Privacy Policy

Effective.AI is operated by Tony Xia, Hamilton, New Zealand. Contact: effective.ai.sil@gmail.com

What we collect

We collect personal information directly from you when you submit the prospect screening form on this website. This may include your name, business name and industry, contact email, and your responses to screening questions.

We do not use advertising cookies, tracking pixels, or cross-site tracking. The only passive processing on this site is the bot-protection check described under “Bot protection” below, and cookieless analytics described under “Analytics”.

Why we collect it

We collect this information to assess whether our services are a good fit for your business, contact you to discuss your requirements, and manage our client relationships. Providing this information is voluntary. If you choose not to submit the form, we are unable to assess your enquiry or make contact.

Who receives your information

Your information is handled by Tony Xia (Effective.AI) as the data controller and sole operator, and by the following service providers acting as data processors:

• Supabase, cloud database service. Data is stored in Sydney, Australia (AWS ap-southeast-2), under a signed Data Processing Agreement.
• Vercel, website hosting and serverless functions. Form submissions pass through Vercel infrastructure including US-based servers, under a Data Processing Agreement.
• Cloudflare, bot-protection service (see “Bot protection” below). Processes technical signals when you complete the verification on the enquiry form. Cloudflare operates globally, including US-based servers, under its standard data processing terms.

We do not sell, rent, or share your personal information with any other third parties.

Bot protection

The enquiry form uses Cloudflare Turnstile to confirm submissions come from a person and not an automated script. When the check runs, Cloudflare processes technical information from your browser, such as your IP address, browser and device characteristics, and interaction signals, to score whether the request is likely automated. This is used only to protect the form from abuse. It does not build an advertising profile and is not used to track you across other websites. Turnstile is designed to minimise data collection and, in its managed mode, may set a short-lived challenge token in your browser for this purpose.

Cross-border data transfers

Your personal information may be processed or stored in Australia and the United States through our use of Supabase, Vercel, and Cloudflare. These providers operate under data processing terms incorporating appropriate contractual safeguards, consistent with our obligations under the Privacy Act 2020 (NZ).

Analytics

This website uses Vercel Analytics, a cookieless analytics service. It does not set cookies on your device, does not collect personally identifiable information, and does not perform cross-site tracking. Visitor identification uses a 24-hour hash that is discarded daily.

How long we keep your information

We retain prospect information for up to 12 months from the date of collection, or for the duration of our client relationship, whichever is longer. Client records are retained for 7 years to meet standard business record-keeping obligations.

Your rights

Under the Privacy Act 2020, you have the right to access the personal information we hold about you, correct any inaccurate information, and request deletion (subject to legal retention obligations). Contact us at effective.ai.sil@gmail.com to exercise these rights. We will respond within 20 working days.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz.

Contact

Tony Xia, Privacy Officer
Effective.AI, Hamilton, New Zealand
effective.ai.sil@gmail.com

This policy is governed by the Privacy Act 2020 (New Zealand).