What we collect. What we do with it. In plain language.

Who operates ahalevel.com?

AHA (anti-hallucination architects) measures what AI systems and search channels tell customers about local businesses — scored as the AHA Level across Google, AI search, reviews, social, directories, and the website itself — and fixes what's wrong. Based in Wesley Chapel, Florida; serving Tampa Bay in person and US businesses remotely. For anything in this policy, contact us using the details at the bottom of this page.

Operator

AHA

Location

Wesley Chapel, Florida, United States

Role

Data controller for the personal information described on this page

What information does AHA collect?

We collect three kinds of information: what you type into our forms, basic technical data your browser sends automatically, and publicly available information about businesses that the AHA Level measures. We do not collect payment card numbers on this site, and we do not buy data about you from brokers.

• Information you provide. When you run a free scan, book an audit, join our email list, or contact us, we collect what you submit: your name (optional on the email form), email address, business name and details, and your answer to “How did you hear about us?”
• Automatic technical data. Our hosting provider logs standard request data — IP address, browser type, pages visited, and timestamps — for security and performance. We also read a referral parameter (?p=) in links we share, so we know which channel brought you here.
• Visitor analytics. We use Vercel Web Analytics to count visits and page views on our public pages. Each page view records a timestamp, the page address, a filtered version of any query parameters, the referring site, an approximate location down to city level, device type, and operating system and browser version. It uses no third-party cookies. Visitors are identified only by a hash created from the request itself, which is discarded after 24 hours. We do not run analytics on any page whose address can carry a token or a signed-in session, because those addresses can contain credentials and credentials do not belong in a measurement record.
• Public business information. The AHA Level is built from publicly observable data: business listings, reviews, search results, and social profiles. See §4 — this deserves its own answer.

How does AHA use your information?

We use your information to deliver what you asked for — scans, reports, audits, and replies — to send you our email updates if you opted in, to understand which channels bring people here, and to build anonymized, aggregated research. We never sell your personal information, and we never use it for third-party advertising.

• Service delivery. Producing your AHA Level report, scheduling and delivering engagements, and responding to your messages.
• Email updates. Roughly monthly contact if you joined the list. Every email includes a working unsubscribe link, honored promptly.
• Attribution. Your “how did you hear about us” answer and referral parameters tell us which channels work. This stays internal.
• Research. Scan activity feeds our quarterly regional research in anonymized, aggregated form only — see §5.

Does AHA measure businesses that never signed up?

Yes. The AHA Level ranks a business against its local competitors, so a report may score nearby businesses using only publicly available information — the same listings, reviews, and search results any customer could see. We collect nothing private about those businesses, and we report what we observe without exaggeration in either direction.

How does the quarterly research use scan data?

Each scan appends a dated, anonymized record to the dataset behind our quarterly regional visibility research. Published findings are aggregated — trends, distributions, and channel patterns — and never identify an individual person. Business-level findings appear in case studies only when anonymized or with the business’s permission.

Who does AHA share information with?

We share personal information only with the service providers that run this site and our communications, with authorities when the law genuinely requires it, and with a successor if the business is ever sold. We do not sell personal information, and we do not share it with advertisers or data brokers. Ever.

• Hosting and analytics. The site runs on Vercel, which processes server logs to serve pages, and processes page view events on our behalf for the visitor analytics described in §2. Vercel acts as a data processor for this purpose under its published Data Processing Addendum, is certified under the EU-U.S. Data Privacy Framework, and may process that data in the United States or elsewhere.
• Email delivery. Our email service provider processes list addresses to send updates.
• Legal requirements. Valid legal process, or protecting the rights and safety of our users or others.

Does ahalevel.com use cookies or trackers?

This site is deliberately light. We use no third-party advertising trackers and no render-blocking third-party embeds. A referral parameter in the URL may persist as you move through the site so your visit stays attributed to the channel that sent you. Any essential cookies exist only to make the site function.

We now use Vercel Web Analytics on our public pages, and this policy was versioned to say so, as the previous version said it would be. It uses no third-party cookies and does not follow you to other sites. Instead of a cookie, a visitor is identified by a hash created from the request itself, and that is discarded after 24 hours. It does not build a profile of you and there is no cross-site identifier. What it produces is counts: how many people visited a page, and roughly where from.

Are calls and meetings with AHA recorded?

Sometimes, and never silently. Florida law requires everyone on a call to consent to recording, and we follow it: any recorded call or video meeting is announced as recorded at the start, or shows a visible recording notice, before recording begins. If you’d rather not be recorded, say so — the conversation continues, unrecorded.

Recordings are used to deliver and improve our engagements, are stored securely, and are covered by the retention and deletion terms in §11 and §12.

Will AHA send you text messages?

Only if you expressly opt in. We do not send marketing texts to numbers that haven’t given prior express written consent. If you opt in, message frequency varies, message and data rates may apply, reply STOP at any time to opt out and HELP for help, and consent is never a condition of purchasing anything from us.

How does AHA protect data — and what if something goes wrong?

We keep the data surface deliberately small — the best protection is collecting little — and we restrict access to the personal information we do hold. If a breach of security affects your personal information, we will notify you as required by Florida’s Information Protection Act, and no later than 30 days after determining a breach occurred.

How long does AHA keep data?

Measurement records are the product: your baseline and every scan after it form a timeline we keep so your progress stays provable. Personal contact information is kept while we have an active relationship or you remain on the email list, then for as long as legal and accounting obligations require. You can request deletion of your personal information at any time.

The hash that distinguishes one visitor from another is discarded after 24 hours. What remains is aggregate counts, not linked to your contact record, your scan, or any account, and not usable to identify you.

Deleting personal information does not require deleting anonymized measurement records or observations of publicly available business data, which contain no personal identifiers.

What can you ask us to do with your data?

You can ask us what personal information we hold about you, ask us to correct it, ask us to delete it, and unsubscribe from email at any time. We honor these requests for everyone, not only where a specific law compels it. If you are in a jurisdiction with statutory privacy rights — such as the EU/UK or California — those rights apply as written.

• Access & correction. Request a copy of your personal information or fix an error in it.
• Deletion. Request removal of your personal information, subject to §8.
• Opt out. Unsubscribe from email via the link in any message or by contacting us.
• No discrimination. Exercising these rights never affects the service you receive.

Is ahalevel.com directed at children?

No. Our services are for businesses and business owners, and the site is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

How will you know when this policy changes?

This policy is versioned, like everything we publish. Material changes get a new version number, a new effective date, and a note describing what changed — you will never be comparing today’s policy to a quietly different yesterday. Continued use of the site after an update means the current version applies.

v1.5 · 2026-09-13

§1 now states who we are with the canonical definition sentence from the AHA fact sheet, in place of a description of audits, sprints, and workshops that are no longer offered. No change to what is collected or how it is handled.

v1.4 · 2026-08-26

Added Vercel Web Analytics on public pages. §2 now describes what it records and states that analytics is kept off any page whose address can carry a token or a signed-in session; §6 names Vercel as an analytics processor; §7 replaces the future-tense analytics commitment with what we actually do; §11 states the 24-hour discard.

v1.3 · 2026-08-08

Canonical domain corrected to ahalevel.com sitewide; operator references normalized to AHA.

v1.2 · 2026-08-08

Privacy contact confirmed as privacy@ahalevel.com.

v1.1 · 2026-08-08

Added §8 Calls & recordings, §9 Text messages, §10 Security & breaches; added written-response commitment to §4 disputes.

v1.0 · 2026-08-08

Initial publication.