Privacy Policy

Last updated: July 9, 2026

Giir AI ("we", "us", "our") operates the website giirai.com. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

1. Information we collect

• Contact details you submit — name, email, company, and project description you enter into our contact or "Get Started" forms.
• Automatic data — IP address, browser type, device, pages viewed, referring URL, and UTM campaign parameters, collected via cookies and analytics tools.
• Account data — if you create an account, we store your email, name, and authentication identifiers.

2. How we use your information

• To respond to inquiries and provide the services you request.
• To measure and improve website performance and marketing campaigns.
• To comply with legal obligations.

We do not sell your personal information.

3. Cookies, analytics, and advertising

We use the following tracking tools. All non-essential cookies require your consent, which you can accept or reject via the cookie banner. See our Cookie Policy for details.

• Google Analytics 4 — website usage measurement.
• Google Ads — measuring ad-campaign performance and conversions.
• Meta (Facebook) Pixel — measuring ad-campaign performance on Meta platforms.

We support Google Consent Mode v2: until you accept, ad and analytics storage are set to denied.

4. Sharing

We share personal information only with:

• Service providers who host our infrastructure, database, email, and analytics (bound by data-processing agreements).
• Advertising platforms (Google, Meta) for measurement purposes, subject to your consent.
• Authorities when legally required.

5. Data retention

We retain contact-form submissions for up to 24 months after last activity, account data for the life of your account, and analytics data per the analytics provider's default retention (Google Analytics: 14 months).

6. Your rights

You may request access, correction, deletion, or a copy of your personal data by emailing info@giirai.com. Residents of the EU/UK have rights under GDPR; residents of California have rights under CCPA/CPRA. We will respond within 30 days.

7. Security

We use HTTPS, encrypted database storage, role-based access control, and least-privilege service credentials. No system is 100% secure — please use a strong, unique password.

8. Children

Our services are not directed to children under 13, and we do not knowingly collect data from them.

9. International transfers

We are based in the United States. If you access the site from outside the US, your information may be transferred to and processed in the US.

10. Changes

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.

11. Contact