This Privacy Policy explains what information we collect through this website and through our advisory engagements, how we use it, who we share it with, and the choices you have. We keep it in plain English on purpose — we advise businesses on data exposure for a living, and it would be strange to hide our own practices behind legal fog.

Who we are

Aegis AI Advisory is a registered assumed name (DBA) of I Am Your Geek LLC, a Michigan limited liability company. I Am Your Geek LLC is the legal entity responsible for this website and for the services delivered under the Aegis AI Advisory brand, and it is the data controller for the information described in this policy.

Throughout this policy, "we," "us," and "our" refer to I Am Your Geek LLC doing business as Aegis AI Advisory.

Information we collect

Information you give us directly

  • Contact form. When you submit the contact form on this site, we collect the name, email address, and message you enter.
  • Booking a call. When you book an introductory call, you provide your name, email address, and any details you add to the booking form. Scheduling is handled by Calendly.
  • Email and phone. If you contact us directly, we receive whatever information you choose to include in that correspondence.
  • Resource downloads and purchases. If you download a guide or purchase a resource through our Gumroad storefront, Gumroad collects your transaction and contact details under its own privacy policy. We receive order and customer information from Gumroad.

The demonstration AI phone agent

We publish a demonstration AI voice agent at (938) 300-2270. It is a working sample of the kind of agent we build for clients, and it is open for anyone to try.

You are talking to an AI, not to a person. We say so on the website and the agent identifies itself as an AI. Here is what that call involves:

  • Your phone number is transmitted to us as part of the call, as with any phone call.
  • The conversation is processed by a third-party voice AI platform in order to understand you and respond. Calls may be recorded and transcribed so that we can review and improve the agent.
  • If you ask the agent to schedule a meeting, it collects the details needed to book it — typically your name, email address, and preferred time — and creates a real appointment on our calendar.
  • We may review call recordings and transcripts to evaluate how the agent performed.

Please do not share sensitive information with the demonstration agent — account numbers, passwords, health or financial details, or confidential business material. It is a demo line, not an intake channel. If you have something confidential to discuss, email us or book a call with a human instead.

You can ask us to delete a recording or transcript of your call at any time, and we will.

Information collected during a client engagement

If you engage us for an assessment, implementation, governance, or advisory project, we will necessarily learn things about your organization — the AI tools in use, how work flows through your business, where sensitive data lives, and the risk posture we are hired to evaluate. This may include employee names and roles, tool inventories, policy documents, screenshots, and other material you provide or authorize us to gather.

We treat all of it as confidential. We use it only to deliver the engagement you hired us for. We do not sell it, publish it, or disclose client-specific findings without your prior written consent. This mirrors the confidentiality obligations in our service agreement, and where that agreement is more protective than this policy, the agreement governs.

Information collected automatically

  • Server logs. Vercel, our hosting provider, records standard technical information when a page is requested — IP address, browser and device type, referring page, and timestamp. These logs are used for security and reliability, not for profiling visitors.
  • Page-view analytics. We use Vercel Web Analytics to count page views and see which pages people actually find useful. It is cookieless: nothing is stored on your device, and no identifier follows you to other sites. Visits are counted using a hash derived from the incoming request, and the salt behind that hash is rotated daily, so visitors cannot be linked from one day to the next. Your IP address is used to derive an approximate country and is not stored. What we see is aggregate — page, referrer, country, browser, device type — never an individual.
  • Performance measurement. We also use Vercel Speed Insights, which records how quickly pages actually load and respond for real visitors — timings such as how long the main content takes to appear and how promptly the page reacts to a first interaction. It is likewise cookieless and stores nothing on your device. It reports timings tied to a page address, not to a person, and we use it only to find and fix slow pages.
  • Optional Google Analytics. Only after you select Allow analytics, we load Google Analytics 4 to measure page views, traffic sources, basic browser/device information, engagement, clicks to the free guide or briefing/calendar, and successfully submitted inquiries. Google Analytics uses first-party cookies containing pseudonymous identifiers to distinguish visits. We configure these cookies to expire after 90 days without extending their expiry on each visit. Advertising storage, advertising personalization, Google signals and enhanced conversions are disabled. We do not send contact-form values, service-selector answers, arbitrary URL query values, or URL fragments to Google Analytics. Page addresses use our public canonical URLs; referring addresses are reduced to their origin, and only a fixed list of non-personal campaign labels is forwarded. A link click is not treated as a completed download, booking, purchase or sale.
  • Analytics preference. When you allow or decline Google Analytics, we save that choice and its date in your browser's local storage for up to 180 days, then ask again. This preference is not an identifier and is not sent to us. If your browser cannot save an opt-in, Google Analytics stays off. Cookieless Vercel measurement is separate and continues when you decline Google Analytics.
  • Theme preference. If you use the light/dark theme control, your browser saves that choice in local storage so it can be remembered on future visits. We save this preference only after you change it. It remains until you change it again or clear this site's browser storage; it is not sent to us or used to identify you.
  • Session storage. If you dismiss the booking reminder at the bottom of the page, your browser stores a single flag so it stays dismissed for the rest of your visit. It is cleared when you close the tab, it never leaves your device, and it identifies nothing about you.
  • Service selector. Answers in the homepage's service selector are processed in your browser to show a suggested next step. They are not submitted to us, saved by the selector, or sent to analytics. Contacting us or booking a call is a separate action.

What we do not do

This is the short section, and we would like to keep it that way:

  • We do not run advertising pixels, enable advertising personalization, or use analytics to build advertising audiences.
  • We do not load Google Analytics or set its analytics cookies before you opt in. Declining leaves the site fully usable.
  • We do not sell, rent, or trade your personal information to anyone, for any purpose.
  • We do not use client engagement data to train AI models, and we do not feed client-identifying material into third-party AI tools without your explicit authorization.
  • We do not add you to a marketing list because you filled out the contact form. If we email you, it is a reply.

How we use information

We use the information described above only to:

  • Respond to your inquiry and schedule conversations you have requested
  • Scope, price, deliver, and support the services you engage us for
  • Produce the deliverables you have contracted for, such as risk reports and action plans
  • Send transactional messages related to an active engagement — scheduling, invoices, and deliverables
  • Keep records required for accounting, tax, and legal purposes
  • Maintain the security and integrity of this website
  • Understand which pages and resources are useful, measure inquiries, and improve the website using the analytics choices described above

Service providers we rely on

We keep our vendor list deliberately short. Each of these providers processes a narrow slice of information on our behalf, under its own privacy policy:

  • Formspree — receives and forwards contact form submissions.
  • Calendly — handles scheduling for introductory and client calls.
  • Our voice AI and telephony provider — carries and processes calls to the demonstration agent, including speech recognition, response generation, and any recording or transcription.
  • Gumroad — delivers downloadable resources and processes optional contributions and purchases.
  • Fontshare — serves the typefaces used on this site. Loading a font sends your IP address and browser details to Fontshare.
  • Vercel — hosts and serves this site, maintains server logs, and provides the cookieless page-view analytics and performance measurement described above.
  • Google — provides the optional Google Analytics service when you opt in. Google processes technical and pseudonymous usage information, which may be processed outside your country. See how Google uses information from sites that use its services.
  • Payment and accounting providers — process invoices and payments for client engagements.

We do not authorize any of these providers to use your information for their own marketing.

When we disclose information

We disclose personal or client information only in these situations:

  • With your consent, or at your direction.
  • To the service providers listed above, limited to what each one needs to perform its function.
  • When required by law — in response to a valid subpoena, court order, or other legal obligation. Where we are permitted to notify you first, we will.
  • To protect rights and safety, where disclosure is necessary to investigate fraud, enforce our agreements, or protect against imminent harm.
  • In a business transfer, if I Am Your Geek LLC is involved in a merger, acquisition, or sale of assets. Any successor would be bound by this policy for information received in that transfer.

How long we keep information

  • Contact form and inquiry messages: retained while a conversation is active and for a reasonable period afterward, then deleted.
  • Client engagement records and deliverables: retained for the duration of the engagement and afterward as needed for our professional records and legal obligations — typically up to seven years for contract, tax, and accounting purposes.
  • Raw client source material such as exports, screenshots, and tool inventories: deleted or returned once the engagement is complete and the deliverables are accepted, unless you ask us in writing to retain it.
  • Demonstration agent calls: recordings and transcripts are kept only as long as they are useful for improving the agent, and are deleted on request.
  • Server logs: retained on Vercel's standard rolling schedule.
  • Google Analytics: the property's retention settings are two months for event-level data and 14 months for user-level data, with the user-level period renewed on new activity. Aggregated reports may remain longer. Cookie expiry and withdrawing consent do not remove information already collected.

If you would like your information deleted sooner, ask us. We will honor the request except where we are required to keep a record.

How we protect information

We apply the same practices we recommend to clients: access limited to those who need it, multi-factor authentication on business accounts, encrypted transport for this website and for file exchange, encrypted storage for client material, and vendor review before a new tool touches client data. No method of transmission or storage is perfectly secure, and we do not claim otherwise — but we do not ask clients to meet a standard we are unwilling to meet ourselves.

Your choices and rights

Your analytics choice

Use Analytics settings in the footer of any page to allow or decline Google Analytics. You can withdraw consent at any time. Declining after opting in stops collection, removes this site's Google Analytics cookies, and reloads open Aegis pages; finish any unsent messages, including in other tabs, first. Your choice applies to this browser, not other devices. Withdrawing consent does not automatically delete data already received by Google. You can also clear your browser's cookies and local storage or use Google's Analytics opt-out browser add-on. Contact us if you have a question about previously collected information.

Whatever jurisdiction you are in, you may contact us at dan@aegisaiadvisory.com to:

  • Ask what personal information we hold about you
  • Request a correction to inaccurate information
  • Request deletion of your information
  • Ask us to stop contacting you

We will respond within 30 days. We will not charge you for a reasonable request, and we will not treat you differently for making one.

Residents of jurisdictions with specific privacy statutes — including California, and the EU and UK under the GDPR — may have additional rights, such as data portability, the right to object to certain processing, and the right to lodge a complaint with a supervisory authority. We extend the core rights listed above to everyone who asks, regardless of where they live. Because we do not sell personal information, there is no sale to opt out of.

Children's privacy

This website and our services are directed to businesses and the people who run them. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Links to other sites

This site links to external resources, including Calendly, Gumroad, YouTube, and LinkedIn. Once you follow a link off this site, this policy no longer applies — the destination's own privacy practices govern.

Changes to this policy

We will update this policy when our practices change. The effective date at the top of the page always reflects the current version. If a change materially affects how we handle information about you, we will make that clear rather than quietly revising the text.

Contact us

Questions about this policy, or about how we handle information in an engagement, go to a person, not a ticket queue: