Your Privacy is Important to Us

Your privacy is crucial to us. AEOxoxo (a product of Swayful, LLC, referred to here as "we" or "AEOxoxo") has crafted this Privacy Policy (this "Policy") to enlighten visitors to the aeoxoxo.ai website (the "Site") and potential or prospective clients of AEOxoxo (collectively referred to in this Policy as "clients" or "you") about our practices in collecting, using, and disclosing personal data. In this Policy, we refer to the Site, our marketing engagements, and interactions you have with us as a potential or prospective client as the "AEOxoxo Services" or the "Services." If you are working with us under a signed engagement, additional terms may apply. Please refer to your agreement with AEOxoxo for any specific provisions related to privacy.

This Policy is incorporated into our Terms of Service. We may update this Policy occasionally, as specified in the "Changes to This Policy" section below.

Information We Collect

We collect your name and email address when you contact us, join a waiting list, book a call, or begin an engagement with us. The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide it. If you contact us directly, we may receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide. Furthermore, we gather information about your device and browser, such as your operating system, IP address, and the time of access. This information helps us optimize your experience and continuously improve our services.

We also track interactions and behavior on our Site through analytics tools to understand how our services are found and used. Cookies are used to keep the Site working and to measure that usage. These small text files help us recognize returning visitors.

Client Accounts and Systems We Access

Running your marketing means working inside the tools you already own. During an engagement you may grant us access to systems such as your analytics and search platforms (for example Google Analytics 4 and Google Search Console), your content management system (for example WordPress, Webflow, Ghost, Shopify, or HubSpot), your advertising accounts, and your CRM. Granting this access is always your choice, is scoped to what the engagement requires, and can be revoked by you at any time.

Where we hold authentication credentials for these systems (such as API keys or OAuth tokens), those credentials are encrypted at rest and are used solely to perform the work you have asked us to do. Data we retrieve from these systems — such as search queries, impressions, clicks, traffic, campaign performance, and page content — is used only to deliver the services you have engaged us for, and is retained for the duration of the engagement plus a 30-day grace period. You may request immediate deletion at any time by contacting us.

Use of Google User Data (Limited Use)

Where an engagement involves access to your Google accounts, our use and transfer of Google API data strictly adheres to the Google API Services User Data Policy (Limited Use requirements). We use this data solely to provide the services you have requested and do not sell or transfer this information except as necessary to provide the service, comply with legal obligations, or in the event of a merger or acquisition. We do not use this data for advertising purposes.

Use of Third-Party Services

To provide our AI-assisted marketing services, AEOxoxo utilizes the following categories of third-party service providers:

AI Language Models: We use AI services including OpenAI (GPT models), Anthropic (Claude), and Google (Gemini) to process queries and generate content. Your prompts and relevant context may be transmitted to these services to provide you with accurate and relevant results.

Cloud Infrastructure: Our services are hosted on Amazon Web Services (AWS) and Supabase, which provide secure cloud computing and database services.

Payment Processing: We use Stripe to process payments securely. Stripe handles all payment card information directly and we do not store your full payment card details.

Analytics: We use analytics tools to understand how our Site is used and to improve our services.

Communication Services: We use email service providers to send transactional emails such as engagement notifications and invitations.

Website Visitor Identification: We use a third-party visitor identification service to recognize businesses and individuals who visit our Site, so that we can tailor our outreach and marketing. See the "Website Visitor Identification" section below for details and how to opt out.

Website Visitor Identification

When you visit our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.

Data Storage and Retention

We retain your information and associated data for as long as your engagement with us is active. When an engagement ends:

• Access to your connected systems is revoked
• Data retrieved from those systems is retained for 30 days, then permanently deleted
• You may request immediate deletion by contacting us

Working conversations and chat content are not permanently stored on our servers.

Location of Collected Data

The data we collect is stored and processed in the United States. Our primary infrastructure is hosted on Amazon Web Services (AWS) in the US-East region, with database services provided by Supabase (US-West region). By using our Services, you consent to the transfer and processing of your data in the United States. We are committed to protecting your data as described in this Policy, regardless of where it is located.

Security of Collected Data

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest using industry-standard encryption
• Secure authentication mechanisms including OAuth 2.0 and JWT tokens
• Role-based access controls limiting data access to authorized personnel
• Regular security monitoring and incident response procedures

Access to production systems is restricted to essential personnel only. We maintain audit logs and use automated monitoring tools to detect and respond to potential security incidents.

Your Rights

You have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you
• Correction: You may request that we correct inaccurate personal data
• Deletion: You may request deletion of your personal data by contacting us
• Data Portability: You may request an export of your data in a machine-readable format
• Withdrawal of Consent: You may revoke our access to your systems or end your engagement at any time

To exercise any of these rights, please contact us at hello@aeoxoxo.ai. We will respond to your request within 30 days.

International Data Transfers

As our services are hosted in the United States, your data may be transferred to and processed in the United States. We are committed to ensuring appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. For clients requiring specific data protection agreements, please contact us to discuss a data processing agreement.

Changes to This Policy

We may revise this Policy from time to time to reflect changes in our services, how we use personal data, or applicable laws. The updated Policy will include a "Last Updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of our website and services after any changes to this Policy will constitute your acceptance of such changes.

Contacting Us

If you have any questions, complaints, or concerns about how your information is handled, or if you wish to exercise any of your data protection rights, please contact us at hello@aeoxoxo.ai. We are committed to addressing any issues or queries you may have.