Aida

Privacy Notice

Last updated 20 October 2026

This notice covers the Aida diagnostic service at aida.chowdhree.com and the automation services operated on the chowdhree.com domain, including those that connect to Google APIs. For the purposes of the UK GDPR we are the data controller for the personal data described below.

Who we are

Aida is an independent service that interviews businesses about how they work, with an AI interviewer, so we can understand where AI could help them. You can reach us at hello@chowdhree.com for any question about this notice or to exercise the rights described at the end of it.

The discovery interview

If you take part in a conversation with Aida (about 20 minutes, by voice or by typing), this is what happens to what you share.

• What we collect: the details you give at the start (name, role, company, work email, phone if you add it, team size, industry); what you say, as a written transcript; the notes Aida takes; and the summary she shows you at the end. We do not store a recording of your voice: it is streamed to the AI provider during the call and not kept by us.
• Who processes it: Google (Gemini, through Vertex AI) runs the conversation in real time. So that a dropped connection can resume, Google may hold the session’s data for up to 24 hours. After the call, Google or Groq writes an analysis of it for our team. These providers act on our instructions and may not use your data for their own purposes.
• Who sees it: the Aida team. A report with your details, the summary, the analysis, the notes and the transcript is emailed to them. Aida is independent of Jibble, but members of our team also work at Jibble, and what you tell us about how you use Jibble may be passed to Jibble’s product team as feedback, without your name or contact details.
• Why we may hold it: your consent, which you give before the conversation starts, for transcribing what you say (the voice itself is not stored); and our legitimate interest in delivering the diagnostic you asked for and keeping the service secure. We contact you after the conversation only if you ask for a follow-up.
• Continuing later: if you pause, close the page or lose your connection before the summary, we keep what you had said and email a one-time link to the address you gave us, so you can carry on where you stopped. The link works once and for 14 days; we store only a scrambled (hashed) form of it, so a copy of our records cannot be turned into a working link. You can also ask for a new link from the first screen. If you do nothing, we send no further message about that conversation. Our team still receives the report of what you had said so far.
• Confirming your email, and a cookie: before the conversation we send a link to the address you give, and you start by clicking it. That click sets one cookie on your device, for 30 days, so you can come back on the same browser without another email. It holds a random code only; we keep a scrambled (hashed) copy of it, and it is needed for the interview to work. Choose “Not you? Use a different email” on the first screen to remove it. We keep a short log of the confirmation emails we send (the address and the time) to stop anyone using the form to flood an inbox. To check that a visitor is a person and not a program, the registration form uses Cloudflare Turnstile, which reads signals from your browser and your IP address.
• Your strategy page: if our team publishes a strategy page for you after the conversation, it opens only after an email check: we send a one-time sign-in link, which works once and for 30 minutes, to the address you gave us, and to no other (the form that asks for it uses the same Cloudflare Turnstile check as registration). Following it sets one cookie on that device, aida_strategy, for 90 days, so you stay signed in there. It holds a random code only, and we keep a scrambled (hashed) copy of it; signing out on the page removes it. The page and its sign-in records are deleted with the interview after 13 months. If we take the page down sooner, its link stops working at once and its sign-in records are deleted.
• How long: the interview record is kept for 13 months, then deleted. You can ask us to delete it sooner, or to send you a copy, at any time.

Other services on chowdhree.com

The sections below cover the rest of the domain: the website itself, shared points like retention and your rights, and the private automation services that use Google account data.

What we collect

• Business details you type in: company name, sector, approximate headcount, and the operational problem you describe.
• Your voice and its transcript, if you use the voice consultation. This is the only sensitive category we handle, and we only capture it after you have actively consented.
• Derived figures: the hours, rates and cost estimates computed during the session.
• Basic technical data needed to run a web service securely, such as error logs. We do not run third-party advertising or behavioural tracking cookies.

Why we are allowed to hold it

We rely on two lawful bases under Article 6 of the UK GDPR:

• Consent — for transcribing your voice, and for processing the audio through specialist AI providers. You give this explicitly before the session starts and it is timestamped; once in the conversation you can mute and type at any time.
• Legitimate interests — for delivering the diagnostic you asked for, keeping the service secure, and producing the report. We have balanced this against your rights and consider the impact minimal, because you initiated the service and control what you tell us.

Who else sees it

We use specialist AI processing providers to convert speech to text, to conduct the conversation, and to generate the written plan. They process the data on our instructions and are not permitted to use it for their own purposes, including model training. We also use a cloud hosting provider to serve the site. We do not sell your data and we do not share it for third-party marketing.

Named members of our team can read your conversation, Aida’s notes and your plan, in a private, access-controlled cockpit, to support you and to improve the service. Nobody else can.

Where a provider processes data outside the UK, we rely on the appropriate safeguards required by UK law for that transfer.

Visitor analytics

To understand how the page is used, we count visits in two ways. Neither uses cookies or anything stored in your browser, and neither records your IP address.

• Cloudflare Web Analytics, our hosting provider’s privacy-first, cookieless page-view counter.
• Our own event log: when the page is viewed, whether Aida’s greeting played with or without sound, and whether it was tapped, stopped, replayed or finished. Each entry holds the time, the page, the country and region your network is in, the type of device and browser, and the website that linked here, if any. A random number made for that one page load ties its events together; it is not stored on your device.

We rely on legitimate interests (understanding and improving the site). The event log is kept for 13 months, then deleted.

How long we keep it

We do not keep recordings of your voice. A discovery interview (your details, the transcript, the notes, the summary and our report) is kept for 13 months, then deleted. The short log of confirmation emails is kept for 30 days, and the record behind your cookie until the cookie expires. A strategy page we publish for you, with its sign-in records, goes with the interview. Reports from our earlier diagnostic service, which has closed, are kept for 24 months from the session, then deleted. You can ask us to delete everything sooner.

Your rights

You have the right to access your data, to correct it, to have it erased, to restrict or object to processing, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time, though this does not affect processing already carried out. To exercise any of these, contact hello@chowdhree.com. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.