Privacy Policy

Virgent AI ("we", "us") operates virgent.ai, a marketing and lead-generation site for our AI consulting services. This policy describes the personal information we collect on this site, why we collect it, who we share it with, and how you can exercise your rights. It covers the public website, demos, chat, forms, email, and paid checkout. Client engagements are governed by the contract for that work (MSA, SOW, or BAA), not this page.

Controller: Virgent AI, PO Box 56, Harwood, MD 20776, United States. Email: hello@virgent.ai. Phone: +1 (443) 214-3143.

Information we collect

You provide

• Contact and lead forms: name, work email, phone number, company, role, message, buying situation, and optional trigger.
• Email subscribe and lead-magnet popups: email address and the situation you select.
• Site chat: messages you type, plus name and email if you ask for a follow-up.
• Careers and join-team applications: name, email, phone, role interest, LinkedIn, pitch, and resume files.
• Booking and checkout: name, email, and payment details handled by Stripe (we do not store full card numbers).
• Demo tools: whatever you paste or upload into a demo (for example a resume in a recruiting demo, or RFP text).

Collected automatically

• IP address, approximate country, user-agent, path, and referrer for security, abuse prevention, and visitor logs.
• First-party session identifiers and form-abuse counters.
• Campaign attribution (UTM parameters, Google click IDs such as gclid, landing page) when present in the URL, stored for the session and, if you allow advertising cookies, for up to 90 days.
• Cookie and similar storage described in our Cookie Policy.

From vendors

Payment status from Stripe. Booking details from Cal.com after you schedule. Bot-protection scores from Cloudflare Turnstile or Google reCAPTCHA when those are enabled. IP reputation on honeypot/abuse paths (AbuseIPDB and similar).

How we use it

• Respond to inquiries, qualify fit, and schedule calls.
• Send requested resources and, if you subscribe, occasional email about our work. You can unsubscribe at any time.
• Call you on the number you give us about that inquiry. We do not send marketing SMS unless you separately agree.
• Process payments and send receipts.
• Operate site chat and demos, including sending prompts to model providers.
• Review job applications.
• Secure the site (rate limits, honeypots, blocked IPs, malware scanning of uploads).
• Measure site performance and advertising, only with analytics or advertising consent where those cookies are not essential.
• Keep business records and comply with law.

If you are in the UK or EEA, we rely on: steps needed to answer a request or perform a contract; legitimate interests in B2B sales, security, and running a consulting practice; and consent for non-essential cookies and for email that is not a direct response to your request.

Cookies and advertising

Essential cookies run the site (session, security, cookie choice). Google Tag Manager, Google Analytics 4, Google Ads (including enhanced conversions that may send hashed email or phone to Google), and Vercel Analytics / Speed Insights run only after you accept the relevant category in our cookie banner. You can change that in Cookie settings in the footer or on the Cookie Policy. See that page for names and retention.

We do not sell personal information for money. If you allow advertising cookies, we share identifiers and conversion events with Google for ads measurement and, in some cases, hashed email or phone as enhanced conversions. Some privacy laws treat that as sharing for advertising. You can refuse advertising cookies. California residents can also email us to opt out of sharing for cross-context advertising.

Service providers

We use vendors to operate the site. They process data on our instructions:

• Vercel: hosting, database, analytics, speed insights, and geolocation headers.
• Google: Tag Manager, Analytics, Ads, and optional reCAPTCHA.
• Stripe: payments.
• Resend: transactional and requested marketing email, plus our subscriber audience.
• Cal.com: appointment booking.
• Together AI and OpenAI: model inference for chat, lead scoring, demos, and application review.
• Peak (peake.ai): inbound CRM for leads.
• Cloudflare: Turnstile bot checks when configured.
• AbuseIPDB and IP lookup services on abuse/honeypot paths.

These providers may process data in the United States. If we transfer EEA/UK data to the US, we rely on the vendor contracts and transfer tools those vendors offer (for example Standard Contractual Clauses).

AI chat and demos

The site agent (Katie) is an AI system, not a human. Welcome copy and the widget identify it as an AI agent. Messages may be stored in your browser (localStorage), analyzed on our servers, and sent to model providers to generate a reply. If you give a name and email in chat, we may email our team a summary so a human can follow up. Demo inputs can be sent to the same model providers. Do not paste secrets, health information, or other sensitive third-party data into public demos.

Output from chat and demos is informational. It is not legal, medical, financial, or engineering advice and is not a substitute for a signed engagement.

How long we keep it

• Active leads and correspondence: for the business relationship and typical US business-record periods (generally up to 7 years) unless you ask us to delete sooner and we are not required to keep it.
• Email subscribers: until you unsubscribe, plus a suppression record so we do not email you again.
• Chat analyses and visitor/security logs: generally up to 24 months, longer if needed to investigate abuse.
• Resumes: for the hiring process and up to 24 months unless you ask us to delete them.
• Payment records: as required for tax and accounting, via Stripe.

Your choices and rights

• Access, correction, or deletion: email hello@virgent.ai.
• Email: unsubscribe or use the link in every marketing email.
• Cookies: reject non-essential cookies or open Cookie settings.
• EEA/UK: you may also object, restrict, or withdraw consent, and you may complain to your local supervisory authority (for example the ICO or the Irish DPC).
• California / similar US state laws, if they apply to you: you may request access, deletion, and to opt out of sale or sharing. We will not discriminate against you for exercising those rights.

We will need enough information to find your records (usually the email you used). We may decline requests that are unfounded, excessive, or that would break a legal hold.

Children

This site is for business customers and job applicants. It is not directed at children under 18, and we do not knowingly collect personal information from children. If you believe a child submitted data, email us and we will delete it.

Security

We use HTTPS, access control, and provider encryption in transit and at rest. No method of transmission or storage is perfectly secure. We do not currently claim SOC 2 attestation. Current controls are on our Security page.

Do not track

The site does not respond to browser Do Not Track signals. Use the cookie banner to control analytics and advertising cookies.

Changes

We will post updates on this page and change the date above. If we make a material change to how we use personal information, we will note it here.