📋 Table of Contents
Summary: Tuff AI Agents collects information you provide when booking demos, submitting forms, or using our services. We use this information to deliver our AI automation services, communicate with you, and improve our platform. We do not sell your personal information to third parties.
Information We Collect
Tuff AI Agents ("we," "us," or "our") collects information you provide directly to us, information collected automatically when you use our services, and information from third-party sources.
Information You Provide Directly:
- Contact Information — Name, email address, phone number, and business name when you submit a form, book a strategy session, or contact us.
- Business Information — Industry type, business size, number of employees, and operational details you share during onboarding or strategy sessions.
- Payment Information — Billing details processed securely through Stripe. We do not store full credit card numbers on our servers.
- Communications — Messages, emails, and other communications you send to us.
- Account Information — Username, password, and preferences if you create an account with us.
Information Collected Automatically:
- Usage Data — Pages visited, time spent on pages, links clicked, and navigation patterns on our website.
- Device Information — IP address, browser type, operating system, device identifiers, and screen resolution.
- Location Data — General geographic location based on IP address.
- Cookies & Tracking Technologies — See Section 6 for details.
Information From Third Parties:
- Information from advertising platforms (Google Ads, Facebook Ads) when you interact with our advertisements.
- Information from integration partners (GoHighLevel, HubSpot, Salesforce) when you connect these services.
- Publicly available business information used to customize your AI Agent.
How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Description | Legal Basis |
|---|---|---|
| Service Delivery | Build, configure, and operate your custom AI Agent | Contract Performance |
| Communications | Send service updates, confirmations, and support responses | Contract Performance |
| Marketing | Send promotional emails and SMS with your consent | Consent |
| Analytics | Understand how our website and services are used | Legitimate Interest |
| Improvement | Improve our AI systems, features, and services | Legitimate Interest |
| Legal Compliance | Comply with applicable laws and regulations | Legal Obligation |
| Fraud Prevention | Detect and prevent fraudulent or unauthorized activity | Legitimate Interest |
Information Sharing
We do not sell your personal information. We may share your information in the following limited circumstances:
- Service Providers — We share information with trusted third-party vendors who help us operate our business, including payment processors (Stripe), CRM platforms (GoHighLevel), cloud hosting providers, and analytics services. These providers are contractually obligated to protect your information.
- Integration Partners — When you connect third-party tools (Google Calendar, HubSpot, Salesforce, Zapier, etc.) to your AI Agent, information is shared with those platforms according to their privacy policies.
- Business Transfers — If Tuff AI Agents is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
- Legal Requirements — We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of Tuff AI Agents, our clients, or others.
- With Your Consent — We may share your information for any other purpose with your explicit consent.
Important: We never sell, rent, or trade your personal information to third-party marketers or data brokers.
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
| Data Type | Retention Period |
|---|---|
| Active client account data | Duration of service + 2 years |
| Billing and payment records | 7 years (legal requirement) |
| Marketing communications | Until you unsubscribe + 1 year |
| Website analytics data | 26 months |
| Support communications | 3 years after last interaction |
| AI Agent training data | Duration of service + 90 days |
| Deleted account data | 30 days after deletion request |
When your information is no longer needed, we securely delete or anonymize it in accordance with our data retention procedures.
Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access — Request a copy of the personal information we hold about you.
- Correction — Request that we correct inaccurate or incomplete information.
- Deletion — Request that we delete your personal information, subject to certain legal exceptions.
- Portability — Request that we provide your information in a structured, machine-readable format.
- Opt-Out of Marketing — Unsubscribe from marketing emails at any time by clicking "unsubscribe" in any email, or reply STOP to any SMS message.
- Restrict Processing — Request that we limit how we use your information in certain circumstances.
- Object to Processing — Object to our processing of your information based on legitimate interests.
- Withdraw Consent — Where processing is based on consent, withdraw that consent at any time.
To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
California Residents (CCPA): You have the right to know what personal information we collect, the right to delete your personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website and analyze how our services are used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Required for website functionality and security | Session |
| Analytics | Google Analytics — understand website usage | 26 months |
| Marketing | Google Ads, Facebook Pixel — ad targeting and conversion tracking | 90 days |
| Preferences | Remember your settings and preferences | 1 year |
You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. You can also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
SMS Communications
By providing your phone number and checking the consent box on our forms, you agree to receive SMS text messages from Tuff AI Agents.
Types of SMS Messages We Send:
- Appointment confirmations and reminders for strategy sessions
- Service updates and onboarding information
- Marketing and promotional messages (with separate consent)
- AI Agent status updates and notifications
Your SMS Rights:
- Opt-Out: Reply STOP to any SMS message to unsubscribe from all future messages.
- Help: Reply HELP to any SMS message for assistance.
- Message Frequency: Message frequency varies based on your service plan and activity.
- Message & Data Rates: Standard message and data rates may apply depending on your carrier plan.
TCPA Compliance: We comply with the Telephone Consumer Protection Act (TCPA). We will only send SMS messages to numbers that have provided explicit written consent. You may revoke consent at any time by replying STOP.
Data Security
We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.
- Encryption — All data transmitted between your browser and our servers is encrypted using TLS/SSL protocols.
- Payment Security — Payment processing is handled by Stripe, which is PCI DSS Level 1 certified — the highest level of payment security certification.
- Access Controls — Role-based access controls limit who can access your personal information within our organization.
- Cloud Infrastructure — Our services are hosted on enterprise-grade cloud infrastructure with 99.9% uptime and automatic security updates.
- Regular Audits — We conduct regular security reviews and vulnerability assessments of our systems.
- Employee Training — All team members receive data privacy and security training.
Data Breach Notification: In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by law, typically within 72 hours of becoming aware of the breach.
While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
Third-Party Services
Our services integrate with and may link to third-party platforms. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with Tuff AI Agents.
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| GoHighLevel | CRM & automation platform | gohighlevel.com/privacy |
| Google Analytics | Website analytics | policies.google.com/privacy |
| Google Ads | Advertising & conversion tracking | policies.google.com/privacy |
| Meta (Facebook) | Advertising & pixel tracking | facebook.com/privacy |
| Twilio | SMS & voice communications | twilio.com/legal/privacy |
| Zapier | Workflow automation | zapier.com/privacy |
| Google Calendar | Appointment scheduling | policies.google.com/privacy |
Children's Privacy
Tuff AI Agents services are intended for business owners and professionals aged 18 and older. We do not knowingly collect personal information from children under the age of 13.
If you believe we have inadvertently collected information from a child under 13, please contact us immediately at [email protected] and we will promptly delete that information from our records.
If you are between 13 and 18 years of age, you may only use our services with the involvement and consent of a parent or legal guardian.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an email notification to active clients
- Display a prominent notice on our website for 30 days
Your continued use of our services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.
Version History: This is Version 1.0 of the Tuff AI Agents Privacy Policy, effective January 1, 2026. Last updated July 4, 2026.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us using any of the methods below.
📬 Privacy Questions or Requests?
Our team will respond to all privacy-related inquiries within 2 business days.
📧 [email protected]