Privacy Policy

Effective date: May 8, 2026  ·  Last updated: May 8, 2026

1. Introduction

Birdai Labs, Inc. ("the Company," "we," "us," or "our") operates the website birdaix.org and provides an AI-powered behavioral fraud-risk scoring API (the "Service") used by risk and fraud teams at digital-finance platforms. This Privacy Policy explains what information we collect on birdaix.org, how we use it, and the choices you have. It applies to information we collect through this website and through direct communications with us.

Birdai Labs, Inc. is headquartered at 379 West Broadway, Suite 2A, New York, NY 10013. Questions about this Policy can be directed to [email protected].

Platform operator data note. When our customers (digital-finance platforms) submit transaction records, device signals, and behavioral data to the Birdai scoring API for fraud-risk analysis, that submission is governed by the service agreement between the Company and the operator, not this Policy. The operator is the data controller for the transaction data they submit; the Company acts as a data processor on their behalf. This Policy covers only information the Company collects directly through birdaix.org.

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly through birdaix.org, including:

  • Contact details (name, work email, phone) when you fill out our contact or early-access request form;
  • Company or platform information you choose to share (employer, role, transaction volume context);
  • The content of any messages or inquiries you send us.

We use this information to respond to your inquiry, evaluate your fit for early access, and follow up with relevant product information.

2.2 Information Collected Automatically

When you visit birdaix.org, we automatically collect limited technical information:

  • IP address and approximate location (city or region level);
  • Browser type, operating system, device class;
  • Pages visited, referring URLs, time on page;
  • Cookie and similar identifiers (see Section 5 and our Cookie Policy).

This information helps us understand how visitors find and use the site, and to diagnose technical issues.

2.3 We Do Not Knowingly Collect Children's Data

birdaix.org is a B2B product site directed at professionals in digital-finance operations. It is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it promptly.

3. How We Use Information

We use information collected through birdaix.org to:

  • Respond to inquiries and provide information about the Birdai scoring platform;
  • Evaluate and process early-access requests from digital-finance operators;
  • Operate, maintain, and improve this website;
  • Send service-related updates and, where you have expressed interest, communications about product developments;
  • Measure site usage through aggregated analytics to understand which content serves risk and fraud professionals best;
  • Comply with applicable legal obligations.

We do not sell personal information collected through birdaix.org. We do not use contact information submitted through this site to train machine learning models.

4. Sharing of Information

We share personal information collected through birdaix.org only with:

  • Service providers acting strictly on our behalf -- for example, hosting providers, transactional email services, and web analytics -- under contractual terms that restrict their use of the data to service delivery;
  • Authorities, when required by law, court order, or to protect the rights, safety, or property of the Company or others;
  • A successor entity in the event of a merger, acquisition, or sale of assets, subject to the terms of this Policy.

We do not sell personal information to third parties and do not share it for third-party advertising purposes.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. We do not use marketing or cross-site tracking cookies. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purpose for which it was collected. Specifically:

  • Contact and inquiry records are retained for up to 24 months from last contact, unless you request deletion sooner;
  • Early-access applicant records are retained for the duration of the evaluation process and up to 12 months thereafter;
  • Server access logs are retained for 90 days and then aggregated or deleted;
  • Marketing-list records for contacts who have not engaged are purged after 24 months.

7. Security

The Company operates in the financial-crime detection space and treats data security as a core operational concern. We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access systems, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security and disclaim any guarantee to that effect.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. New York Residents

New York does not currently have a comprehensive consumer privacy statute comparable to California's CCPA. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

  • Right to Know: request the categories of personal information we have collected about you.
  • Right to Delete: request deletion of personal information you have provided.
  • Right to Correct: request correction of inaccurate personal information.
  • Right to Opt Out of Marketing: unsubscribe from marketing emails or opt out via the link in each marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (for example, the Gramm-Leach-Bliley Act or other financial privacy statutes), those laws may give you additional rights with respect to data covered by them. As a B2B fraud-risk analytics provider, the Company is aware of its obligations as a service provider to regulated financial institutions.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. The Company does not sell personal information and does not share personal information for cross-context behavioral advertising. To submit a CCPA or CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date at the top of this page and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints regarding this Privacy Policy can be sent to:

Birdai Labs, Inc.
379 West Broadway, Suite 2A
New York, NY 10013
Email: [email protected]
Phone: +1 (212) 553-8820