LEGAL · DATA HANDLING
Privacy Policy
Your data is your data. Universal Tech Inc. (operating under the promotional brand name AI AutoMationNY) collects the minimum needed to deliver our services, we never sell it, and we never train AI on it. This policy explains exactly what we collect, what we do with it, and how to delete it. Universal Tech Inc. is the data controller for all data collected through this website.
1. What we collect
Universal Tech Inc. (operating under the promotional brand name AI AutoMationNY) collects only the information you give us directly — name, email, company name, business type, budget range, and any details you share in your audit-request message. If you book a call, we collect the date and time you selected.
We also collect basic analytics (page views, referrers) via privacy-respecting tools. We do not use third-party advertising trackers, and we never sell your data to anyone.
2. How we use your data
We use your data to:
- Respond to your audit request (typically within 1 business hour)
- Send you audit preparation materials (one-time, before your call)
- Send you the one-page opportunity map from your audit (yours to keep)
- Send occasional follow-up emails (1–2 per month max, with an unsubscribe link in every email)
- Improve our website and services based on aggregated, anonymized usage data
3. We never train AI on your data
When you engage Universal Tech Inc. (through the AI AutoMationNY website) to build a custom AI agent, that agent runs in your environment — your OpenAI / Anthropic / Azure account. We use no-training APIs (which guarantee your prompts and data are never used to train foundation models).
Any documents, prompts, or data you share with us during an engagement are stored in your environment or in a HIPAA / SOC 2-compliant storage location we control with a signed BAA / DPA in place. We never use your data to train our own systems.
4. Who we share data with
We share your data only with:
- Our internal team (engineers and account managers who need access to do the work)
- Our infrastructure providers (Vercel, Anthropic, OpenAI, Google Workspace) — all under DPAs
- Legal / regulatory authorities if compelled by valid legal process (we will challenge overly broad requests)
- Your data is never sold, rented, or traded to third parties. Ever.
5. Data retention
We retain audit-request data for 12 months (in case you want to come back). Engagement data is retained for the duration of the engagement + 6 months, then deleted (unless you ask us to keep it longer).
You can request deletion of your data at any time by emailing hello@aiautomationny.com. We will delete your data within 30 days and confirm by email.
6. Security
We follow industry best practices: encrypted data in transit (TLS 1.2+) and at rest (AES-256), scoped access controls, audit logs, and quarterly security reviews. For HIPAA / SOC 2 engagements, we sign BAAs and operate within your compliance boundary.
If we become aware of a data breach affecting your information, we will notify you within 72 hours and provide a clear description of what happened, what data was affected, and what we're doing about it.
7. Your rights
You have the right to:
- Access: request a copy of all data we hold about you
- Correction: ask us to fix inaccurate data
- Deletion: ask us to delete your data (subject to legal retention requirements)
- Portability: receive your data in a machine-readable format
- Objection: ask us to stop processing your data for specific purposes
- Withdrawal of consent: unsubscribe from any email at any time (link in every email)
8. Cookies & analytics
We use minimal first-party cookies for analytics (page views, referrers). We do not use third-party advertising cookies (no Google Ads, no Facebook Pixel). We use privacy-respecting analytics that don't track you across other websites.
You can disable cookies in your browser; our website will continue to function normally.
9. Children's privacy
Our services are for businesses, not individuals under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us and we will delete it immediately.
10. Changes to this policy
We may update this policy from time to time. We'll post the updated version here and update the 'Last updated' date at the top. For material changes (new data uses, new sharing partners), we'll notify you by email at least 30 days before the change takes effect.
11. Contact
Questions about this policy? Email hello@aiautomationny.com or call +1 718-500-2221. Universal Tech Inc. is the data controller for all data collected through this website. All legal correspondence should be directed to Universal Tech Inc. at 37-07 74th Street, Suite 8 (3rd FL), Jackson Heights, NY 11372. We'll respond within 1 business day.
Questions?
Have a privacy question?
Email us at hello@aiautomationny.com or book a quick call. We'll answer any data-handling question before you engage us — no sales pitch required.
