Privacy Policy

1. Introduction

AORTA, Inc. ("AORTA," "we," "us," or "our") provides psychology-driven, AI-powered advertising management services, including our proprietary AI agent, Artery AI (together, the "Services"). This Privacy Policy explains what information we collect through our website at aorta.work (the "Site") and our Services, how we use and share it, and the choices you have. By using the Site or our Services, you agree to the practices described in this Privacy Policy.

This Policy is written to give you a clear, practical understanding of our data practices. It is not a substitute for legal advice, and nothing here creates any rights or obligations beyond what applicable law requires.

2. Information We Collect

We collect information in the following ways:

• Information you provide directly: name, email address, phone number, company name, and any details you submit through our contact forms, quote requests, or when you sign up for our Services or the Artery AI client dashboard.
• Information collected automatically: IP address, browser type, device type, operating system, pages viewed, referring/exit pages, time spent on the Site, and general location data (city/region level), collected via cookies, pixels, and similar technologies.
• Information from third parties: data passed to us by advertising and analytics partners (such as Google and Meta) when you interact with our ads or arrive at our Site from one of their platforms.
• Information related to our Services: if you are a client, we may collect campaign data, ad account access, creative assets, brand assets, and performance metrics needed to operate your advertising campaigns and the Artery AI dashboard.

3. Cookies & Tracking Technologies

Cookies are small text files stored on your device that help us recognize your browser, remember preferences, and understand how visitors use the Site. We use the following categories of cookies:

• Essential cookies: required for the Site to function properly (e.g., remembering your cookie consent choice).
• Analytics cookies: help us understand how visitors use the Site (e.g., Google Analytics).
• Advertising cookies: used by our advertising partners (Google Ads, Meta Ads) to measure ad performance and, where you've consented, to personalize ads you see on and off our Site.

When you first visit the Site, you'll see a cookie consent banner. Analytics and advertising cookies are not activated until you click "Accept." If you click "Decline," only strictly necessary cookies are used, and analytics/advertising cookies remain off. You can change your choice at any time by clearing your browser's local storage/cookies for this Site and reloading the page, which will show the banner again. Most browsers also let you block or delete cookies directly in your browser settings, though doing so may affect Site functionality.

4. Google Ads & Google Analytics

We use Google Analytics (GA4) to understand Site traffic and usage patterns, and we use Google Ads to run and measure advertising campaigns, including remarketing. These tools may use cookies and similar technologies to collect information such as your IP address, device identifiers, and browsing behavior on our Site and, in the case of remarketing, to show you AORTA ads on other websites you visit.

We implement Google's Consent Mode, meaning analytics and advertising cookies tied to Google's tools only fire after you accept cookies through our consent banner. You can learn more about how Google collects and processes data at Google's Partner Sites policy, and you can opt out of Google Analytics tracking generally using the Google Analytics Opt-out Browser Add-on. You can also manage your Google Ads personalization settings at myadcenter.google.com.

5. Meta Ads (Facebook & Instagram)

We use Meta's advertising products (including the Meta Pixel and Conversions API where applicable) to run, measure, and optimize advertising campaigns on Facebook, Instagram, and Meta's ad network, both for our own marketing and, in aggregate/anonymized or client-authorized form, on behalf of clients whose campaigns we manage. These tools may collect information such as your IP address, device identifiers, pages visited, and actions taken on our Site, and may match this information to your Meta account to measure ad effectiveness or show you relevant ads.

Meta acts as an independent controller of data it collects through its business tools. You can review Meta's own data practices in the Meta Privacy Policy, and manage the ads you see through your Meta Ad Preferences settings.

6. How We Use Information

We use the information we collect to:

• Operate, maintain, and improve the Site and our Services;
• Respond to inquiries, quote requests, and provide customer support;
• Deliver, manage, and report on advertising campaigns for our clients, including through Google Ads and Meta Ads;
• Operate the Artery AI dashboard and generate campaign assets, insights, and recommendations for clients;
• Measure and improve the performance of our own marketing, including remarketing to prior Site visitors;
• Detect, investigate, and prevent fraud, abuse, and security incidents; and
• Comply with legal obligations.

7. How We Share Information

We do not sell your personal information. We may share information with:

• Advertising and analytics platforms (Google, Meta) as described above, to run and measure campaigns;
• Service providers who help us operate the Site, our Services, and the Artery AI dashboard (e.g., hosting providers, email delivery services, payment processors, cloud infrastructure providers), bound by confidentiality and data-protection obligations appropriate to the services they provide;
• AI infrastructure providers used to power Artery AI's generation and analysis features, solely to deliver the Services;
• Professional advisors such as attorneys or accountants, as needed; and
• Legal or regulatory authorities, where required by law, subpoena, or to protect our rights, property, or safety, or that of our clients or the public.

If AORTA is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

8. Artery AI & Client Dashboard Data

Clients who engage AORTA receive access to Artery AI, our proprietary AI marketing agent, and an associated client dashboard. Data processed through Artery AI and the dashboard (including brand assets, campaign data, ad account connections, and generated content) is used solely to deliver and improve the Services for that client, and is not shared with other clients. Artery AI may use third-party AI model providers to generate content and analysis; those providers process data under contractual terms that limit their use of client data to providing the underlying AI service.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including maintaining client relationships, complying with legal, tax, and accounting obligations, and resolving disputes. Analytics and advertising cookie data is generally retained according to the retention periods set by Google and Meta for their respective tools.

10. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, and to object to certain processing (including for direct marketing or advertising purposes). This may include rights under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as applicable.

To exercise any of these rights, contact us at hello@aorta.work. You can also manage cookie-based advertising preferences directly with Google and Meta using the links provided above, and can opt out of interest-based advertising generally through the Digital Advertising Alliance or Network Advertising Initiative opt-out pages.

12. Children's Privacy

Our Site and Services are directed at businesses and individuals over the age of 18 and are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

13. International Visitors

We are based in the United States, and information we collect is processed and stored in the United States. If you access the Site from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date at the top of this page when we do. Continued use of the Site after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

AORTA, Inc.
Email: hello@aorta.work
Phone: 818.383.1748