aiNOW
Last updated: 3 November 2026
This unified policy applies to ainow.ge and active aiNOW products. It explains how AI NOW LLC processes personal data under Georgian law. Public pages identify categories of external services rather than their commercial names.
aiNOW's primary hosting and API routing are located in the EU/EEA. A limited part of data may be processed by an approved external processor in another country where a specific function requires it, using a basis and appropriate safeguards under Georgian law.
Depending on the service, we may process: contact and account details; messages, comments, attachments, public social-profile data and service history; call audio, recordings, transcripts, numbers, time and outcome when call features are enabled; catalogs, documents, photographs, business knowledge and other uploaded material; payment status and billing records without full card details; IP address, device, browser, security logs and usage data; and information voluntarily entered in an aiSTAFF professional application.
We process data to answer inquiries, enter into and perform agreements, provide AI responses, calls and document workflows, deliver support, process billing, protect security, produce service analytics and meet legal duties. Direct marketing is performed only with the required consent. We do not sell personal data.
AI NOW LLC is the controller for website visitors, inquiries, aiNOW billing and the Company's own communications. Where a business uses an aiNOW product to process data about its customers, staff or other persons, that business is generally the controller. aiNOW acts as processor and handles the data only under the agreement, the Client's instructions and applicable law. The Client is responsible for lawful collection, required notices and consents.
AI features process only the data needed for the selected task. Automated output may be inaccurate, does not form a binding agreement on behalf of AI NOW LLC and requires human review for material decisions. When aiCALL is used, a call may be recorded and transcribed for analytics and service improvement. If audio recording is enabled, the person is notified before or when recording starts. The Client can disable recording and transcription. A separate AI disclosure may be disabled only where the law and selected service allow it; a mandatory audio-recording notice cannot be disabled. Under the terms applicable to the configured business APIs, submitted business content is not used to train public AI models. This does not mean that no technical processing or temporary retention occurs.
A limited part of the data may be processed by approved categories needed for the service: hosting and infrastructure, AI processing, communications and telephony, email, analytics, security, technical support and payment. Each receives only what it needs for its function. Data may also be disclosed to an authorized public body where required by law. Within the Company, production-data access is limited to the CEO and CTO and is used only for service delivery, security or support. Authorized personnel of an external processor may access data only where necessary for its function. We use access controls, action logging, protected transmission, backup cycles and an incident-response process. Primary hosting and API routing are located in the EU/EEA. A limited part of data may be processed in another country where a specific function requires it and a basis and appropriate safeguards under Georgian law apply. Commercial provider names are not published publicly.
Account and service data is retained while the account or agreement is active and afterwards only for a period required by law, billing, claim protection or an agreed obligation. A Client can request export or deletion. Active processing ends after the request, account closure or agreement end, except for legally required retention. Temporary copies may remain until the backup cycle ends and are not used for another purpose. Documents and files are deleted immediately or at the end of the applicable technical cycle, depending on the service.
aiNOW sites use technologies necessary to operate. Optional analytics and advertising measurement are enabled only after the user's choice. Consent can be changed or withdrawn through the available control or by clearing browser data. Direct-marketing consent is separate and can be withdrawn free of charge.
To the extent provided by Georgian law, you may request information about processing, a copy, correction, update, restriction, cessation, deletion, destruction, blocking, portability or withdrawal of consent. Requests are handled free of charge except where the law permits otherwise. Contact [email protected] or use the contact page. We respond without undue delay and within the statutory period. We handle security incidents and notifications under applicable law.
aiNOW business services are intended for adults. A minor's data is processed only where a lawful basis and appropriate safeguards exist. If you believe data was provided improperly, contact [email protected].
The current version is published on this page. Active Clients are notified of a material change through an available contact channel. Separate consent is requested for a new purpose where the law requires it. Professional details in an aiSTAFF application may be published only with the applicant's consent. Phone and email are not made public without a separate clear choice. Publication alone is not aiNOW verification of qualifications; a verified status is marked separately. The applicant may request correction or deletion. Separate consent is required for marketing use.
This section applies when a business owner connects their Google Calendar to aiCHATS, including through iAI. Connecting is optional, and the owner starts it on Google's consent screen.
What we access: Events on calendars the owner owns, through the Google Calendar API. We use the owner's primary calendar.
How we use it: We read the start and end times and the busy status of upcoming events to work out when the owner is free, so the business's customers are only offered open times. We create, move and cancel only the booking events that aiCHATS made. A booking event contains the appointment time, the customer's name and contact number and, where available, the service, length and price.
What we store: An encrypted refresh token that keeps the connection working, and the records of bookings made through aiCHATS, including the event ID. We do not store the titles, descriptions, attendees or other content of the owner's own events.
Sharing: We do not sell Google user data or use it for advertising. Open appointment times worked out from calendar data may be shown to the business's customers and processed by our AI service provider to write replies. The content of the owner's events is not sent to that provider. We do not use this data to train AI models.
Retention and deletion: The owner can disconnect at any time in the booking settings in iAI. We then delete the refresh token and request revocation of access at Google. Access can also be removed at https://myaccount.google.com/permissions. Booking events already in the calendar stay there, and booking records are kept under section 6.
Limited Use: aiNOW's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.