Who we are
Aigora, LLC provides software, consulting, research support, and training for sensory and consumer science.
Our address is 2515 Whispering Oaks Ct, Midlothian, VA 23112, United States. You can contact us about personal information at privacy@aigora.com.
This notice explains how we handle personal information when you visit our website, contact us, use our software, or buy our services. It also explains your choices.
Aigora is responsible for the personal information it uses to manage its website, business contacts, accounts, and orders. When an organization gives us research or other personal information to process on its behalf, that organization usually decides the purposes of processing. We follow its instructions and the applicable service agreement and data processing agreement. The organization's own notice may also apply.
Information we collect
We collect information you give us, including your name, work email, company, role, phone number, messages, support requests, and communication preferences. The fields depend on the form or service you use.
For accounts and organization access, we process account identifiers, sign-in information from your identity provider, organization membership, permissions, and activity needed to provide and secure the service.
For orders, we receive contact details, the product or service purchased, payment status, transaction identifiers, and billing information supplied through checkout. Stripe processes payment details. Our standard Stripe checkout does not send full card numbers or card security codes to our application servers.
When you use an AI feature, we process the prompts, files, research materials, and other content you submit, along with the responses and results. This content may contain personal information about you or other people. Only submit information that you are authorized to use for that purpose.
We also receive technical information such as IP addresses, browser and device information, pages visited, referring pages, campaign information, errors, and service activity. Cookies, browser storage, server logs, and analytics tools can provide this information.
We may receive information from your organization, a colleague who contacts us on your behalf, identity and payment providers, and sources used for a requested research task. Those sources can include public websites and services used to retrieve their content.
How we use information
We use personal information to respond to requests, provide software and services, manage accounts and access, process orders, deliver courses and events, provide support, and communicate about the service you use.
We also use information to understand website and service use, find and fix errors, prevent abuse and fraud, protect accounts, keep business records, and meet legal obligations.
Where data protection law requires a legal basis, we rely on:
- A contract, or steps you ask us to take before a contract, to provide services to you.
- Our legitimate interests in responding to business inquiries, administering relationships with organizations, providing support, and operating and securing our business, where those interests do not override your rights.
- Your consent for marketing subscriptions and for tracking that requires consent.
- Legal obligations for records, disclosures, and other processing required by law.
We identify required fields when we collect information. If you do not provide information needed for an account, order, or request, we may be unable to complete it. Optional marketing consent is not required to buy or use our services.
Website chat and AI features
Our website chat uses Google Gemini to process your messages and generate replies. Google receives the content needed for those requests. The chat also helps our team understand your inquiry and follow up with you.
Aigora staff can review the conversation. Our internal Slack notifications can contain your contact details, conversation text, and a summary. We store submitted contact details in HubSpot. Automated redaction reduces some identifiers in notification text, but it does not make a conversation anonymous.
Please avoid putting sensitive personal information or confidential research data into the public website chat. Use the agreed product workspace or project channel for material covered by an organization agreement.
Our software can use AI to analyze submitted content and generate results. Client data is not used to train foundation models. Google processes prompts and responses for inference under the terms applicable to the service we use. Provider caching, safety monitoring, and legally required retention are separate from Aigora's own storage. A short Aigora storage period does not mean that every provider deletes every record at the same time.
AI responses can be wrong. They support human review and judgment. The website chat provides information and recommendations; it does not make a final decision about a person's legal rights or access to employment, credit, or similar opportunities.
Who receives information
We share information needed for the relevant task with service providers and authorized people:
| Recipient | Purpose and information involved |
|---|---|
| Google Gemini | Processing prompts and submitted content, generating responses, and related service safeguards. |
| HubSpot | Contact records, inquiries, communication preferences, course enrollment, and website activity where its tracking is enabled. |
| Stripe | Payments, billing, transaction records, fraud prevention, and related legal duties. |
| Slack and Aigora's feedback service | Internal chat, support, and order notices, including the contact and request or transaction details needed by our team. |
| Vercel, Neon, and other providers used for hosting, storage, and security | Hosting the website and services, storing authorized records, and processing technical and security data. |
| Clerk and the selected sign-in provider, such as Google or Microsoft | Authentication, account identity, and organization access. |
| Apify, where a workflow uses it | Retrieving and processing source content for the requested task, under our data processing agreement. |
| Event, email, and media providers, including Zoom where used | Delivering registrations, service messages, live sessions, recordings, and embedded media. |
| Your organization's authorized administrators and users | Managing access and using content shared within the organization, subject to the service's permissions. |
Providers can also process certain information for their own responsibilities, such as billing, fraud prevention, account security, or legal compliance. Their terms and notices apply to that processing. For example, Stripe has its own privacy notice.
We may disclose information to professional advisers or authorities when necessary to obtain advice, meet a legal requirement, or protect rights and safety. If ownership of our business changes, relevant records may transfer with the business, subject to applicable privacy requirements.
Contact privacy@aigora.com for information about providers relevant to your service.
Messages and marketing choices
Software users receive updates about the software they use. You can opt out of optional product update messages through the unsubscribe option or by contacting us. Essential account, security, billing, and service notices may still be sent when needed to operate your service.
Marketing emails require a separate opt-in. Starting a chat, buying a service, or receiving a product update does not by itself subscribe you to marketing. You can withdraw marketing consent at any time through the unsubscribe link or privacy@aigora.com.
We retain the minimum information needed to respect an opt-out. Removing your contact from a marketing list does not necessarily remove order or account records that have another valid purpose.
Cookies and similar technologies
We use cookies and similar technologies for account access, security, preferences, website measurement, and configured marketing tools. Some features also use browser session storage, including campaign information associated with a form submission.
Google tags, HubSpot tracking, Vercel analytics, and embedded media have different behavior and settings. A browser setting that blocks cookies does not necessarily stop every network request or every form of measurement.
You can use your browser's controls to manage cookies and stored website data. Blocking necessary storage can affect sign-in and access features. Contact privacy@aigora.com about tracking choices or to object to processing where that right applies.
How long we keep information
We keep personal information while it is needed for the purposes in this notice. We decide the period from the record's purpose, the status of your account or request, the terms agreed with your organization, and applicable legal requirements. The criteria below apply to copies Aigora controls.
| Record | Retention period or criteria |
|---|---|
| Unsaved software workspaces | The default temporary workspace cache lasts 24 hours, unless a specific service agreement says otherwise. This is separate from public website chat and provider processing. |
| Saved organization sessions and their saved content | When an organization enables data storage and a user saves a session, we keep it until an authorized user deletes it or the organization offboards. There is no automatic inactivity expiry for these saved sessions. |
| Website chat, business inquiries, and support records | We consider whether the request is open, whether follow-up or support is still needed, our last meaningful interaction, and any continuing customer relationship. Relevant information may form part of a support or customer record. |
| Internal chat, feedback, and order notices | We consider whether the team still needs the notice to answer the request, confirm delivery, reconcile an order, or investigate a problem. Copies in provider systems also follow the applicable service and retention settings. |
| Account and organization records | While needed for account access, active services, course entitlements, and the business relationship. After closure, we retain only records needed for remaining obligations, disputes, or another purpose described here. |
| Accounting and transaction records | For the periods required by applicable tax, accounting, payment, and recordkeeping rules, and while needed for refunds, disputes, or legal claims. Stripe may keep its own records under its separate legal duties. |
| Technical and security logs | Based on the time needed to operate and troubleshoot the service, investigate abuse or incidents, and meet security or legal obligations. The period also depends on the relevant provider and logging service. |
| Marketing records | While your subscription is active. After an opt-out, we keep the minimum information needed to respect that choice and any necessary record of consent. |
| Privacy requests | While needed to process the request, document our response, and meet applicable accountability or dispute requirements. |
Deletion and offboarding follow the applicable service agreement and provider deletion procedures. Your service agreement may provide for an export before offboarding deletion. Residual copies may remain in backups until the applicable backup cycle removes them. Backup retention is separate from keeping a saved session available in the product.
A legal hold, unresolved payment dispute, security investigation, or binding organization agreement can require longer retention of relevant records. We limit the exception to the records needed for that purpose. Contact privacy@aigora.com for the retention information relevant to your service or to request deletion.
International processing
Aigora is based in the United States. Our providers may process information in the United States and other countries in which they operate. The location depends on the service, account settings, and agreement.
Where applicable law requires safeguards for an international transfer, we use the safeguards that apply to that relationship, such as approved contractual clauses or another recognized transfer mechanism. You can ask privacy@aigora.com for details or a copy of relevant safeguards, subject to lawful redactions. A provider's location or use of a standard agreement does not mean every service has the same transfer arrangements.
Your rights and requests
Depending on the law that applies, you may ask to access, correct, delete, or obtain a copy of your personal information. You may also have rights to restrict or object to processing, withdraw consent, and opt out of certain advertising or data-sharing uses. Withdrawing consent does not affect processing that was lawful before withdrawal.
Send requests to privacy@aigora.com. Identify the email address or account concerned and the service you used. We may ask for proportionate information to verify your identity. Please do not send identity documents unless we request them through an appropriate channel.
If your organization controls the information, contact its administrator first. We can help route a request and assist the organization under our agreement.
We respond within the period required by applicable law. If we cannot complete a request, we explain the reason and any available review or appeal process. You may complain to the data protection authority or regulator responsible for your location. In the United Kingdom, you can contact the Information Commissioner's Office. You can also contact privacy@aigora.com to request a review of our response.
Security
We use access controls, encryption, and other measures appropriate to the service and information involved. No storage or transmission method can guarantee complete security. Our AI governance page describes the company posture and how to request more information.
Changes and contact
We update this notice when our practices change. The effective date identifies the current version. We provide further notice of material changes when applicable law requires it.
For questions or requests, contact privacy@aigora.com or write to Aigora, LLC, 2515 Whispering Oaks Ct, Midlothian, VA 23112, United States.