Overview
Sigma AI Consulting ("we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal information when you use the AI Fahes AI Visibility Platform and related services (collectively, the "Services").
Please read this policy carefully. By using our Services, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use the Services.
Our core commitment: We collect only the data necessary to provide the Services. We do not sell, rent, or trade your personal information to any third party for their marketing purposes.
Data Controller
Sigma AI Consulting is the data controller responsible for your personal information collected through the Services.
Contact:
Sigma AI Consulting
1209 Mountain Road Pl NE, Albuquerque, NM 87110, United States
Email: info@aifahes.com
Website: aifahes.com
For all privacy-related requests, enquiries, or complaints, please contact us at the email address above. We aim to respond within 30 days.
What We Collect
We collect the following categories of information:
| Category | Examples | How collected |
|---|---|---|
| Account information | Name, email address, organization name, password (hashed) | Provided by you at registration |
| Audit data | Domain URLs submitted, audit scores, issue lists, reports generated | Provided by you during use |
| Usage data | Pages visited, features used, timestamps, session duration | Collected automatically |
| Technical data | IP address, browser type, device type, operating system | Collected automatically |
| Communications | Emails you send us, support requests, feedback | Provided by you |
| Billing information | Plan selected, billing correspondence (we do not store payment card details) | Provided by you at upgrade |
We do not intentionally collect sensitive personal data such as health, biometric, racial, or political information.
How We Use Your Data
We use the information we collect for the following purposes:
- Providing the Services: Creating and managing your account, processing audits, generating reports, and delivering all Platform features
- Account communications: Sending onboarding emails, subscription notifications, and transactional messages related to your account
- Customer support: Responding to your enquiries, troubleshooting issues, and improving the Platform based on your feedback
- Security and fraud prevention: Monitoring for suspicious activity and enforcing our Terms of Service
- Platform improvement: Analysing aggregated, anonymised usage patterns to improve our audit framework and features
- Legal compliance: Complying with applicable laws, regulations, or lawful requests from authorities
We do not use your data for automated profiling that produces significant legal effects, nor for advertising purposes.
Legal Basis for Processing
We process your personal data on the following bases:
- Contract performance: Processing necessary to provide the Services you have requested
- Legitimate interests: Processing necessary for security monitoring, fraud prevention, and Platform improvement, where such interests are not overridden by your rights
- Legal obligation: Processing necessary to comply with applicable legal requirements
- Consent: Where we rely on consent, you may withdraw it at any time without affecting prior processing
Data Retention
We retain your personal data for as long as your account is active or as necessary to provide the Services:
- Account data: Retained for the duration of your account and up to 12 months after account closure
- Audit data: Retained for the life of your account. Following termination, you have at least 30 days to export your data before deletion
- Usage and technical data: Typically retained for up to 12 months
- Communications: Retained as long as necessary to resolve any open matter
You may request earlier deletion of your data at any time โ see Section 9.
Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS encryption for all data in transit
- Hashed storage for all passwords
- Session hardening including CSRF protection and HTTP-only cookies
- Access controls limiting data access to authorized personnel only
- Regular review of security practices
No method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify affected users as required by applicable law.
Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@aifahes.com. We will respond within 30 days. We may need to verify your identity before acting on your request.
Children
The Services are intended for use by business professionals and organizations. We do not knowingly collect personal data from individuals under the age of 18. If you believe that we have inadvertently collected data from a minor, please contact us immediately at info@aifahes.com and we will take prompt steps to delete it.
International Data Transfers
Our Services are accessible globally. If you access the Services from outside the United States, your data may be transferred across international borders. Where we transfer personal data internationally, we take appropriate steps to ensure such transfers comply with applicable data protection laws and that adequate safeguards are in place.
Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice on the Platform prior to the changes becoming effective. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy, please contact us:
Sigma AI Consulting
1209 Mountain Road Pl NE, Albuquerque, NM 87110, United States
Email: info@aifahes.com
Website: aifahes.com
We aim to respond to all privacy-related enquiries within 30 days.
If you are not satisfied with our response, you may have the right to lodge a complaint with the applicable data protection authority in your jurisdiction.