Privacy Policy

AHFIA is run by TODO legal entity name (“AHFIA”). This policy explains what AHFIA collects when an agency and its team use it, why, who else handles it, and how to have it removed. Questions go to [email protected].

Who is responsible for what

For the leads, contacts, deals and calls an agency brings in from its own tools, the agency decides what is collected and why, and AHFIA processes that data on the agency’s behalf. For the accounts of the people who sign in to AHFIA, AHFIA is responsible.

What AHFIA collects

• Your account: name, email address, password (stored only as a hash by our sign-in provider), passkeys, the agency you belong to and your role in it.
• Your agency’s Close data: once an owner or admin connects Close, AHFIA keeps a copy of the leads, contacts, won deals, calls, meetings and form activities it needs for the dashboard, and refreshes it every few minutes.
• Connected tools: the API keys an agency enters for Close, Whop, Calendly, OnceHub, iClosed, Fathom or an AI provider, and the payments, bookings and recordings those tools report.
• Using AHFIA: assistant conversations, settings and preferences, devices you turn notifications on for, and the sign-in sessions on your account.
• Errors: when something breaks, a report of the error and the page it happened on, so it can be fixed.

How it is used

Only to run AHFIA for your agency: to show the dashboard, write the activities your agency set AHFIA up to log in Close, send the emails and notifications you asked for, answer assistant questions, keep accounts secure and fix problems. AHFIA does not sell personal data, does not use it for advertising, and does not train AI models on it.

Keys and security

Every API key is encrypted with AES-256 before it is stored and is only decrypted on the server to make a request to its tool. Only an agency’s owners and admins can manage its keys, and only you can manage a key you added for yourself. All traffic is encrypted in transit. Removing a tool in Settings deletes its stored key at once.

Who else handles data

AHFIA relies on these services to run:

• Supabase: database and sign-in.
• Railway: application hosting.
• Resend: account and invite emails.
• Sentry: error reports.
• Apple, Google and Mozilla push services: delivering notifications to devices that turned them on.
• OpenRouter and the AI model your agency chooses: assistant questions and the Close data needed to answer them, sent with your agency’s own key.

The tools an agency connects (Close, Whop, Calendly, OnceHub, iClosed, Fathom) receive and return data under that agency’s own agreement with them.

Cookies

AHFIA uses only the cookies needed to keep you signed in and remember interface choices such as a collapsed sidebar. There are no advertising or tracking cookies.

How long data is kept

Data is kept while the agency uses AHFIA. When an agency asks for its account to be closed, its data, copies of its tool data and stored keys are deleted within 30 days, apart from what the law requires keeping.

Your choices

You can see and change your profile in Settings, and owners can remove any connected tool there. To get a copy of your data, correct it, or have an account or agency deleted, email [email protected]. If your data came from an agency’s tools (for example, you are one of its leads), contact that agency, and AHFIA will help it respond.

Changes

If this policy changes in a way that matters, agency owners will be told by email before it takes effect. The date at the top always shows the latest version.