Privacy Policy

1. Overview & Commitment to Data Privacy

At Aim High("Aim High," "we," "us," or "our"), respecting and protecting the privacy of our clients and site visitors is a foundational pillar of our business. This Privacy Policy outlines how we collect, use, protect, and handle your personal information and business operational data across our website, AI voice agents, chatbots, workflow automations, and digital marketing pipelines.

We operate under a simple rule: your data is your data. We prioritize trust, transparency, and high-standard security protocols across every custom implementation.

2. Information We Collect

We collect information to provide, maintain, and improve our AI automation services:

• Information You Provide Directly: Name, business email address, phone number, company name, form submissions, discovery consultation notes, and payment/billing details.
• Client Operational & Integration Data: When we build custom AI voice bots, chatbots, or CRM automations, we process business data (e.g., product FAQs, support docs, calendar availability, contact lists) strictly as authorized by you to fulfill your system requirements.
• Automated Technical Data: Standard web analytics including device IP addresses, browser types, operating systems, referring URLs, and page navigation patterns collected via cookies or web beacons.

3. How We Use Information & AI Privacy Options

We utilize collected information strictly to:

• Develop, deploy, test, monitor, and optimize your custom AI voice agents, chatbots, websites, and marketing workflows.
• Provide ongoing client support, performance reporting, and quality oversight.
• Process transactions, billing invoices, and pass-through AI usage credits.

Strict Confidentiality & Access Controls:Active customer data, system credentials, and operational logs are strictly confidential. This data can only be accessed by authorized Aim High personnel for the sole purpose of service delivery, monitoring, and quality oversight. Under no circumstances will any external entities, individuals, or third parties outside of Aim High be granted access to a current customer's data or integrations.

Enhanced AI Privacy & Local Model Options: For clients with heightened privacy requirements, we offer specialized infrastructure choices:

• On-Premise Installations: Deploying automations directly onto your local business hardware so data remains within your physical devices.
• Local Language Models: Running local open-source LLMs that process requests entirely within your private environment without transmitting data to external AI servers.
• VPS Tunneling: Hosting AI personal assistants on Virtual Private Servers (VPS) protected by encrypted VPN tunnels.
• SOC 2 & HIPAA Tool Alignment: Utilizing third-party toolings and cloud infrastructure that conform to SOC 2 and HIPAA security standards (pursuant to 45 C.F.R. Parts 160/164).

4. Zero Data Selling & A2P 10DLC Mobile Privacy Protection

Strict No-Selling Guarantee: Aim High does NOT sell, rent, trade, lease, or monetize your personal information, business data, or customer lists to third-party data brokers, advertisers, or marketers under any circumstances.

A2P 10DLC Mobile Messaging Carrier Compliance: In strict compliance with mobile network carrier regulations (Twilio, Telnyx, CTIA guidelines, and US A2P 10DLC standards):

5. Post-Cancellation Data Access Termination & Data Purge

We respect your data boundary when a business relationship concludes:

• Complete Access Revocation: Upon cancellation, non-renewal, or agreement termination, Aim High immediately disconnects all system API connections, revokes administrative credentials, and closes active data pipelines.
• Zero Post-Cancellation Access: Aim High retains zero ongoing access to your internal business tools, CRM records, customer databases, or live automation systems.
• Data Purging: Any hosted transient caches, temporary execution logs, or vector index copies stored on Aim High servers are permanently deleted within thirty (30) days of cancellation in accordance with our data retention schedules.

6. Third-Party Service Processors

To deliver high-performance automations, we integrate with vetted third-party service providers (e.g., foundation LLM providers like OpenAI, Anthropic, or Google; telephony networks like Twilio; cloud platforms like Cloudflare or Vercel).

These processors handle data solely as required to execute your API calls and services. We ensure all third-party integrations maintain robust encryption and strict privacy policies.

7. Data Security & Encryption Standards

We employ industry-standard technical and organizational security measures to protect your data against unauthorized access, disclosure, alteration, or destruction:

• TLS/SSL encryption for all data in transit across web interfaces and APIs.
• AES-256 bit encryption for sensitive database credentials at rest.
• Role-based access controls and encrypted VPN tunneling for remote infrastructure management.

8. Statutory Consumer Rights & Opt-Out Instructions

Depending on your location, you hold statutory rights regarding your personal information under the Florida Digital Bill of Rights (FDBR, Fla. Stat. § 501.701 et seq.) and federal privacy frameworks:

• Right to Access & Correction: You may request a copy of the personal information we hold about you or request corrections to inaccurate data.
• Right to Deletion: You may request that we delete your personal contact information from our records, subject to legal recordkeeping exemptions.
• SMS Opt-Out (TCPA, 47 U.S.C. § 227): You may opt out of receiving text messages at any time by replying STOP to any SMS message.
• Email Opt-Out (CAN-SPAM Act, 15 U.S.C. § 7701): You may unsubscribe from commercial emails at any time by clicking the "Unsubscribe" link in the footer of any marketing email.

9. Children's Privacy Protection

Our website and AI services are directed strictly to businesses and adult individuals (aged 18 and older). We do not knowingly collect or solicit personal information from children under the age of 13 in compliance with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501 et seq.). If we learn we have collected data from a child under 13, we will delete it immediately.

10. Changes to This Privacy Policy

Aim High reserves the right to update this Privacy Policy periodically to reflect technological advancements, operational changes, or legal updates. Any revisions will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

11. Contact Information & Data Privacy Requests

If you have any questions, opt-out requests, or data privacy inquiries regarding this Privacy Policy, please contact us directly: