GDPR Policy

1. Introduction

Belvair AI, LLC (“Belvair”, “we”, “us”) is committed to protecting the privacy and personal data of our users in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This policy explains how we collect, process, store, and protect personal data.

2. Data Controller

Belvair AI, LLC
1111B S Governors Ave, Suite 59942
Dover, DE 19904, United States
Email: hello@belvair.ai

3. Personal Data We Collect

We may collect the following categories of personal data:

• Identity Data: Name, business name
• Contact Data: Email address, phone number, country
• Technical Data: IP address, browser type, device information, cookies
• Usage Data: Pages visited, time on site, referral source
• Communication Data: Messages submitted through our contact form

4. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent (Art. 6(1)(a)): When you submit a contact form or accept cookies
• Contractual Necessity (Art. 6(1)(b)): To provide our website-building services
• Legitimate Interest (Art. 6(1)(f)): To improve our services, analyze site performance, prevent fraud, and conduct B2B commercial prospection to professional tradespeople via SMS (see Section 6 below)
• Legal Obligation (Art. 6(1)(c)): To comply with applicable laws and regulations

5. How We Use Your Data

• To respond to your inquiries and provide customer support
• To deliver and maintain our website-building services
• To send service-related communications
• To analyze and improve our website and services
• To comply with legal obligations

6. B2B Commercial Prospection & Demo Sites

Belvair operates a B2B commercial prospection programme targeting professional tradespeople and businesses in France that do not currently have a website.

Data collected: Business name, owner name, professional phone number, city, and trade/industry — sourced exclusively from publicly available professional directories and official business registries. No private or residential data is collected.

Legal basis: Legitimate interest (Art. 6(1)(f)). A documented Legitimate Interest Assessment (LIA) following the three-part test (purpose, necessity, balancing) is maintained internally and available upon request by a supervisory authority.

Processing activities:

• Sending SMS messages (maximum 3 per business) to offer website creation services
• Hosting personalised demo websites that track page visits, scroll depth, and time spent
• Managing opt-out requests via a permanent suppression list

Safeguards: Messages are sent only Monday–Saturday, 10:00–20:00 Paris time, excluding French public holidays. Every message and demo site includes a clear, immediate opt-out mechanism.

Right to object (Art. 21(2)): You have an absolute right to object to processing of your personal data for direct marketing purposes at any time, without needing to provide any justification. To exercise this right, click “Stop SMS” on any demo site, use the opt-out page, or email hello@belvair.ai. Once you opt out, your phone number is added to a permanent suppression list and you will never be contacted again.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for up to 24 months. Technical data collected via cookies is retained for up to 12 months.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your personal data
• Right to Restrict Processing (Art. 18): Limit how we use your data
• Right to Data Portability (Art. 20): Receive your data in a structured format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time

To exercise any of these rights, contact us at hello@belvair.ai.

9. International Data Transfers

As a US-based company serving European customers, we may transfer data outside the EEA. We ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable, to protect your data during such transfers.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (SSL/TLS), access controls, and regular security reviews.

11. Third-Party Processors (Sub-Processors)

We use the following sub-processors to deliver our services. All sub-processors are bound by data processing agreements and are required to implement appropriate technical and organisational safeguards.

11a. Data Processing Agreement (DPA)

If you are a business (data controller) using our services and require a Data Processing Agreement under Article 28 GDPR, we are happy to provide one. Please email hello@belvair.ai with the subject line “DPA Request” and we will send you a signed DPA within 5 business days.

12. Supervisory Authority

If you are located in the EU/EEA, you have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.

13. Changes to This Policy

We may update this GDPR policy from time to time. Changes will be posted on this page with the updated date. We encourage you to review this policy periodically.

14. Contact

For any GDPR-related inquiries, contact us at:
Email: hello@belvair.ai
WhatsApp: Message us on WhatsApp
Belvair AI, LLC, 1111B S Governors Ave, Suite 59942, Dover, DE 19904