Privacy Policy · AI Command

Privacy should follow the same rule as automation: clear scope, clear access, clear accountability.

This policy explains how AI Command approaches information provided through contact, account access, approved services, workflow implementation, integrations, and related business operations.

Policy principle

Account access, service activation, integrations, permissions, and live execution are separate states.

01 · Information we may receive

Information enters the system through specific business activities.

Depending on how you interact with AI Command, information may be provided when you contact the company, create or use an account, request services, schedule work, participate in an implementation, connect approved systems, or communicate about support and operations.

  • Contact details and business information you provide.
  • Account, login, entitlement, and access-related information.
  • Workflow details, operating rules, responsibilities, and approval requirements.
  • Information needed to configure approved systems or integrations.
  • Support, implementation, and service-related communications.
Important distinctionCreating an account alone does not mean every service, integration, or workflow is active.
02 · How information is used

Use should stay tied to a legitimate operating purpose.

Information may be used to support access, communication, implementation, service delivery, support, measurement, administration, and protection of connected workflows.

  • Provide account access and apply relevant entitlements.
  • Respond to inquiries and coordinate business conversations.
  • Understand workflows, bottlenecks, systems, and implementation requirements.
  • Configure or support approved AI roles, automations, and integrations.
  • Coordinate approvals, exceptions, and operator handoffs.
  • Review activity against agreed baselines and operating measures.
  • Maintain records required for support, administration, and scope management.
03 · Accounts and entitlements

Access should reflect what has actually been approved.

The staging ecosystem separates account creation, service activation, memberships, entitlements, integrations, and live functionality. AI Command follows the same operating boundary.

  • An account may exist before a paid service is activated.
  • A workspace may exist before a required integration is connected.
  • Permissions may differ by user, role, workflow, or service scope.
  • Live execution depends on the applicable integration, permissions, configuration, and approved scope.
04 · Integrations and third parties

Connected systems may have their own privacy practices.

AI Command workflows may involve third-party systems such as CRM platforms, websites, forms, calendars, advertising platforms, APIs, analytics tools, software services, or other business systems.

Those third parties may process information under their own terms, privacy policies, security practices, and usage rules. Integration availability and data movement should be evaluated against the actual system and approved workflow.

05 · Access and operator controls

Privacy also depends on who can access and act on information.

AI Command’s operating model emphasizes permissions, approvals, escalation, human review, and bounded access. Technical connectivity does not automatically grant unlimited operational authority.

  • Access should be limited to the systems and information required for the approved task.
  • Consequential decisions may require explicit human approval.
  • Incomplete, conflicting, or unsupported cases should route to a named operator.
  • Workflow permissions should be reviewed before authority is expanded.
06 · Questions and requests

Privacy requests should identify the relevant account, service, or system.

For privacy-related questions or requests, contact AI Command using the published contact channel and include enough context to identify the relevant account, workflow, service, or system.

Email: andy@aicommand.io

Business address: 114 W. Main Street · Mesa, AZ 85201

Data map

Information should follow the workflow.

A useful privacy model connects the information category to the reason it is needed and the system or operating process involved.

Category
Typical source
Typical purpose
Contact information

Forms, email, phone, scheduling, business inquiry.

Respond, route, schedule, and maintain communication.

Account information

Account creation, login, entitlement, access settings.

Provide access and enforce the correct scope or permissions.

Operational information

Workflow discovery, implementation, business process review.

Understand the process, configure approved work, and define controls.

Integration information

Connected systems, APIs, CRM, forms, calendars, software.

Enable approved workflow actions and data movement.

Support information

Service requests, implementation conversations, issue reports.

Resolve questions, maintain scope, and support operations.

Privacy boundaries

Three distinctions prevent a lot of confusion.

The staging source repeatedly separates access, service scope, and integration state. Those boundaries matter for privacy too.

Account ≠ service

An account alone does not activate every service.

Paid services and live functionality depend on entitlement, permission, integration, and scope.

Workspace ≠ live integration

A workspace may exist before the connection is active.

For example, the staging site states that the Audit workspace may track scheduling while the required integration remains disconnected.

Connection ≠ unrestricted authority

Technical access does not automatically authorize every action.

Permissions, approvals, human review, and exception ownership remain separate operating controls.

Legal confirmation required

Do not invent privacy terms that have not been established.

The accessible staging material supports the operating and access principles above. It does not establish every legal or regulatory detail a final privacy policy may require.

Specific data-retention periods.
Complete subprocessors or processor list.
Jurisdiction-specific consumer privacy rights.
Cookie and tracking technology inventory.
Cross-border transfer mechanisms.
Formal breach notification procedures.
Children’s privacy requirements.
Any formal certification or compliance representation.