Privacy Policy

Last updated: March 6, 2026

1. Introduction

Ivory AI ("we", "our", "us") operates the Ivory AI platform at ivoryai.net. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

Account Information: When you sign up, we collect your name, email address, and password (stored as a secure hash).

Business Data: Practice name, address, phone number, website URL, services, hours, and other publicly available business information used to train your AI agent.

Chatbot Interactions: Messages exchanged between website visitors and your AI agent, including any contact information visitors voluntarily provide (name, phone number, email, appointment preferences).

Usage Data: IP addresses, browser type, pages visited, and timestamps collected automatically for analytics and security purposes.

Payment Information: Billing is processed by our payment provider (Lemon Squeezy). We do not store credit card numbers on our servers.

3. How We Use Your Information

  • Provide, maintain, and improve the Ivory AI service
  • Train and customize your AI chatbot agent
  • Send lead notifications and service-related emails
  • Process payments and manage subscriptions
  • Respond to customer support inquiries
  • Protect against fraud and abuse

4. Third-Party Services

We use the following third-party processors to deliver our service:

  • OpenAI — Powers the AI chatbot conversations. Messages are sent to OpenAI's API for processing.
  • Resend — Email delivery for lead notifications and transactional emails.
  • Lemon Squeezy — Payment processing and subscription management.
  • Railway — Cloud hosting infrastructure.
  • Google Analytics (GA4) — Website analytics to understand visitor behavior and measure marketing effectiveness.
  • Google Ads — Advertising platform used to reach potential customers. Conversion tracking helps us measure ad effectiveness.

Each third-party processor maintains their own privacy policy and data handling practices.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience and measure the effectiveness of our marketing:

  • Google Analytics (GA4) — We use Google Analytics to understand how visitors interact with our website. This collects anonymized usage data including pages visited, time on site, and referral source. Google's privacy policy applies to this data.
  • Google Ads — When you arrive via a Google ad, a click identifier (gclid) may be stored in a cookie to measure ad effectiveness. This helps us understand which ads lead to signups.
  • Attribution cookies — We store a cookie called ivory_attribution containing UTM campaign parameters and click identifiers. This cookie expires after 30 days and is used solely to understand how you found our service.
  • Session cookies — We use a session cookie (ivory_session) to keep you logged in. This is essential for the service to function.

You can disable cookies in your browser settings, though this may affect your ability to use some features of our service.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Chatbot conversation data is retained for the duration of your subscription. You may request deletion of your data at any time by contacting us.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure password hashing, and access controls. However, no method of electronic transmission or storage is 100% secure.

8. CAN-SPAM Compliance

All marketing and outreach emails include a clear unsubscribe mechanism. We honor unsubscribe requests promptly and do not sell email addresses to third parties.

9. Your Rights (CCPA)

If you are a California resident, you have the right to:

  • Request access to your personal information
  • Request deletion of your personal information
  • Opt out of the sale of your personal information (we do not sell personal data)
  • Non-discrimination for exercising your privacy rights

10. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: [email protected]