1. Information We Collect

We collect information that you voluntarily provide to us, as well as certain information collected automatically when you visit our Site.

1.1 Information You Provide Directly

Identity Data: Full legal name, business name, title.
Contact Data: Email address, phone number, mailing address.
Business Data: Business name, industry, website URL, physical address, hours of operation, and other business details you provide for GEO optimization purposes.
Financial Data (ACH): Bank name, bank routing number, bank account number, account type (checking or savings). This data is collected solely for processing your recurring ACH subscription payment.
Communications: Any information you provide when you contact us through our website form, by email, or by phone.

1.2 Information Collected Automatically

Usage Data: IP address, browser type and version, operating system, pages visited, time spent on pages, referring URLs, and click-stream data.
Device Data: Device type, screen resolution, and unique device identifiers.
Cookie Data: See Section 7 (Cookies and Tracking Technologies) below.

1.3 Information We Do Not Collect

We do not collect Social Security Numbers, government-issued ID numbers, full payment card numbers, or any special category personal data (such as health or biometric data).

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To provide, manage, and improve our GEO optimization services on your behalf.
ACH Payment Processing: To initiate and manage your recurring monthly $99.99 ACH subscription payment through our payment processor.
Account Management: To create and manage your client account, communicate about your service status, and deliver monthly performance reports.
Business Profile Distribution: To distribute your public business data (name, address, phone, website, hours) to third-party directories, AI-indexed platforms, and data aggregators as part of our GEO services. We will never distribute your personal data or financial data to these platforms.
Legal Compliance: To comply with applicable laws, regulations, and legal processes, including NACHA operating rules governing ACH transactions.
Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions and other illegal activities.
Communications: To respond to your inquiries and provide customer support.

3. ACH Data Handling, Security, and NACHA Compliance

The security of your financial information is our highest priority. We handle all ACH-related data in accordance with the rules and guidelines of the National Automated Clearinghouse Association (NACHA) and applicable federal regulations, including the Electronic Fund Transfer Act (EFTA) and Regulation E.

3.1 Data Collection and Transmission

Your bank routing and account numbers are submitted through an encrypted, TLS-secured web form and transmitted directly to our NACHA-compliant payment processor over HTTPS. We never transmit financial data over unsecured channels. AI Boutique does not represent or claim the internal security architecture of our payment processor.

3.2 Data Storage

CEH Business Services LLC (AI Boutique) does not store your full bank account numbers on our servers. Upon receipt, your financial data is passed to our payment processor and handled in accordance with its security and compliance practices. We retain only:

A payment token issued by our processor
The last four (4) digits of your account number for identification and reference purposes
Your bank name and account type (checking or savings)
Your signed ACH Authorization Form (stored securely for a minimum of 2 years as required by NACHA rules)

3.3 Access Controls

Access to financial data is strictly limited to authorized personnel on a need-to-know basis. All employees with access to payment systems are subject to background checks and confidentiality agreements.

3.4 Your Rights Under NACHA and EFTA

Under NACHA operating rules and Regulation E, you have the right to:

Receive advance notice (at least 10 calendar days) before the first ACH debit and before any change to the debit amount
Revoke your ACH authorization at any time with at least 3 business days' written notice before a scheduled debit
Dispute an unauthorized ACH transaction with us and/or your bank within 60 days of the transaction date
Receive an investigation and resolution of billing errors within 10 business days of notification

To revoke your ACH authorization or dispute a transaction, contact us at info@aiboutiquellc.com or 1-844-800-1234.

4. Disclosure of Your Information

We do not sell, rent, or trade your personal or financial information to third parties for their own marketing purposes. We may share your information only in the following circumstances:

4.1 Payment Processors

We share your ACH authorization data with our NACHA-compliant payment processor(s) solely for the purpose of processing your subscription payments. Our payment processor is contractually obligated to maintain the confidentiality and security of your financial data and is prohibited from using it for any other purpose.

4.2 GEO Service Providers (Public Business Data Only)

To deliver our GEO services, we share your public business data with third-party directories, data aggregators, and AI-indexing platforms. This sharing is limited to publicly available business information (name, address, phone, website, hours) and does not include any personal or financial data.

4.3 Service Providers and Subcontractors

We may share information with service providers who assist us in operating our business (e.g., email communications, data storage, analytics). All such providers are bound by written data processing agreements and are prohibited from using your information for any purpose other than providing services to us.

4.4 Legal Requirements

We may disclose your information if required to do so by law, regulation, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement and maintain commercially reasonable administrative, technical, and physical safeguards designed to protect your personal and financial information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

TLS/HTTPS encryption for all data transmitted through our Site
Transmission of financial data exclusively to our authorized, NACHA-compliant payment processor
Role-based access controls and multi-factor authentication for internal systems
Regular security audits and vulnerability assessments
Employee training on data security and privacy practices

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. In the event of a data breach that affects your personal or financial information, we will notify you as required by applicable law.

6. Data Retention

We retain your personal and financial information only for as long as necessary to fulfill the purposes for which it was collected, including for the periods required to:

Provide active services to you
Comply with NACHA requirements (ACH authorization records retained for a minimum of 2 years from revocation)
Comply with applicable tax, accounting, and financial regulations (typically 7 years)
Resolve billing disputes and enforce our legal agreements

After the applicable retention period, we will securely delete or anonymize your personal data.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

Strictly Necessary Cookies: Required for the Site to function properly (e.g., session management, form security). These cannot be disabled.
Analytics Cookies: Help us understand how visitors interact with our Site (e.g., pages visited, time on site). This data is aggregated and anonymized.
Preference Cookies: Remember your choices and settings to improve your experience on repeat visits.

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site. Most browsers allow you to block or delete cookies in your browser settings.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request that we correct any inaccurate or incomplete information.
Right to Deletion: Request that we delete your personal data, subject to our legal retention obligations.
Right to Restrict Processing: Request that we limit the use of your data in certain circumstances.
Right to Data Portability: Request that we provide your data in a portable, machine-readable format.
Right to Object: Object to our processing of your data in certain circumstances.
Right to Revoke ACH Authorization: As described in Section 3.4, you may revoke your ACH authorization at any time in writing.

To exercise any of these rights, please contact us in writing at info@aiboutiquellc.com. We will respond to all valid requests within 30 days. We may ask you to verify your identity before processing your request.

9. Children's Privacy

Our services are intended exclusively for business owners and adults aged 18 and older. We do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal data from a child under 13, we will promptly delete it. If you believe we have inadvertently collected such information, please contact us at info@aiboutiquellc.com.

10. Third-Party Links

Our Site may contain links to third-party websites. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party websites.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify active clients of material changes by email with at least 30 days' notice and by posting the updated policy on our Site with a new "Last Updated" date. Your continued use of our services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

12. Contact Us — Privacy Inquiries

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact our Privacy Office:

Email: info@aiboutiquellc.com (Subject: "Privacy Request")
Phone: 1-844-800-1234 (Monday – Friday, 9 AM – 5 PM ET)
Mail: CEH Business Services LLC d/b/a AI Boutique — Privacy Office, 7563 Glendove Lane #1306, Delray Beach, FL 33446

AI Boutique is a brand operated by CEH Business Services LLC. This Privacy Policy is effective as of July 1, 2026.