Legal

Privacy Policy

Last updated: May 19, 2026. This policy explains what data Animus AI collects, how we use it, how it is protected, and the third parties it may be shared with.

1. Who we are

Animus AI (“Animus”, “we”, “us”) is an AI consulting and software practice operated by Phillip Vo, based in Australia. This Privacy Policy governs the website www.ai-animus.com and the services offered through it. Questions about this policy can be sent to phillip@ai-animus.com.

2. Information we collect

We collect the following categories of information:

  • Contact details you provide — name, email address, company name, role, phone number, and any message content you submit through contact forms, scheduling links, or direct email.
  • Booking and meeting data — calendar events, meeting times, and attendee information when you schedule a call.
  • Authorised platform data — when a client engages us for a project, we may access data inside the client’s own platforms (e.g. Google Ads, Google Analytics, Klaviyo, Shopify, Meta Ads, HubSpot, Gorgias) only under written engagement and with the client’s explicit grant of access.
  • Technical data — IP address, browser type, device type, referring URL, pages viewed, and approximate location, collected via standard server logs and privacy-respecting analytics.
  • Cookies and similar technologies — we use a minimal set of strictly necessary cookies for site functionality and may use analytics cookies to measure aggregate visitor behaviour. You can disable cookies in your browser settings.

We do not knowingly collect data from children under 16. We do not collect biometric data or sensitive categories of personal information (race, religion, health) via this website.

3. How we use information

We use the information we collect to:

  • Respond to enquiries, schedule meetings, and deliver services you have requested.
  • Operate, maintain, and improve the website and the services we provide.
  • Send transactional and engagement-related communications (e.g. project updates).
  • Send marketing communications, only where you have opted in. You can unsubscribe at any time.
  • Detect, investigate, and prevent fraud, security incidents, and abuse.
  • Comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not use personal information to train third-party AI models without explicit consent.

4. How information is protected

  • Encryption in transit — all traffic to and from ai-animus.com is served over HTTPS/TLS.
  • Encryption at rest — data stored in our managed infrastructure providers (Vercel, GitHub, Google Workspace, Supabase) is encrypted at rest using provider-managed keys.
  • Access control — credentials and client platform tokens are stored in scoped secret stores. Access is restricted to the Animus principal and limited engagement-specific operators on a need-to-know basis. Multi-factor authentication is required for all administrative accounts.
  • Per-client isolation — client data is kept in per-client folders and repositories with no cross-client access. Strategies, exports, and proprietary material are never referenced across clients.
  • Retention — we retain personal information only as long as needed to deliver services and meet legal obligations, after which it is deleted or anonymised. Most prospect-stage data is deleted within 24 months of last contact.

5. Third parties we share with

We share personal information only with the categories of third parties listed below, and only to the extent needed to provide our services. Each provider is bound by their own privacy and security commitments.

  • Hosting and infrastructure — Vercel (site hosting and edge network), GitHub (source code), Supabase (managed database for authorised services).
  • Productivity and communications — Google Workspace (Gmail, Drive, Calendar, Meet) and Notion for internal collaboration and client correspondence.
  • AI providers — Anthropic and OpenAI may process content you submit through our services on our behalf, under their respective enterprise data-processing terms. Provider APIs are configured not to use customer data for model training.
  • Analytics and advertising platforms — where enabled, Google Analytics, Google Ads, and Meta Ads may receive standard event data (page views, conversions) for measurement and remarketing. We do not transmit personally identifiable information to advertising networks beyond what the platform itself collects from your browser.
  • Authorised client platforms — when a client engages us, we access only the platforms the client has explicitly authorised (e.g. Klaviyo, Shopify, Meta Ads Manager, Google Ads, HubSpot, Gorgias) and only for the purpose of the engagement.
  • Legal and compliance — we may disclose information if required by law, court order, or to protect the rights, property, or safety of Animus, our clients, or others.

We do not sell, rent, or trade personal information to third parties for their own marketing purposes.

6. International transfers

Animus is based in Australia. Our service providers operate in Australia, the United States, and the European Economic Area. Where personal information is transferred across borders, we rely on the standard contractual protections offered by those providers (e.g. Standard Contractual Clauses under EU GDPR).

7. Your rights and choices

Depending on where you live (Australia under the Privacy Act 1988, EU/UK under GDPR, California under CCPA/CPRA, and similar regimes), you may have rights to:

  • Access the personal information we hold about you.
  • Correct or update inaccurate information.
  • Request deletion of your personal information.
  • Object to or restrict certain types of processing.
  • Withdraw consent for marketing communications at any time.
  • Port your data to another provider in a machine-readable format.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email phillip@ai-animus.com. We respond to verified requests within 30 days.

8. Cookies and tracking

Strictly necessary cookies are used to operate the site (e.g. preserving session preferences). Analytics cookies, where enabled, are used in aggregate and do not identify individuals. You can disable or delete cookies in your browser settings; disabling necessary cookies may affect site functionality.

9. Third-party links

Our website may link to third-party sites (e.g. scheduling tools, social media profiles). Those sites are governed by their own privacy policies. We are not responsible for content or practices of sites we do not operate.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page reflects the latest revision. Material changes will be flagged on the website prior to taking effect.

11. Contact

For privacy questions, data access requests, or any concerns about this policy:
Phillip Vo, Animus AI
Email: phillip@ai-animus.com
Website: www.ai-animus.com