Privacy Policy · Northwest AI

Northwest AI Consulting LLC, a Delaware limited liability company (“Northwest AI,” “we,” “us,” or “our”) operates nwai.co and the landing pages, booking tools, and email programs connected to it. This policy explains how we handle personal information in that context, and what rights you have over it.

Read section 6 first if you are a client. The information your company gives us inside a paid engagement is handled differently from the information a visitor leaves on this website, and the two should never be confused.

Information we collect

Information you give us. You give us information when you book a call, fill out a form, subscribe to an email list, apply for a job, respond to a survey, or contact us by email, phone, or text. Depending on what you do, that can include:

Name, work email address, phone number, job title, and company
Company size, industry, revenue range, and the tools your company runs on
What you want help with, and the business problems you describe to us
Resumes, work history, and anything else you send with a job application
The content of your messages, calls, and meetings with us
Billing and payment details, which our payment processors collect and hold rather than us

Information we collect automatically. When you use the site, we and the vendors described in our Cookie Policy collect:

IP address, approximate location derived from it, device type, operating system, and browser
Pages viewed, links clicked, time on page, scroll depth, and how far into a video you watched
Session recordings and heatmaps of how you move through a page, including mouse movement, clicks, and scrolling. Our session recording tool masks text input by default, so what you type into a form is not captured in the recording
The site, ad, or search that sent you here, and campaign parameters in the URL
Cookie and device identifiers, and identifiers our advertising partners assign to you

Information we get from other people. We also receive information about you from advertising and analytics platforms, identity-resolution vendors, business data providers, our CRM, event and webinar hosts, referral partners, and public sources such as your company's website or a professional networking profile. We use it to understand who is on our site and whether our marketing is working.

Calls and meetings. We record and transcribe sales and delivery calls when everyone on the call has been told and has consented, and we use those recordings and transcripts internally for notes, follow-up, and training our team. If you do not want to be recorded, say so at the start of the call and we will turn it off.

How we use your information

We use personal information to:

Respond to you, schedule calls, and answer questions
Provide, deliver, support, and improve our services
Send proposals, statements of work, invoices, and account communications
Send marketing email and text messages you have asked for or consented to
Run, measure, target, and improve our advertising, including on Google, Meta, and LinkedIn
Understand how the site is used and make it work better
Evaluate job applications
Keep our systems secure, prevent fraud and abuse, and investigate incidents
Maintain business records, and establish, exercise, or defend legal claims
Comply with the law and enforce our Terms of Service

We do not use the personal information we collect through this website to train general-purpose AI models, and we do not license it to anyone else for that purpose.

Legal bases, if you are in the EEA, the UK, or Switzerland

Where the GDPR or UK GDPR applies, we process personal information on one of these grounds:

Contract. To take steps you ask for before entering an agreement, and to perform one once it exists.
Legitimate interests. To run, secure, measure, and grow a business-to-business consulting firm, where those interests are not overridden by your rights.
Consent. For non-essential cookies, for marketing where consent is required, and for call recording. You can withdraw consent at any time, and withdrawing it does not affect what we did before you withdrew it.
Legal obligation. To meet tax, accounting, and other legal requirements.

How we share your information

We do not sell personal information for money. We share it in these situations, and no others:

Service providers. Hosting, email, CRM, scheduling, analytics, video, payment processing, e-signature, and similar vendors that process information on our instructions and are contractually barred from using it for their own purposes.
Advertising and analytics partners. Described in section 5, because under several state privacy laws this counts as sharing even though no money changes hands.
Our people and subcontractors. Employees, consultants, and engineering subcontractors who need the information to do the work, all under confidentiality obligations.
Professional advisors. Lawyers, accountants, insurers, and auditors.
Legal and safety. When we are required by law, subpoena, or court order, or when disclosure is necessary to protect our rights, our people, our clients, or the public. Where we are permitted to tell you first, we will.
Corporate transactions. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to the acquiring party honoring this policy.
With your direction. Anywhere else you ask us to send it.

Text message originator opt-in data and consent are never shared with anyone for any purpose. That exclusion applies to every category above.

Advertising, and what “sale” and “sharing” mean under state law

We run advertising on platforms including Google, Meta, and LinkedIn, and we use cookies and pixels to measure it and to show ads to people who have visited our site. Under the California Consumer Privacy Act and similar laws in other states, letting an advertising partner collect identifiers from our site for cross-context behavioral advertising is treated as a sale or a share, even though we receive no money and would not describe it that way in plain English.

So, to be exact: we do not sell personal information for money, and we do share personal information for cross-context behavioral advertising. You can turn that off, and we do not treat you any differently if you do. To opt out:

Turn on Global Privacy Control in a browser or extension that supports it. We treat a GPC signal as a valid opt-out request for the browser that sends it.
Use the platform-level and browser-level controls listed on our Do Not Track page.
Email consulting@nwai.co with the subject line “Do not sell or share my personal information.”

We do not knowingly sell or share the personal information of anyone under 16.

Client data, and where this policy stops applying

This policy covers the personal information we collect as a business for our own purposes: website visitors, prospects, marketing contacts, job applicants, and our own business contacts at client companies.

It does not cover the data inside a delivery engagement. When a client gives us access to their systems, documents, tickets, transcripts, or records, or when we build a system that processes their data, we act on that client's instructions as a service provider or processor. In that role:

The client's agreement with us, and the client's own privacy policy, govern how that data is handled.
We use it only to deliver the services the client asked for, and for nothing else.
We do not sell it, share it for advertising, or use it to train general-purpose AI models.
If you are an individual whose data reached us this way and you want it accessed, corrected, or deleted, contact the client company. We will support them in responding, and we will refer your request to them if it comes to us first.

AI systems and third-party model providers

We build with and on top of AI systems from third-party providers. When information is processed through one of those systems as part of delivering our services, that provider processes it under its own agreement with us, and we configure those services to exclude our data from training the provider's models wherever the provider offers that setting. Which providers a given engagement uses, and the terms that apply to them, are documented in that engagement's agreement.

Do not send us sensitive personal information, protected health information, payment card data, or regulated records through a website form or an unencrypted email. If an engagement requires handling that kind of data, we will set up an appropriate channel and the necessary agreements first.

Cookies and tracking

We use cookies, pixels, tags, and similar technologies for essential site functions, analytics, and advertising. What they are, which ones we run, how long they last, and how to switch them off are all covered in our Cookie Policy, and the opt-out routes are collected on our Do Not Track page.

When you visit or log in to our site, our online data partners or vendors may use cookies and similar technologies to associate that activity with other personal information they or others already hold about you, including by matching it to your email or home address. We or our service providers may then send marketing to those addresses. You can opt out of that advertising at https://app.retention.com/optout.

Email, phone, and text messages

If you give us your email address, we may send you marketing email. Every marketing email has an unsubscribe link, and unsubscribing stops the marketing but not the messages we have to send about an active engagement, such as invoices and service notices.

If you give us your mobile number and consent to text messages, message and data rates may apply, message frequency varies, and consent to receive marketing texts is never a condition of buying anything. Reply STOP to any message to opt out and HELP for help. Carriers are not liable for delayed or undelivered messages.

We record calls only with notice and consent, as described in section 1.

How long we keep it

We keep personal information for as long as we need it for the purpose we collected it, and then for as long as we need it to meet legal, tax, accounting, and record-keeping obligations or to defend legal claims. In practice that means marketing contacts stay until you unsubscribe or ask for deletion and then through our normal purge cycle, client and engagement records are kept for the life of the relationship plus the applicable limitations period, job applications are kept for a reasonable period after the role closes, and website analytics data is kept on the retention schedule of the analytics vendor. When information is no longer needed we delete it or de-identify it.

How we protect it

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls and multi-factor authentication, least-privilege access, vendor review, and training for our team. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

Where your information goes

We are based in the United States and our vendors and subcontractors, including our engineering team, are located in the United States, Pakistan, and elsewhere. If you are outside the United States, your information will be transferred to and processed in countries whose data protection laws may differ from your own. Where required, we rely on appropriate transfer mechanisms, including the European Commission's Standard Contractual Clauses and the UK Addendum, and we take additional measures where they are needed.

Children

Our website and services are built for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email consulting@nwai.co and we will delete it.

Your rights and how to use them

Depending on where you live, you may have some or all of these rights:

Know and access. Find out what personal information we hold about you, where we got it, why we have it, and who we disclosed it to, and get a copy.
Correct. Have inaccurate information fixed.
Delete. Have your personal information deleted, subject to exceptions the law allows.
Portability. Get a copy in a portable, machine-readable format.
Opt out. Stop the sale or sharing of your information, stop targeted advertising, and stop profiling that produces legal or similarly significant effects.
Limit sensitive information. Restrict use of sensitive personal information to what the law permits. We do not use sensitive personal information for inferring characteristics.
Withdraw consent. Where we rely on consent, take it back.
Non-discrimination. Use any of these rights without being charged a different price or given a worse service.
Object and restrict. Where the GDPR or UK GDPR applies, object to or restrict processing based on legitimate interests.

To make a request, email consulting@nwai.co or call 503-298-4673 and tell us which right you want to use.

Verification. We will ask you to confirm information we already hold so we can be sure the request is really yours. We will not create an account or collect new information just to verify you. An authorized agent may submit a request on your behalf with written permission signed by you, and we may still ask you to confirm it directly.

Timing. We acknowledge requests within 10 business days and respond within 45 days, and we may extend that once by another 45 days where the law allows, in which case we will tell you why.

Appeals. If we refuse a request and you live in a state that gives you an appeal right, reply to our decision within 60 days and ask for an appeal. We will respond in writing within 45 days with our decision and our reasoning, and if we deny the appeal we will tell you how to complain to your state attorney general.

State-specific disclosures

California. In the last 12 months we have collected the following categories of personal information from the sources, for the purposes, and with the disclosures described in sections 1 through 5: identifiers, customer records information, commercial information, internet and network activity, approximate geolocation, audio recordings, professional and employment information, and inferences drawn from those categories. We disclose identifiers, internet and network activity, commercial information, and inferences to advertising partners for cross-context behavioral advertising, and we disclose every category listed to service providers for business purposes. We do not sell personal information for money. We do not use or disclose sensitive personal information beyond the purposes permitted by California law. California residents have the rights listed in section 14, including the right to know, delete, correct, opt out of sale and sharing, limit the use of sensitive personal information, and be free from retaliation.

California “Shine the Light.” California residents may request a list of the third parties, if any, to whom we disclosed personal information for their own direct marketing in the prior calendar year. Email consulting@nwai.co with “Shine the Light” in the subject.

Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia. Residents of these states have the rights described in section 14 to the extent their state law provides them, including the right to opt out of targeted advertising, sale, and certain profiling. Oregon residents may also request a list of the specific third parties to whom we have disclosed personal data. Except in Utah, residents have the appeal right described in section 14. We do not use personal data to make decisions that produce legal or similarly significant effects without human involvement.

Nevada. Nevada residents may direct us not to sell certain covered information. We do not sell covered information as Nevada defines it, but you may submit a request to consulting@nwai.co.

Washington and Nevada health data. We do not collect consumer health data as the Washington My Health My Data Act or Nevada's health data law define it. If that changes, we will publish the notice those laws require before collecting any.

Changes to this policy

We may update this policy. When we do, we change the “Last updated” date at the top and post the new version here. If a change materially affects how we handle information we already hold about you, we will give you additional notice, by email or through the site, before it takes effect.

How to reach us

Questions, requests, and complaints about privacy go to:

Northwest AI Consulting LLC
1383 West State Route 4
Skamokawa, WA 98647
Email: consulting@nwai.co
Phone: 503-298-4673

If you are in the EEA or the UK and you think we have handled your information badly, you may also complain to your local supervisory authority. We would rather you told us first so we can fix it.

Northwest AI Consulting LLC
1383 West State Route 4
Skamokawa, WA 98647
consulting@nwai.co · 503-298-4673