Who is responsible
The controller of the personal data described here is Capture Motion, MB, a private limited liability company registered in Lithuania, registry code 306366609, VAT number LT100020349115, registered office Perkūnkiemio g. 19, LT-12120 Vilnius, Lithuania. Unfair AI Advantage is a brand it trades under.
Write to hello@unfairaiadvantage.com for anything in this notice, including a request to delete your data.
Because we are established in the European Union, the General Data Protection Regulation applies to what we do here, and it applies wherever in the world you happen to be reading this. Article 3(1) attaches to our establishment, not to your address. If you are in the United States, the state-law rights in the United States section apply to you in addition.
The short version
You can read this whole website without giving us anything. Nothing you type into the questionnaire leaves your browser until you reach the last step.
The questionnaire is where data starts moving, and it starts at the contact step. Once you have entered a valid email address, closing or switching away from the tab sends everything you have entered so far to our CRM. When step 8 loads, your answers also go into our booking provider's form so you do not have to retype them — that happens when the step renders, before you click anything.
Analytics and session replay do not run until you allow them, wherever you are. Two other third parties load with the feature they serve, not with the page: the video player on the landing page, and the booking calendar once you reach the booking step. Both are named below.
One email deletes you. No form, no account, no proof of identity beyond confirming you control the address.
What we collect and why
Three things, and nothing else. We do not buy lists, we do not enrich your record from data brokers, and we do not build a profile of you across other websites.
1. What you tell the questionnaire
First and last name, email address, phone number if you give one, your gym's name, its city and state, its website, the type of gym, your role in the decision, how soon you want to start, the work areas you selected and the tools you selected.
- Why: to decide whether we can help you, to prepare for the call, and to contact you about it.
- Legal basis: steps taken at your request before entering a contract (GDPR Art 6(1)(b)), and our legitimate interest in following up on an enquiry we did not finish (Art 6(1)(f)). You can object to that follow-up at any time and we will stop.
- If you abandon it: from the moment you have typed a valid email address, closing the tab or switching away from it sends everything you had entered by that point to our CRM, marked with the step you stopped at. You do not have to reach the end, and you do not have to press anything. We do this so a genuine enquiry is not lost. It is also the processing most people do not expect, which is why it is stated here in its own sentence rather than buried in a list. If you then do not book a call, our team gets a short notice in our internal chat (Slack) so that someone can follow up: it says which step you stopped at, repeats your gym-type, readiness and work-area answers, and links to your record in our CRM. It never contains your name, email, phone number, gym name or location.
2. The booking
If you pick a time, our booking provider creates the appointment, sends the confirmation emails and the calendar invite, and gives you the reschedule and cancel links. It holds the same answers plus the times you chose.
- Legal basis: Art 6(1)(b), performing the meeting you asked for.
3. What your browser reports
Standard request data our host records to serve the page and keep it up: IP address, user agent, the page requested, the time, and the referring page. If you allow measurement tags, they additionally record how you moved through the site and may record a replay of your session on this website.
- Legal basis: legitimate interest in operating and securing the site (Art 6(1)(f)) for the server records; your consent (Art 6(1)(a)) for analytics and session replay, asked for in the same way wherever you are. We are established in Lithuania, so the GDPR governs how we handle your data whether you are in Vilnius or in Texas, and we did not want a version of this that was true in one place and not the other.
Do you have to give us any of this?
No. There is no law and no contract obliging you to. It is simply what we need in order to hold a fit call: without a name and an email we cannot book one, and without the details about your gym we cannot tell you whether we can help. Nothing else follows from declining. You can read every page of this site, and nothing on it is held back.
What we never ask for
No payment card details are collected on this website, at any step. Nobody from Unfair AI Advantage will ask you for card details, bank credentials or a password by email. If a message claiming to be from us does, it is not from us.
Cookies and tracking
A tag is a small piece of code that stores or reads something on your device. Lithuanian law, implementing the ePrivacy Directive, allows that without asking only when it is strictly necessary to deliver what you asked for. Measurement is not strictly necessary, so it sits behind a choice.
| Tag | Provider | What it does | Runs |
|---|---|---|---|
| Google Analytics 4 | Counts visits and which pages and buttons led to a booking. | Only with your consent | |
| Microsoft Clarity | Microsoft | Aggregate heatmaps, and a replay of your session on this site, so we can see where the questionnaire confuses people. | Only with your consent |
| Vidalytics | Vidalytics | Plays the video on the landing page and reports how much of it was watched. | Loads with the video player, on the pages that have one. It is not behind the consent choice, because the video is the thing you came to that page for. |
| Cal.com booker | Cal.com | Shows the calendar and takes the booking. Cal.com's infrastructure sets a bot-protection cookie that lasts about 30 minutes. | Only when you reach the booking step. Nothing contacts Cal.com before then. |
| Meta Pixel & Conversions API | Meta (Facebook/Instagram) | Tells us which ad, if any, brought you here, and lets us show ads to people who resemble past visitors. Sets the cookies _fbp and, if you arrived from a Meta ad, _fbc. We also send Meta a matching copy of this same information directly from our server — your name, email and phone, always hashed before it leaves us — when you reach the contact step of the questionnaire, so the ad platform still knows about your enquiry even if the pixel in your browser is blocked. | Only with your consent |
| Consent record | us | Stores your Accept or Decline in your browser so you are not asked again. No identifier, no tracking. | Strictly necessary |
Session replay, said plainly. Microsoft Clarity can record your mouse movement, clicks, scrolling and typing on the pages of this site, including the questionnaire. It is configured to mask text entered into form fields, and we do not use it to read what you typed. We are naming it here rather than describing it as "analytics" because a recording is a different thing from a visit count, and you should be able to decide about it knowing that.
One button covers more than one thing, and that is a simplification we are telling you about. Aggregate counting, full session replay and the Meta pixel are different in kind, and Accept currently allows all three. If you want the counting but not the recording or the ad measurement, email us and we will confirm what is off for you; a separate set of controls is on the list.
The Meta pixel, added 2026-09-11. Accepting now also starts a Meta (Facebook/Instagram) pixel on this site, and a matching copy of your name, email and phone — always hashed before it leaves our server, never sent in the clear — when you reach the contact step of the questionnaire. This is the update we said we would make before an advertising pixel went live: if your browser still remembers an earlier choice made before this date, we are asking you again, in the banner, in these words.
Your tracking choice
Use these buttons. They take effect immediately and are remembered in this browser.
Checking your current setting…
One honest limit. If a tag already loaded in the page you are looking at, turning measurement off stops it storing anything further and stops it loading on every page after this one, but a script already running cannot be unloaded from the page in front of you. Turning it off also deletes the cookies those tags had set on this device. A measurement already queued for upload may still leave; from your next page onwards, nothing does.
We also honour the Global Privacy Control signal. If your browser or extension sends it, measurement stays off everywhere on this site and we treat it as an opt-out of any sharing for advertising, whether or not you live somewhere that requires us to.
Blocking these tags does not break anything. The questionnaire, the booking and every page work exactly the same.
Sending data outside the EEA
We are in Lithuania and several of the companies above are in the United States, so your data is transferred out of the European Economic Area.
- United Kingdom: covered by the European Commission's adequacy decision, so no additional safeguard is needed.
- United States: an adequacy decision exists — Commission Implementing Decision (EU) 2023/1795 — but it covers only organisations certified under the EU–U.S. Data Privacy Framework. Where a provider is certified, that decision is our basis. Where it is not, we rely on the European Commission's Standard Contractual Clauses under Art 46(2)(c), with the supplementary measures in that provider's terms.
Ask us and we will tell you which of the two applies to a specific provider, and send you a copy of the clauses.
How long we keep it
| What | Kept for |
|---|---|
| An enquiry that did not become a client | 24 months after the last contact, then deleted. |
| An enquiry you asked us to delete | Deleted within 30 days, and we keep only the email address on a short suppression list so we do not contact you again. |
| A client relationship | For the relationship, then as long as Lithuanian accounting and tax law requires us to keep the records. |
| Booking records held by Cal.com | Per its retention, deleted on request with ours. |
| Our internal Slack notice about an unfinished application | Deleted together with the enquiry it points to: within 30 days if you ask us, otherwise at the 24-month limit above. |
| Analytics | Google Analytics: 14 months. Clarity: per Microsoft's retention for the project. |
| Meta pixel and Conversions API events | Per Meta's own retention for advertising data, typically around 180 days. Meta, not us, controls this clock. |
| Server request logs | Short-term, per our host's standard retention. |
Your rights
Under the GDPR you can ask us to do all of the following, and we will not charge you or make it difficult.
- See it — a copy of what we hold about you (Art 15).
- Fix it — correct anything wrong or incomplete (Art 16).
- Delete it — erasure (Art 17).
- Freeze it — restrict processing while something is disputed (Art 18).
- Take it — receive it in a portable, machine-readable form (Art 20).
- Object — to processing based on our legitimate interest, including any follow-up about an abandoned enquiry (Art 21).
- Withdraw consent — at any time, for the measurement tags, using the buttons above (Art 7(3)). Withdrawing does not undo what was lawful before.
The right to object, stated separately because it has to be
Where we rely on our legitimate interest — which is the basis for following up on an enquiry you did not finish — you have the right to object at any time, and we will stop unless we can show compelling legitimate grounds that override your interests. One line in an email is enough. GDPR Art 21 requires this to be brought to your attention clearly and separately from everything else on this page, and that is why it is in its own box.
Email hello@unfairaiadvantage.com from the address you gave us, or tell us which address to look up. We answer within one month, as Art 12(3) requires. We do not make automated decisions about you that produce legal or similarly significant effects.
If you live in the United States
State privacy laws — the California Consumer Privacy Act as amended by the CPRA, and comparable laws in Virginia, Colorado, Connecticut, Utah, Texas and others — set out rights over this kind of data. Most of them only bite on companies above certain size thresholds, and a company our size very likely sits below all of them. We give you these rights anyway, as a matter of policy, and we do not check which state you are in before doing so.
- Categories collected: identifiers (name, email, phone), commercial information about your business, and internet activity on this website. We do not collect sensitive personal information, and we do not collect biometric, geolocation-precise or financial-account data here.
- We do not sell your personal information. Not for money, and not for anything else of value.
- Sharing for cross-context behavioural advertising: since 2026-09-11, our Meta pixel and Conversions API make this active — it is what "sharing" under the CCPA/CPRA describes. To opt out of this sharing, use Turn measurement off above, or send Global Privacy Control, which we honour automatically before you have to ask. Declining stops the pixel and the matching server-side event for you; it does not touch anyone else's data.
- Your rights: to know, to access, to delete, to correct, to opt out, and not to be discriminated against for exercising any of them. Use the same email address; there is no separate US process.
Security
The site is served over HTTPS only. The endpoint that receives your questionnaire answers holds no credentials in the browser, trims oversized fields rather than storing them whole, and keeps our CRM key on the server, never in the page. Access to the CRM is limited to the people who need it. We are a small company and we say what we do rather than claiming a certification we do not hold: we have no ISO 27001 or SOC 2 report.
If a breach is likely to result in a high risk to your rights, we will tell you as well as the supervisory authority, as Art 34 requires.
Children
This website is for gym owners and operators. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us data, email us and we will delete it.
Changes
When this notice changes, the version date at the top of the page changes with it. If a change materially affects how we use data we already hold, we will contact people whose data it affects rather than relying on you to re-read the page. Adding a tracking tag counts as material, and the consent choice is reset when it happens.
Contact and complaints
Email hello@unfairaiadvantage.com, or write to Capture Motion, MB, Perkūnkiemio g. 19, LT-12120 Vilnius, Lithuania. We are not required to appoint a data protection officer and have not appointed one; the address above reaches the person who decides these things.
If you think we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to a supervisory authority. Ours is the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt. If you are in the EEA you may instead complain to the authority where you live or work.