Privacy Policy

Who We Are and What This Policy Covers

Week One AI provides done-for-you AI automation and consulting services to businesses. This Privacy Policy explains what information we collect through our website (weekoneai.com) and our client intake portal, how we use it, who we share it with, and the choices and rights you have.

This policy applies to visitors to our website and to clients who work with us. It does not cover the internal privacy practices of any third-party platform you reach through a link or integration; those services have their own policies.

If you have questions about this policy or your personal information, contact us at info@weekoneai.com.

Information We Collect

We keep data collection deliberately minimal. Here is everything we collect and how it reaches us.

Booking and contact emails. When you book a session or contact us through the website, your browser composes an email to us. You choose what to include — typically your name, email address, and a description of what you need. We receive whatever you send. The website itself does not store this information on a server; it simply helps you send us an email.

Phone number. If you voluntarily give us a phone number — on our booking form, in an email, or in conversation — we receive and keep it so we can reach you about your enquiry or project. A phone number is never required to contact us or to use our website.

Opt-in and consent records. When you consent to receive text messages from us through the booking form on our Contact page, we record what you agreed to, when, and how, and we retain that record. When you consent by any other channel — replying to an email, texting us first — we retain that message as the record. We keep these records to prove consent was given and to honor your opt-out requests. Consent records are treated as confidential and are never used for marketing or shared for marketing purposes.

Direct emails. If you email us at info@weekoneai.com, we receive the content of your message and your email address, along with anything you choose to include.

Client intake portal data. Signed clients receive private, unlisted links to a client intake portal. There, clients submit project information and upload files needed to deliver their engagement. This information is stored in a database (Supabase) protected by access controls and is used only to deliver the work you have engaged us to do.

Portal autosave (in your own browser). To prevent lost work, the intake portal automatically saves your in-progress entries in your own browser's local storage (localStorage). This data stays on your device. It is not transmitted to us until you submit the form, and you can clear it at any time through your browser.

Hosting and server logs. Our website and portal are hosted on Vercel. Like most web infrastructure, the hosting platform generates standard server logs (for example, IP address, browser type, and timestamps of requests) as part of operating and securing the service.

Support chat widget. Our site runs a general support chat widget that we built and operate ourselves. If you open it and send us a message, the name, email address, and company you give — along with your message text — are transmitted to and stored by our own backend (hosted on Supabase) so we can reply to you. The widget also stores a small session identifier in your browser so a conversation stays continuous across pages. If you never open the widget, you never give it anything. This widget does not collect a phone number and is not how you opt in to text messages — see "SMS / Text Messaging" below for that.

No analytics or advertising trackers. Apart from the support chat widget described above, we do not run web analytics and we place no advertising or social-media pixels on our site. We do not build advertising profiles about you, and we do not use your information for advertising.

How We Use Information

We use the information we collect only for legitimate business purposes:

• To respond to your inquiries and booking requests.
• To scope, deliver, and support the engagement you have hired us for.
• To communicate with you about your project, invoices, and support requests.
• To operate, secure, and maintain our website and portal.
• To comply with legal obligations and enforce our agreements.

We do not use your information for advertising, and we do not sell it.

Who We Share It With

We share information only with service providers who help us run the business, and only as needed for them to perform their function. These include:

• Hosting — our website and portal infrastructure provider (Vercel).
• Email — the email service we use to receive and respond to your messages.
• Database — our client-data storage provider (Supabase) for portal submissions.
• Support chat platform — our own backend infrastructure (Supabase), which powers the support chat widget on this site. It processes what you send through the widget solely so we can respond and manage the conversation.
• Payment processors — when an engagement is paid, payment is handled by third-party payment processors or platforms. We never see or store your full card numbers.
• SMS delivery — our text-messaging platform and the carriers/aggregators that carry the message (for example, Twilio). These providers act as delivery-only processors: they handle your phone number and message content solely to deliver the messages you consented to receive.

We do not sell your personal information, and we do not share it for advertising or cross-context behavioral marketing. Text messaging originator opt-in data and consent records are excluded from all sharing: they are not shared with any third party, other than the aggregators and messaging providers who need them solely to deliver the messages you have consented to receive. We may disclose information if required by law, to protect our legal rights, or in connection with a business transfer, but only to the extent necessary.

SMS / Text Messaging

We use text messaging only to talk to people who have asked us to. Here is exactly how it works.

Opting in. By opting into our SMS messaging services, you agree to receive text messages related to our services. We only send text messages to a phone number after you have explicitly opted in. There is exactly one way to opt in on this website: the booking form on our Contact page. If you choose to give a phone number there, you must separately tick a consent box — unticked by default — before the form can be submitted, authorizing customer-care texts about your enquiry: replies to your enquiry, appointment confirmations, appointment reminders, and follow-ups. Ticking that box is not a condition of purchase. If you would rather not receive texts, simply leave the phone field blank — you can still book a session. You can also opt in by texting us first. We record the exact consent wording you agreed to and a timestamp, so we can demonstrate that consent was given.

No other form on this website collects a phone number for text messaging, and no consent you give us is ever assumed from a form you filled in for another purpose.

What we send. Only customer-care messages about your enquiry: replies to a question you asked us, appointment confirmations, appointment reminders, and follow-ups about that enquiry. We do not send marketing or promotional text messages.

Opting out. You can cancel SMS notifications at any time by replying STOP. You will receive a final confirmation message, and then we will stop texting you. You can also opt out by emailing info@weekoneai.com or by telling us in any other reasonable way — we honor opt-outs however they reach us, not only by the word STOP.

Getting help. Reply HELP for assistance, or email us at info@weekoneai.com.

Rates and frequency. Message and data rates may apply for messages sent to you from us and to us from you. Message frequency varies. Contact your mobile provider for details about your plan.

Carriers. Carriers are not liable for delayed or undelivered messages.

Who your mobile information is shared with. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers solely for the purpose of delivering messages you've consented to receive.

Security

We take reasonable steps to protect your information. Client portal data is held behind access controls on a least-privilege basis, meaning access is limited to those who need it to deliver your engagement. Data is encrypted in transit. No method of transmission or storage is perfectly secure, but we work to keep our footprint small and our controls appropriate to the sensitivity of the data we hold.

Data Retention

We keep personal information only as long as needed for the purposes described in this policy — to deliver and support your engagement, meet our legal and accounting obligations, and resolve any disputes. When information is no longer needed, we take steps to delete or anonymize it. You may request deletion as described below, subject to obligations that require us to retain certain records. We retain consent and opt-out records for at least four years after the relevant communication, because we may need them to demonstrate that consent was given or honored.

International Transfers

Week One AI operates from India, and we serve clients internationally, including in the United States. Your information may be processed in India and on infrastructure operated by US-based providers (such as our hosting and database platforms). By using our services, you understand that your information may be processed in these locations, which may have data-protection laws different from those in your own jurisdiction.

Your Privacy Rights

Depending on where you live, you may have rights over your personal information. We honor reasonable requests regardless of location.

You can ask us to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your personal information.
• Provide a copy of your information in a portable format.

To exercise any of these, email info@weekoneai.com with your request. We will verify your identity where appropriate and respond within 30 days.

US State Privacy Rights

If you are a resident of a US state with a comprehensive privacy law, you may have the following rights, which we extend to you on request:

• Access the personal information we have collected about you.
• Correction of inaccurate personal information.
• Deletion of your personal information.
• Portability — a copy of your information in a usable format.
• No sale or sharing — we do not sell your personal information and do not share it for cross-context behavioral advertising. There is nothing to opt out of because we simply do not do this.
• Non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised your privacy rights.

To submit a request, email info@weekoneai.com. We will respond within 30 days. If we cannot fulfill a request, we will explain why. If your law provides an appeal process, you may reply to our decision and we will review it.

Children

Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be reflected on this page.

Contact

Questions or privacy requests: info@weekoneai.com.