This Statement is the formal version of the line we hold to on the Site: every engagement is held in confidence. It describes how ServiceGuru AI LLC, a Utah limited liability company that operates the ICHOR platform ("ServiceGuru," "we," "us," "our"), treats client data and confidentiality. It is a description of our standing posture; the binding terms of any engagement are set by the executed agreement with that client, which controls if anything here differs.
This Statement covers how we handle information provided by or generated for a client in the course of an engagement, and the confidentiality we maintain around the fact and substance of that engagement. ICHOR is operated by ServiceGuru AI LLC; ICHOR LLC, a Utah limited liability company, is the intellectual-property holder. Handling of the public website is addressed separately in the Privacy Notice.
"Client Data" means information a client provides to us, or that is generated for the client, in connection with an engagement, including any identifiable raw data.
"De-identified Data" means data processed so that it can no longer reasonably be linked, directly or indirectly, to a particular individual, household, or client.
"Aggregated Learnings" means de-identified insights, patterns, model improvements, and statistics derived across our work that do not identify any individual, household, or client.
"MNPI" means material non-public information, and includes any information concerning a public company that has not been broadly disclosed.
We treat Client Data as confidential by default, whether or not it is marked. We use it only to perform the engagement, hold it under access controls on a least-privilege basis, and disclose it only to the personnel and service providers who need it to do the work and who are bound by confidentiality obligations at least as protective as these. Confidentiality obligations survive the end of an engagement.
We treat the fact that a particular client works with us, what we build for that client, and the advantage it creates, as confidential to that client. We do not publish or trade on a client's name, and we do not present one client's involvement to another as a reference without that client's consent.
Across every engagement, three lines hold:
What we retain across engagements is limited to Aggregated Learnings: de-identified improvements to our models and methodology that do not identify any individual, household, or client. This is how the engine gets sharper over time without any client's identifiable data leaving that client's boundary. Identifiable Client Data is not pooled, and is not used to benefit another client.
We handle Client Data under one of two tiers:
Where handling MNPI, we also observe applicable information-barrier and securities-law obligations, and we do not trade, and do not permit our personnel to trade, on the basis of a client's material non-public information.
As between the parties, identifiable raw Client Data remains the client's. We claim no ownership of it, and we assert rights only in our own models, methodology, and De-identified Aggregated Learnings. On the conclusion of an engagement, we return or de-identify the client's identifiable data as provided in the agreement, and, for Protected-tier data, we carry out true deletion on the agreed schedule. We may retain the minimum records required by law or for legitimate archival and audit purposes, held under the same confidentiality obligations.
We maintain administrative, technical, and physical safeguards designed to protect Client Data, including access controls, least-privilege provisioning, encryption in transit, activity logging, and per-engagement separation of client environments. Client environments are provisioned per engagement and are not shared across clients.
The confidentiality measures described here also constitute reasonable measures to maintain the secrecy of our trade secrets and of client Confidential Information within the meaning of the Defend Trade Secrets Act (18 U.S.C. §1836 et seq., defined at §1839) and the Utah Uniform Trade Secrets Act. Both our Proprietary Methods and a client's Confidential Information are protected on this basis.
This Statement, and any engagement it describes, is governed by the laws of the State of Utah, without regard to its conflict-of-laws principles, and the state and federal courts located in Salt Lake County, Utah have exclusive jurisdiction over any dispute arising out of or relating to it, except as an executed client agreement provides otherwise.
Questions or requests regarding confidentiality or data handling: ServiceGuru AI LLC, Salt Lake City, Utah. A direct contact address is being finalized and will be posted here.