Privacy Policy

Introduction

GoravAI ("we", "us", or "our") is an AI agency based in Hyderabad, Sindh, Pakistan, specialising in AI agent development, business automation systems, and custom AI software development. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner.

This Privacy Policy explains what information we collect from you when you visit our website, contact us, or use our services. It also describes how we use that information, who we share it with, and the choices you have regarding your data.

Information We Collect

We collect different types of information depending on how you interact with us. This falls into two main categories:

AI Agent & Automation Data: If you engage us to build an AI agent or automation system for your business, we may process data on your behalf as part of the service delivery. This is governed by our service agreement and any data processing addendum we sign with you.

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To understand your requirements, design solutions, build AI agents, set up automation workflows, and develop custom software.
• Communication: To respond to your enquiries, send project updates, schedule calls, and provide customer support via WhatsApp, email, or phone.
• Hosting & Maintenance: To host and maintain the AI agents and automation systems we build for you, ensuring they run reliably 24/7.
• Improvement: To analyse how visitors use our website so we can improve content, user experience, and service offerings.
• Marketing: To share relevant updates, case studies, or new service announcements (only with your consent, and you can opt out anytime).
• Legal Compliance: To comply with applicable laws, regulations, or legal processes when required.

Data Storage & Hosting

Your data is stored on secure servers provided by trusted third-party cloud hosting providers. For AI agents and automation systems we build, we typically use platforms such as n8n, cloud VPS providers, or your preferred infrastructure — depending on what we agree during project scoping.

All data is stored with encryption at rest and in transit where technically feasible. Our hosting infrastructure is designed to ensure high availability and data integrity.

Third-Party Services & Sharing

We do not sell, rent, or trade your personal information. We only share data with third parties in the following limited circumstances:

• Service Providers: We use trusted third-party tools for hosting, analytics, communication, and project management (e.g., cloud hosting providers, WhatsApp Business API, analytics platforms). These providers only access data necessary to perform their functions.
• AI Platforms: When building AI agents, we may integrate with platforms like OpenAI, n8n, or voice AI providers. Data shared with these platforms is governed by their respective privacy policies and our service agreements.
• Legal Requirements: We may disclose information if required by law, court order, or to protect our rights, property, or safety.
• Business Transfers: In the unlikely event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with notice provided to you.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and understand where our visitors come from.

Types of cookies we use:

• Essential Cookies: Required for the website to function properly (e.g., navigation, security).
• Analytics Cookies: Help us understand how visitors interact with our site so we can improve it. These are anonymised where possible.
• Preference Cookies: Remember your settings and preferences for a better experience on return visits.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data, subject to legal obligations.
• Restriction: Ask us to limit how we use your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain types of processing, such as direct marketing.
• Withdraw Consent: If you have given consent for any processing, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details in the Contact section below. We will respond within a reasonable timeframe and may need to verify your identity before processing your request.

Data Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Secure access controls and authentication for all systems
• Regular security reviews and updates to our infrastructure
• Limited access to personal data — only team members who need it to perform their duties can access it
• Secure backup and disaster recovery procedures

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which we collected it, including satisfying any legal, accounting, or reporting requirements.

• Client project data: Retained for the duration of the project plus the agreed support period (typically 30–60 days), unless a longer retention is required by contract or law.
• Communication records: Retained for up to 2 years to maintain service continuity and resolve any disputes.
• Website analytics: Anonymised after 26 months in accordance with standard analytics practices.

When your data is no longer needed, we securely delete or anonymise it. If you would like us to delete your data earlier, please contact us.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will update the "Last Updated" date at the top of this page and may notify you via email or a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us. We are here to help and will respond as quickly as possible.