How we handle your information.

Vai, LLC operates this website. Under the GDPR we are the data controller for the information described here, and under the California Consumer Privacy Act we are the business that collects it.

Our postal address is 3100 Bristol St, Suite 200, Costa Mesa, CA 92626. For anything about your data, email us at [email protected] and a founder will answer.

Each source below says what is collected, why, and the legal basis we rely on for visitors in the EU, the UK and Switzerland.

The contact form

When you write to us we store your name, company, email address and message so we can reply. We also keep the page you sent it from, any campaign tags on the link that brought you here, the referring site and your landing page, so we know which outreach reached you. Your network address and browser string are kept with the submission for spam control.

Legal basis. Taking steps at your request before a contract, and our legitimate interest in answering you and in keeping the form free of abuse.

How the site is used

If you accept analytics cookies, Google Analytics records which pages are read, roughly where visitors come from, and the device and browser used. We use it to understand what people read.

Legal basis. Your consent, which you can withdraw at any time from the footer.

Visitor identification, form enrichment and meeting booking

If you accept marketing cookies, Apollo.io may match your network address and browser to a company record and, if you are in the United States, to a named business contact. On the contact form, Apollo looks up the email address you type, before you send the form, so it can fill in details such as your name and company. If you then send the form, Apollo also receives your message, matches it to its contact database, and may offer you a time to book a meeting with us.

Legal basis. Your consent.

When you first arrive, a small banner asks whether we may use analytics and marketing cookies. Nothing in either group is set until you accept, wherever you are. Your answer is kept in a cookie called vai_consent for twelve months. Change it at any time with the Cookie settings link in the footer, or with the link named Do not sell or share my personal information, which opens the same choices.

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of marketing cookies, and they stay off unless you turn them on yourself.

The table lists every cookie and storage item this site can set.

We use Google Analytics 4, provided by Google LLC, only after you accept analytics cookies. It runs with Google Consent Mode, which keeps every advertising signal off. We do not use Google Signals, remarketing or any advertising feature, and Google Analytics 4 does not store network addresses.

Google processes this data on our behalf under its data processing terms. Its privacy policy is at policies.google.com/privacy.

To stop analytics, reject analytics cookies in the banner. We then expire the Google cookies on this site.

Apollo.io, provided by Apollo.io, Inc., powers three things on this site, and each one waits for you to accept marketing cookies.

• Visitor identification, which matches your network address and browser to a company in Apollo's business database so we can see which organisations are reading about us. For visitors in the United States, Apollo and its identity partner LiveIntent may also match a hashed identifier from your browser to a named business contact, so we can see who is reading about us.
• Contact form routing, which passes the message you send us to Apollo so it can match you to its contact database, decide who at Vai should reply, and offer you a time to book a meeting. The name, email address and meeting details you enter when you book are stored by Apollo.
• Form enrichment on the contact form. When you type an email address, Apollo looks it up in its business database, before you send the form, and may fill in or hide fields such as your name and company so the form is shorter. When you send the form, Apollo stores your answers as a form response.

Apollo may combine what it collects here with its own business contact database. Its privacy policy is at apollo.io/privacy-policy. Rejecting marketing cookies keeps all three off, and you can still email us or use the contact form.

A submission is stored first in our own content system, on a server we control. It is then emailed to the founders through Microsoft 365 and recorded in Current, the customer relationship system we host ourselves. If you accepted marketing cookies, Apollo also receives the submission, so it can record it with the details it holds about your company, route it to the right person and offer you a meeting time.

We do not add you to a mailing list because you wrote to us. Spam checks on the form may use Cloudflare Turnstile, which confirms that a request comes from a browser rather than a script.

• Contact submissions and the matching CRM record, for 24 months after our last exchange, unless a working relationship follows.
• Analytics data, for 14 months, which is the Google Analytics default.
• Your cookie choices, for 12 months.
• Server logs that include network addresses, for 30 days.

Ask us and we will delete a submission sooner.

Vai is based in the United States, and the providers named above (Google, Apollo.io, Microsoft and Cloudflare) process data there. For visitors in the EU, the UK and Switzerland, transfers rely on the EU-US Data Privacy Framework and its UK and Swiss extensions where the provider is certified, and on standard contractual clauses otherwise.

Wherever you are, you can ask what we hold about you, have it corrected or deleted, and object to how we use it. The law where you live may add more.

In the EU, the UK and Switzerland

• Access the personal data we hold about you and receive a copy.
• Have inaccurate data corrected.
• Have your data deleted.
• Restrict or object to processing based on legitimate interest.
• Receive the data you gave us in a portable format.
• Withdraw consent at any time, without affecting what happened before.
• Complain to your supervisory authority.

In California

We do not sell personal information. Analytics and visitor identification could count as sharing under the California Privacy Rights Act, which is why both stay off until you opt in, and why the footer carries a link named Do not sell or share my personal information that opens the same choices. We honour Global Privacy Control signals as an opt-out.

• Know what personal information we collect, use and share.
• Delete it.
• Correct it.
• Opt out of sale or sharing.
• Limit the use of sensitive personal information, of which we collect none on purpose.
• Equal service and price whether or not you exercise these rights.

Email [email protected] from the address you used with us, or tell us which address you used, and say what you would like done. We confirm within a few days and complete the request within 30 days, or 45 days for California requests, and we will tell you if we need longer.

An authorised agent may act for you with your written permission. We may ask for enough detail to be sure the request comes from you.

This site is not directed at anyone under 16. We do not knowingly collect information from children, and we delete it if we learn we have.

When we change how the site collects or uses information, we update this page and its effective date. A material change also makes the cookie banner ask for your choices again.