This policy explains what personal data Cooke Media Ltd, trading as AI Franchise (“AI Franchise”, “we”, “us”) collects when you use aifranchise.ai, why we collect it, and the rights you have over it. We are the data controller for that data.
What we collect
- Information you give us. Name, email address, phone number, business details and the answers you provide in our application form or on a call with us.
- Information we collect automatically. IP address, device and browser type, pages viewed, referring URL and similar analytics data, collected through cookies and comparable technologies.
- Transaction information. Where you purchase from us, our payment processors handle your card details. We never see or store full card numbers.
- Call recordings. Sales and onboarding calls may be recorded and transcribed for training, quality and record-keeping. You will be told at the start of any recorded call and may object.
Why we use it
- To respond to your application, book and hold calls, and provide our services.
- To take payment and keep the records that tax and company law require of us.
- To send you service messages and, where permitted, marketing you can opt out of at any time.
- To measure and improve our advertising and our website.
Our lawful bases are performance of a contract, our legitimate interests in operating and marketing our business, your consent (for optional cookies and marketing) and compliance with legal obligations.
Who we share it with
We share data with service providers who process it on our behalf, including hosting, analytics, advertising, scheduling, call-recording, email, CRM and payment providers. Some are located outside the UK/EEA; where that happens we rely on adequacy decisions or standard contractual clauses. We do not sell your personal data.
How long we keep it
For as long as needed for the purpose it was collected, and then for as long as we are required to keep records, generally six years for financial records.
Your rights
You may request access to, correction of, or deletion of your personal data, object to or restrict our processing, request portability, and withdraw consent at any time. Email support@aifranchise.ai. You may also complain to the Information Commissioner’s Office at ico.org.uk.
Connected accounts (Greg AI)
Greg AI lets you connect accounts you own so it can answer with your real numbers and files. Connecting is always your choice. Meta, Google, GoHighLevel and Fathom connections are read only. Apps you connect under Connect any app only send, post, create, change or delete something after you say yes to that exact action in the chat. You can disconnect at any time on the Integrations page inside Greg AI.
- Meta (Facebook) Ads. With the
ads_readpermission we read the ad accounts you tick: account, campaign, ad set and ad names, delivery and performance numbers (spend, impressions, clicks, CTR, CPM, cost per result, purchases and ROAS) and the text of your ads. We never create, change, pause or spend anything, and we never ask for partner access to your ad account. If you upload an Ads Manager export or screenshot instead, we keep the numbers from that file. - Google Drive and Sheets. With the
drive.filepermission we can only open the files you pick in the Google file picker. We read their text and, for sheets, their cell values. We cannot see anything else in your Drive. - Google Calendar (when offered). With
calendar.readonlywe read event titles, times and descriptions for the window you ask about, so Greg AI can plan your week. We never create, change or delete events. - Other apps you connect (Connect any app). Connections to apps such as Gmail, Google Calendar, Drive, Sheets, Docs, Notion, Slack or HubSpot are handled by our integration provider, Composio. You sign in on the app’s own page and Composio keeps the access token. Greg AI reads or acts in that app only when you ask it to in the chat, and only reads what your question needs.
- Your Google sign in details. We keep the email address of the Google account you connected so you can see which account it is.
How we use it. Only to answer your own questions inside Greg AI (for example “what should I scale this week?”), to run the reports you start, and to show you what is connected. Data from your connected accounts and apps (including Meta and Google) is never sold, never shared with other members, never used for advertising or to build profiles of you, and never used to train or improve AI models, ours or anyone else’s. To answer a question, the relevant numbers or text are sent to the AI model provider that writes the reply, under terms that stop them using it for training. Staff do not read it unless you ask us to for support, it is needed for security, or the law requires it.
Storage and security. Access tokens are encrypted at rest (AES 256) and only used by our servers. For apps under Connect any app, Composio holds the token encrypted and uses it only when Greg AI acts on your request. We do not keep copies of your Drive files or your full ad account: we read what a question needs when you ask it. Numbers from uploaded reports are kept until you delete the upload or disconnect.
Google API Services. Greg AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data deletion
- Disconnect inside Greg AI. Open Integrations, open the card and click Disconnect. We delete the stored token and the data that came with it straight away, and ask Google to revoke its token. For apps under Connect any app, Disconnect also deletes the connection at Composio.
- Remove us from Facebook. In Facebook, go to Settings and privacy, Settings, Business integrations (or Apps and websites), and remove the app. Meta tells us and we delete your Meta connection automatically.
- Remove us from Google. Visit myaccount.google.com/permissions and remove access. Then disconnect the card in Greg AI to delete what we stored.
- Delete everything. Email support@aifranchise.ai from the address on your account and ask us to delete your Greg AI data (chats, memory, uploads and connections, including every app connection held by Composio). We confirm within 30 days.
Cookies
We use necessary cookies to run the site and optional analytics and advertising cookies (including Meta and Google technologies) to measure campaigns. See our Cookie Policy for the full list and to change your choices. You can also control cookies through your browser settings.
Analytics and session recording
We use PostHog, a product analytics provider, to understand how our pages are used. This includes aggregate measures such as pages viewed, how far down a page people scroll and which buttons are clicked, and it also includes session recording: a reconstruction of the pages you saw and where you moved and clicked on them, so we can see where our own pages are confusing.
Recording is limited on purpose. Everything you type is masked before it leaves your browser, so we never receive the contents of any form field, including your name, email address, password, phone number, signature or payment details. Recording covers our public pages and, if you are a customer, the pages of your own account, so that we can see where the product is confusing; it never covers our internal staff systems. We never sell this data, and we do not use it to make any automated decision about you. Data is processed on PostHog’s United States infrastructure under their data processing agreement and standard contractual clauses, and recordings are retained for up to twelve months.
If you would rather not be recorded, enable “Do Not Track” in your browser or email support@aifranchise.ai and we will exclude you and delete any recording we hold of your visits.
Contact
Cooke Media Ltd, trading as AI Franchise. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Company number 15100830, registered in England & Wales. Questions: support@aifranchise.ai or see our Contact page.
Privacy · Terms · Refund Policy · Cookie Policy · Cookie settings