Privacy policy
Last updated: 30 October 2026
1. General
1.1. This privacy policy explains what personal data Klientai, MB, trading as AIFormula.co and AI Formula, collects and uses when you visit aiformula.co (the "Site"), book an intro call, become a client or contact us in any other way. "We" means Klientai, MB. "You" means a visitor, a client, a potential client or anyone else whose personal data we handle.
1.2. We handle personal data under Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania and other applicable law.
1.3. We collect only the data we need for the purposes in this policy and do not use it for purposes that are incompatible with them.
1.4. When we work for a client, we may handle personal data in that client's systems, such as the client's leads and customers. In that work the client decides how the data is used and we act on its instructions under our agreement. Those people should read the client's own privacy policy.
2. Data controller
The controller of your personal data is:
- Klientai, MB
- Company code: 306393702
- VAT number: LT100016324410
- Registered address: V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania
- Email: ged@aiformula.co
- Data about our company is collected and stored in the Register of Legal Entities of the Republic of Lithuania.
We have not appointed a data protection officer because the GDPR does not require us to. You can send any question about personal data to the email address above.
3. What data we use, why, and for how long
3.1. Intro calls and enquiries
- Data: full name, email address, phone number if you give it, the time you choose, and what you tell us in an email or on a call.
- Purpose: to book and hold the call, answer your questions, understand your needs and prepare a proposal.
- Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). When you contact us on behalf of your company, our legitimate interest in answering business enquiries (GDPR Art. 6(1)(f)).
- How long: 12 months from our last contact if no contract follows. If we sign a contract, as in section 3.3.
3.2. Call recordings and notes
- Data: your voice, your name, what is said on the call, and the transcript and notes made from it.
- Purpose: to keep accurate notes, prepare our proposal and improve how we work.
- Legal basis: your consent (GDPR Art. 6(1)(a)). We tell you before we record, and you can ask us not to. Saying no changes nothing else about the call.
- How long: 12 months from our last contact if no contract follows. If we sign a contract, as in section 3.3.
3.3. Clients and contracts
- Data: names, work contact details and job titles of our client's representatives, the contract, and our correspondence.
- Purpose: to deliver the agreed work, manage the contract and support you afterwards.
- Legal basis: entering into and performing a contract (GDPR Art. 6(1)(b)). When the contract is with a company, our legitimate interest in performing it properly (GDPR Art. 6(1)(f)).
- How long: for the length of the contract and 5 years after it ends, so that we can answer claims and defend our rights, unless the law requires longer.
3.4. Invoices and accounting
- Data: the name of the client or its representative, company details, invoice data, the date, amount and purpose of payments and, for card payments, the card type, last four digits and expiry date that the payment provider gives us. We never see full card numbers or security codes.
- Purpose: to issue invoices, record payments and meet our accounting and tax duties.
- Legal basis: a legal obligation (GDPR Art. 6(1)(c)) under Lithuanian accounting and tax law.
- How long: for the period set by Lithuanian law on keeping documents.
3.5. Marketing messages
- Data: name, email address, phone number, and whether you open or click our messages.
- Purpose: to send you news, practical ideas and offers about our services.
- Legal basis: your consent (GDPR Art. 6(1)(a)), when you ask to hear from us. If you are already our client and did not object when you gave us your email address, our legitimate interest in offering you similar services of ours (GDPR Art. 6(1)(f)), as the Law on Electronic Communications allows.
- How long: until you withdraw consent or unsubscribe. After that we keep your address only on a do-not-contact list, so that we do not message you again.
You can opt out of any marketing message at any time, free of charge, with the link in the email or by writing to us.
3.6. Potential business clients
- Data: company name and the contact person's name, job title, work email address and work phone number.
- Purpose: to contact companies and introduce our services.
- Legal basis: our legitimate interest in presenting our services to other businesses (GDPR Art. 6(1)(f)). We use work contact details only and you can always opt out, free of charge.
- How long: 12 months from the last contact. If you ask us not to contact you again, we mark your details so that you get no more offers.
3.7. Testimonials and case studies
- Data: the name, job title, company, photo, video and words of a client who agreed to appear on the Site.
- Purpose: to show our work and results.
- Legal basis: consent (GDPR Art. 6(1)(a)).
- How long: until consent is withdrawn. Write to us and we will remove it from the Site.
3.8. Using the Site
- Data: IP address, browser and device information, pages visited, the time and length of the visit, the page you came from, and cookie identifiers.
- Purpose: to keep the Site working and secure and, with your consent, to understand how people use it.
- Legal basis: for necessary cookies and server logs, our legitimate interest in keeping the Site working and secure (GDPR Art. 6(1)(f)). For the basic analytics signal without cookies, our legitimate interest in knowing how many people visit the Site (GDPR Art. 6(1)(f)). For analytics cookies, your consent (GDPR Art. 6(1)(a)). For videos and the calendar, also your consent (GDPR Art. 6(1)(a)): given for all of them in the cookie banner, or for one item when you click it after the notice in the banner.
- How long: cookies and browser storage as listed in section 6. Google Analytics keeps event data for up to 14 months. Server logs stay with our hosting provider only as long as it needs them to keep the Site running and secure.
The calculator and the chat on the home page run in your browser. What you enter or choose there is not sent to us.
4. Where your data comes from
Most data comes directly from you, when you book a call, write to us or talk to us. Your employer may give us your name, job title and work contact details when your company works with us.
We may find the contact details of potential business clients (section 3.6) in public sources such as company websites, public registers and directories and professional social networks, or through referrals. Cookies collect some technical data about how the Site is used (section 6).
Giving us your data is your choice, but without contact details we cannot book a call or answer you, and invoices must by law include company details.
5. Who we share your data with
We do not sell your data or pass it to others for their own marketing. We share it only with service providers we need to run our business. The main ones are:
| Provider | What we use it for | Where data is handled |
|---|---|---|
| Hostinger | Hosting the Site and its server logs | EU |
| GoHighLevel (LeadConnector) | Booking calendar, contact records, emails and text messages | US |
| Google Workspace, including Google Meet | Email, documents, calendar and video calls | EU and US |
| Google Analytics | Site statistics: a basic signal without cookies, and full statistics with your consent | US |
| YouTube (Google) | Showing videos on the Site | US |
| Resend | Sending automated emails | US |
| Fireflies.ai | Recording and transcribing calls | US |
| Anthropic (Claude) | AI assistance with notes, analysis and drafting | US |
| Slack and ClickUp | Team messages and task tracking | US |
| Our external accountants | Accounting | Lithuania |
| saskaitos.lt | Issuing invoices | Lithuania |
| Stripe and PayPal | Taking online payments | EU and US |
| Banks and payment providers where we hold accounts | Receiving and making payments | EU |
We may also give data to public authorities, such as the State Tax Inspectorate, law enforcement or courts, when the law requires it, and to our legal or professional advisers when we need to defend our rights.
Transfers outside the European Economic Area
Some providers handle data outside the European Economic Area, mainly in the US. In those cases we transfer data only with proper protection: a European Commission adequacy decision, including the EU-US Data Privacy Framework where the provider is certified under it, or the European Commission's standard contractual clauses, with extra safeguards where needed. You can email us for information about the safeguards and a copy of them.
6. Cookies
Cookies are small text files a website stores on your device. Browser storage works in a similar way. We use necessary cookies without asking, because the Site cannot remember your choice without them. Everything else depends on your choice in the cookie banner, or on you clicking a video or the calendar. If you say no, you can still use the whole Site.
| Name | Provider | Purpose | Type | Lasts |
|---|---|---|---|---|
| cookie_consent | aiformula.co | Remembers your cookie choice | Necessary | 12 months |
| _ga, _ga_* | Google Analytics | Counts visits and shows how the Site is used | Analytics | Up to 2 years |
| __cf_bm | GoHighLevel calendar (Cloudflare) | Security check that tells people from bots | Videos and calendar | 30 minutes |
| ghl_analytics_user_id, ghl_geo_country_v1, v2_*, v3_* (browser storage) | GoHighLevel calendar | Keeps your calendar session, your country, the provider's usage statistics and a device identifier | Videos and calendar | Until you clear it; ghl_geo_country_v1 until you close the tab |
| cf.turnstile.u (browser storage) | GoHighLevel calendar (Cloudflare Turnstile) | Security check on the booking form | Videos and calendar | Until you clear it |
| VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, YSC, __Secure-YNID, __Secure-ROLLOUT_TOKEN | YouTube | Runs the video player and the provider's usage statistics | Videos and calendar | Up to 6 months; YSC until you close the browser |
| yt-*, ytidb::* (browser storage) | YouTube | Video player settings | Videos and calendar | Until you clear it |
You can change your choice or withdraw consent at any time with the "Cookie settings" link at the bottom of every page. You can also delete or block cookies in your browser, but some parts of the Site may then not work properly. See our cookie policy.
7. Your rights
Under the GDPR you have the right to:
- access your personal data and get a copy of it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased when it is no longer needed for its purpose, when you withdraw consent or when it is being handled unlawfully;
- restrict how your data is used, for example while we check that it is accurate;
- receive the data you gave us in a structured, commonly used, machine-readable format and pass it to another controller, when we use it based on consent or a contract;
- withdraw your consent at any time. This does not affect what we did before you withdrew it.
Your right to object. You can object at any time to our use of your data based on legitimate interest. You can object to direct marketing at any time and without giving a reason, and we will stop.
We make no automated decisions that have legal or similarly significant effects on you.
To use your rights, email ged@aiformula.co. We may ask you to confirm your identity so that we protect your data. We will answer without delay and within one month. If a request is complex we may take up to two more months and will tell you first. Using your rights is free of charge.
Complaints
If you think we handle your data unlawfully, you can complain to the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, LT-10312 Vilnius, phone +370 5 279 1445, ada@ada.lt, vdai.lrv.lt), or to the data protection authority of the EU country where you live or work. We would appreciate hearing from you first, so that we can try to put it right quickly.
8. Children
Our services are for businesses and adults. We do not knowingly collect data from anyone under 14. If we learn that we have, we will delete it without delay.
9. Security
We use technical and organisational measures to protect your data from loss, unauthorised access, alteration or disclosure. The Site uses encrypted HTTPS, only people who need data for their work can access it, our accounts use two-factor authentication where the service supports it, and our service providers work under data processing terms. If a data breach happens, we will tell the State Data Protection Inspectorate and, when the GDPR requires it, you.
10. Changes to this policy
We review this policy when our services, tools or the law change. The latest version is always on the Site, with its date at the top. We will announce important changes on the Site, or by email if we have your contact details.
11. Contact
For questions about this policy or your data, email ged@aiformula.co or write to Klientai, MB, V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania.