Privacy Policy
Last Updated: February 14, 2026
Protecting your private information is our priority. This Statement of Privacy applies to AI ReFounder and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to AI ReFounder include airefounder.com and AI ReFounder. The AI ReFounder application is an AI-powered Voice Sales Agent platform for ecommerce businesses. By using the AI ReFounder application, you consent to the data practices described in this statement.
Controller/Processor Role. For the website, self-serve sign-ups, and direct marketing, AI ReFounder acts as a data controller. For enterprise accounts where AI ReFounder processes data on behalf of a Customer, AI ReFounder acts as a processor/service provider under applicable law. Where AI ReFounder acts as a processor/service provider, the Data Processing Addendum (DPA) governs and controls in the event of any conflict with this Privacy Policy.
1. Personal Data
In order to better provide you with products and services offered, AI ReFounder may ask you to provide certain personally identifiable information that can be used to contact or identify you ("Personal Data"). These may include, but not limited to:
- Email address.
- First name and last name.
- Phone number.
- Address, State, Province, ZIP/Postal code, City.
- Cookies and Usage Data
We collect Personal Data that you provide directly (for example, when you sign up, contact us, or make a purchase), as well as certain data collected automatically such as Usage Data, cookies, and device information. We use this information for, but not limited to, communicating with you in relation to Services and/or products you have requested from us, and sending you newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link.
AI Voice & Communications Data. If you enable voice features or connect telephony, we may receive audio, transcripts, call metadata, and interaction logs ("Communications Data") for providing Services and improving safety. Customers are responsible for obtaining all required notices and consents before providing such data to AI ReFounder. AI ReFounder may use Communications Data in aggregated and de-identified form to improve, train, and enhance its models and Services, provided such use does not identify Customer or end users.
We hereby confirm that we do not use Google Workspace APIs to develop, improve, or train generalized artificial intelligence (AI) and/or machine learning (ML) models, and we do not retain any data obtained via Google Workspace APIs for such purposes.
Sensitive Personal Data. We do not seek to collect sensitive categories of data unless strictly necessary for the Services and expressly provided by you, and where required, with your explicit consent.
2. Usage Data
Additionally, whether you visit our service or use a mobile device to access it, we might gather data from your browser ("Usage Data").
This Usage Data may contain information like the Internet Protocol address (IP address) of your computer, the type and version of your browser, the pages you visit on our service, the time and date of your visit, the amount of time you spend on those pages, unique device identifiers, and other diagnostic data.
When accessing the service via mobile device, we may collect device type, unique device identifiers, IP address, operating system, mobile browser type, and other diagnostic data.
3. Location Data
If you grant us permission to do so, we may use and keep track of your location data ("Location Data"). We utilize your information to offer features, enhance, and personalize our service. Whenever you use our Service, you have the option to enable or disable location services using your device's settings.
4. Tracking & Cookies Data
We use cookies and similar tracking technologies to track the activity on our Service and we hold certain information.
Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags, and scripts to collect and track information and to improve and analyze our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
Examples of Cookies we use:
- Session Cookies: We use Session Cookies to operate our Service.
- Preference Cookies: We use Preference Cookies to remember your preferences and various settings.
- Security Cookies: We use Security Cookies for security purposes.
- Advertising Cookies: Advertising Cookies are used to serve you with advertisements that may be relevant to you and your interests.
We honor Global Privacy Control (GPC) signals where required by applicable law.
5. Use of Data
AI ReFounder uses the collected data to:
- fulfill the purpose for which you provide it;
- provide and maintain our Service;
- notify you about changes to our Service;
- allow you to participate in interactive features of our Service when you choose to do so;
- provide customer support;
- gather analysis or valuable information so that we can improve our Service;
- monitor the usage of our Service;
- detect, prevent, and address technical issues;
- carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
- provide you with notices about your account and/or subscription, including expiration and renewal notices, email-instructions, etc.;
- provide you with news, special offers, and general information about other goods, services, and events which we offer that are similar to those that you have already purchased or inquired about unless you have opted not to receive such information;
- in any other way we may describe when you provide the information;
- for any other purpose with your consent.
6. Retention of Data
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
Retention Criteria. We determine retention periods based on the nature of the data, the purposes for which it is processed, and legal requirements. Where feasible, we anonymize or aggregate data instead of retaining it in a form that identifies you. When data is no longer needed, it will be securely deleted or anonymized.
7. Transfer and Storage of Data
AI ReFounder is based in British Columbia, Canada. We store and process your information, including Personal Data, on servers located in the United States (AWS us-east-1 region). By using our Service, you acknowledge that your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For Canadian residents: Please be aware that personal information stored in the United States may be accessible to US government authorities, law enforcement, or national security agencies under applicable US laws (such as the USA PATRIOT Act or the CLOUD Act). We want you to understand this before providing your personal information.
Accountability. Regardless of where your data is stored, AI ReFounder remains responsible for its protection in accordance with applicable Canadian privacy laws, including PIPEDA and BC PIPA. We do not transfer personal information to third-party service providers without ensuring comparable safeguards are in place through contractual agreements, such as Data Processing Addendums (DPAs).
International Transfers & Safeguards. Where required by applicable law, we use safeguards such as Standard Contractual Clauses, Data Processing Addendums, and comparable mechanisms to protect personal information transferred across borders. This includes, where applicable, the UK International Data Transfer Agreement (IDTA) or other approved transfer mechanisms.
8. Disclosure of Data
We may disclose personal information that we collect, or you provide:
- if required to do so by law or in response to valid requests by public authorities.
- where we or our subsidiaries are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred.
We may disclose your information also:
- to our subsidiaries and affiliates;
- to fulfill the purpose for which you provide it;
- for any other purpose disclosed by us when you provide the information;
- with your consent in any other cases;
- if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.
Service Providers and Subprocessors. We engage third parties with confidentiality agreements and provide notice of material changes via our DPA. AI ReFounder may update its list of subprocessors and provide notice through its DPA.
9. Security of Data
While recognizing the importance of securing your data, we understand that no method of transmission over the Internet or method of electronic storage is 100% secure. Nevertheless, we will strive to use commercially acceptable means to protect your Personal Data, but we cannot guarantee its absolute security.
Incident Notifications. If we become aware of a data breach impacting Personal Data, we will notify affected parties and/or regulators without undue delay and in any event within the time periods required by applicable law. We implement administrative, technical, and physical safeguards consistent with industry standards (e.g., ISO 27001, SOC 2), where applicable.
10. E-mail Communications
From time to time, AI ReFounder may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. In order to improve our Services, we may receive a notification when you open an email from AI ReFounder or click on a link therein.
If you would like to stop receiving marketing or promotional communications via email from AI ReFounder, you may opt out of such communications by clicking "unsubscribe".
Transactional vs. Marketing. You cannot opt out of essential service-related communications.
11. Your Data Protection Rights Under Various Laws
11.1 General Data Protection Regulation (GDPR)
If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR.
We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data, and if you wish to be informed on what Personal Data we hold about you and you want same to be removed from our systems, please email us at info@airefounder.com.
In certain circumstances, you have the following data protection rights:
- the right to access, update or to delete your data on our site;
- the right to rectify your information if that information is inaccurate or incomplete;
- the right to object to the processing of your Personal Data;
- the right to request that the processing of your personal information is restricted;
- the right to request and be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format;
- the right to withdraw consent at any time where your consent is required to process any of your personal information;
Please note that we may ask you to verify your identity before responding to such requests as we may not be able to provide Service without some necessary data. We will respond to all data subject requests within the time periods required by applicable law (for example, within 30 days under the GDPR or 45 days under the CCPA/CPRA).
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).
Lawful Bases. We rely on contract, legitimate interests, consent, and legal obligations depending on the activity.
Children's Data. We do not knowingly collect Personal Data from children under 13 (or under 16 in the EEA) without appropriate consent. If we learn we have collected such data, we will delete it promptly.
11.2 California Privacy Protection Act (CalOPPA)
According to CalOPPA, we agree to the following:
- users can visit our site anonymously;
- our Privacy Policy link includes the word "Privacy", and can easily be found on the page specified above on the home page of our website;
- users will be notified of any privacy policy changes on our Privacy Policy Page;
- users can change their personal information by emailing us at info@airefounder.com.
Our Policy on "Do Not Track" Signals: When a "Do Not Track" browser feature is enabled, we respect the signals and don't track, install cookies, or employ advertising. You can tell websites that you do not want to be tracked by using the Do Not Track option on your web browser. Go to your browser's Preferences or Settings page to enable or disable Do Not Track.
11.3 California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
If you are a California resident, you are entitled to learn what data we collect about you, ask to delete your data and not to sell (share) it. To exercise your data protection rights, you can make certain requests and ask us:
What personal information we have about you. If you make this request, we will return to you:
- The categories of personal information we have collected about you.
- The categories of sources from which we collect your personal information.
- The business or commercial purpose for collecting or selling your personal information.
- The categories of third parties with whom we share personal information.
- The specific pieces of personal information we have collected about you.
- A list of categories of personal information that we have sold, along with the category of any other company we sold it to. If we have not sold your personal information, we will inform you of that fact.
- A list of categories of personal information that we have disclosed for a business purpose, along with the category of any other company we shared it with.
Please note, you are entitled to ask us to provide you with this information up to two times in a rolling twelve-month period. When you make this request, the information provided may be limited to the personal information we collected about you in the previous 12 months.
To delete your personal information. If you make this request, we shall remove from our records any personal information we have on file as of the request date and instruct any service providers to follow suit. De-identification of the information can sometimes be used to achieve deletion. However, you might not be able to utilize some features that depend on your personal information to work if you decide to remove it.
To stop selling your personal information. Your personal information is never sold to other parties for profit. However, in certain situations, a non-monetary transfer of personal data to a third party or another member of our family of businesses can be regarded by California law as a "sale."
We shall cease transferring your personal data if you request that we no longer sell it. If you live in California and would like to request that your personal information not be sold, send an email to info@airefounder.com with the subject "Do Not Sell My Personal Information".
Please be aware that requesting that we remove or cease selling your data may have an effect on how you interact with us and may prevent you from taking advantage of membership services or certain programs that depend on the use of your personal data. However, we would never treat you unfairly just because you're exercising your rights.
To exercise your California data protection rights described above, please send your request(s) to info@airefounder.com.
Your data protection rights, described above, are covered by the CCPA. To find out more, visit the official California Legislative Information website. The CCPA took effect on 01/01/2020.
CPRA Enhancements. We do not sell or share Personal Information for cross-context behavioral advertising. California residents may request correction of inaccurate PI, limit use of Sensitive PI, and opt out at any time. We do not use sensitive personal information beyond what is reasonably necessary to provide the Services.
11.4 Canadian Privacy Laws (PIPEDA and BC PIPA)
AI ReFounder is based in British Columbia, Canada. If you are a Canadian resident, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) at the federal level, and the Personal Information Protection Act (PIPA) of British Columbia for in-province commercial activities. BC PIPA has been deemed substantially similar to PIPEDA by the Government of Canada.
Under these laws, you have the following rights:
- Right to Access: You have the right to request access to the personal information we hold about you, including how it has been used and to whom it has been disclosed.
- Right to Correction: You have the right to request correction of any personal information that is inaccurate or incomplete.
- Right to Withdraw Consent: You may withdraw your consent for us to collect, use, or disclose your personal information at any time, subject to legal or contractual restrictions and upon reasonable notice. We will inform you of the implications of withdrawing consent.
- Right to Challenge Compliance: You have the right to challenge our compliance with these privacy laws. Complaints should be directed to our privacy contact at info@airefounder.com.
Our Obligations. In accordance with PIPEDA and BC PIPA, we:
- collect personal information only for purposes that a reasonable person would consider appropriate in the circumstances;
- obtain meaningful consent before collecting, using, or disclosing personal information;
- limit collection to what is necessary for the identified purposes;
- retain personal information only as long as necessary to fulfill those purposes;
- protect personal information with appropriate security safeguards;
- make our privacy policies and practices readily available upon request.
Response Timeframe. We will respond to access and correction requests within 30 days of receipt. If additional time is needed, we will notify you within the initial 30-day period and explain the reason for the delay.
Breach Notification. In the event of a privacy breach that creates a real risk of significant harm, we will notify affected individuals and the relevant Commissioner without unreasonable delay, as required by applicable law.
Filing a Complaint. If you are not satisfied with our response to your request or complaint, you may contact:
- Office of the Information and Privacy Commissioner for British Columbia (OIPC): www.oipc.bc.ca
- Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca
12. Service Providers
We may employ third party companies and individuals to facilitate our Service ("Service Providers"), provide Service on our behalf, perform Service-related services or assist us in analysing how our Service is used.
These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
You can request an up-to-date list of third-party Service Providers by emailing us at info@airefounder.com. We provide a non-comprehensive list of our Service Providers below.
A. Cloud Infrastructure & Hosting
We use third-party cloud infrastructure providers to store and process data on our behalf.
- Amazon Web Services (AWS): Our Service is hosted on AWS servers in the US East (us-east-1) region. AWS processes and stores data on our behalf under their Data Processing Addendum.
B. Voice AI Engine
We use a third-party voice AI platform to power our AI voice agent capabilities, including call handling, speech processing, and conversation management.
- Retell AI: Retell AI provides the underlying voice AI engine for our Service. When calls are processed, audio and conversation data may be transmitted to and processed by Retell AI on our behalf.
C. Analytics
We may use third-party Service Providers to monitor and analyze the use of our Service.
- Google Analytics: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic.
D. Payments
We provide paid products and/or services within Service. In that case, we use third-party services for payment processing (e.g. payment processors).
- Stripe: Their Privacy Policy can be viewed at stripe.com/us/privacy
E. Use of your Personal Information
AI ReFounder collects and uses your personal information to operate and deliver the services you have requested. AI ReFounder may also use your personally identifiable information to inform you of other products or services available from AI ReFounder and its affiliates.
F. Sharing Information with Third Parties
AI ReFounder does not sell, rent, or lease its customer lists to third parties. AI ReFounder may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to AI ReFounder, and they are required to maintain the confidentiality of your information.
AI ReFounder may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on AI ReFounder or the site; (b) protect and defend the rights or property of AI ReFounder; and/or (c) act under exigent circumstances to protect the personal safety of users of AI ReFounder, or the public.
13. Right to Deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
- Delete your personal information from our records; and
- Direct any service providers to delete your personal information from their records.
Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:
- Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
- Debug to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act;
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
- Comply with an existing legal obligation; or
- Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
14. Changes to this Statement
AI ReFounder reserves the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your account, by placing a prominent notice on our site, and/or by updating any privacy information.
Your continued use of the application and/or Services available after such modifications will constitute your: (a) acknowledgment of the modified Privacy Policy; and (b) agreement to abide and be bound by that Policy.
Where required by law, we will obtain your consent to material changes.
15. Contact Information
AI ReFounder welcomes your questions or comments regarding this Statement of Privacy. If you believe that AI ReFounder has not adhered to this Statement, please contact AI ReFounder at:
Privacy Contact: Privacy Officer
Email: ivan@airefounder.com
Location: British Columbia, Canada
This Privacy Policy shall be governed by and construed in accordance with the laws of the Province of British Columbia and the federal laws of Canada applicable therein, except where otherwise required by applicable law.