you may have rights over your personal information. We honor reasonable requests regardless of location.

You can ask us to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your personal information.
• Provide a copy of your information in a portable format.

To exercise any of these, email info@weekoneai.com with your request. We will verify your identity where appropriate and respond within 30 days.

US State Privacy Rights

If you are a resident of a US state with a comprehensive privacy law, you may have the following rights, which we extend to you on request:

• Access the personal information we have collected about you.
• Correction of inaccurate personal information.
• Deletion of your personal information.
• Portability — a copy of your information in a usable format.
• No sale, and an opt-out for sharing — we do not sell your personal information. The measurement data we send Meta (see "Advertising measurement (Meta Pixel)" above) may count as "sharing" for cross-context behavioral advertising under California law. To opt out, turn on Global Privacy Control in your browser: we honor it automatically, and the pixel does not load.
• Non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised your privacy rights.

To submit a request, email info@weekoneai.com. We will respond within 30 days. If we cannot fulfill a request, we will explain why. If your law provides an appeal process, you may reply to our decision and we will review it.

Children

Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be reflected on this page.

Contact

Questions or privacy requests: info@weekoneai.com.