This Privacy Notice explains how ServiceGuru AI LLC, a Utah limited liability company that owns and operates the ICHOR platform ("ServiceGuru," "we," "us," "our"), handles personal information. It covers two separate things and keeps them separate: the small amount of information this public website collects, and the way engagement data is governed once a client is under contract. On the public site itself, we collect very little, and we say plainly below what that is.
This Notice applies to the public ICHOR website at this domain (the "Site"). ICHOR is operated by ServiceGuru AI LLC; ICHOR LLC, a Utah limited liability company, is the intellectual-property holder. Where we act as the operator that decides how and why personal information is handled, we are the controller for the purposes of applicable privacy law. Engagement data handled inside a client deployment is governed by the executed agreement with that client and the Confidentiality and Data-Handling Statement, not by this Site Notice; where the client determines the purpose and means of processing, we handle that data as the client's processor under contract.
"Personal information" means information that identifies, relates to, or could reasonably be linked with a particular individual or household, as defined under the Utah Consumer Privacy Act (Utah Code §13-61) and the California Consumer Privacy Act as amended (Cal. Civ. Code §1798.140).
"Site data" means the limited information the public Site collects: server and analytics logs, and the contents of any inquiry you choose to send us.
"Engagement data" means information provided by or generated for a client under an executed agreement. Engagement data is governed by that agreement and the Confidentiality and Data-Handling Statement, and is addressed here only to describe our posture.
The public Site is intentionally minimal. We do not run advertising trackers, we do not sell data, and we do not build marketing profiles from Site visitors. What we collect is limited to:
We do not ask the public Site to collect sensitive personal information, financial-account details, or government identifiers, and you should not send them through an inquiry.
We handle Site data to: (a) respond to your inquiry and evaluate a possible engagement; (b) operate, secure, and improve the Site; and (c) meet legal and record-keeping obligations. Where a legal basis is required, we rely on our legitimate interest in operating the Site and responding to people who contact us, on taking steps at your request before any engagement, and on compliance with law.
Across both the Site and any engagement, our posture is confidential by default. We do not sell personal information and have not sold or shared personal information for cross-context behavioral advertising in the preceding twelve months, as those terms are defined under the Utah Consumer Privacy Act and the California Consumer Privacy Act. We do not disclose one client's data to another client. We do not re-identify, or attempt to re-identify, information that has been de-identified or aggregated. We do not use Site data to train models about identifiable individuals.
When we work with a client, identifiable raw data provided by that client remains the client's. We retain only de-identified, aggregated learnings that do not identify any individual, household, or client. A client's data is handled under a Standard tier by default, and under a Protected tier where the data includes material non-public information or information concerning a public company, in which case that data is kept strictly to the single engagement, is not reused, and is subject to true deletion. On exit, client identifiable data is returned or de-identified as provided in the agreement. This paragraph summarizes our posture; the governing terms are in the executed agreement and the Confidentiality and Data-Handling Statement.
We use a limited set of vendors to host the Site, deliver email, and provide analytics and security. They act as our service providers or processors under contract, may handle Site data only to perform services for us, and are barred from selling it or using it for their own purposes. We may also disclose information where required by law, to enforce our terms, or to protect rights, safety, and the integrity of our systems.
We keep Site data only as long as needed for the purpose it was collected, then delete or de-identify it. Inquiry correspondence is retained for the period reasonably needed to evaluate and act on it and to keep ordinary business records. Technical and analytics logs are retained for a limited period for security and operational purposes. Retention of engagement data is set by the applicable agreement.
We maintain administrative, technical, and physical safeguards designed to protect information under our control, including access controls, encryption in transit, activity logging, and least-privilege access. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures appropriate to the sensitivity of the information.
If you are a Utah resident, the Utah Consumer Privacy Act (Utah Code §13-61) gives you the right, subject to its conditions and exceptions, to: confirm whether we process your personal data and access it; delete personal data you provided; obtain a portable copy of data you provided; and opt out of the sale of personal data and of targeted advertising. As stated above, we do not sell personal data and do not conduct targeted advertising from the Site.
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (Cal. Civ. Code §1798.100 et seq., including §1798.140) gives you the right, subject to its conditions and exceptions, to: know the categories and specific pieces of personal information we have collected, the sources, purposes, and any recipients; delete personal information; correct inaccurate personal information; opt out of any sale or sharing of personal information; and not be discriminated against for exercising these rights. Because we do not sell or share personal information as those terms are defined, there is no sale or share to opt out of.
To exercise any right above, submit the request to us in writing with enough detail for us to locate your information. A direct contact address is being finalized and will be posted here. We will verify your request against the information we hold, respond within the time the applicable law allows, and will not charge you for a first, reasonable request. You may use an authorized agent where the law permits. If we decline a request, we will explain why, and you may appeal by replying to our response; we will inform you of the outcome of any appeal.
The Site uses only the cookies and similar technologies needed to operate the Site and to measure aggregate usage. We do not use advertising cookies or third-party ad networks. You can set your browser to refuse cookies; core parts of the Site are designed to work without them.
The Site is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
We may update this Notice. When we do, we will change the version and effective date above. Material changes will be reflected on this page, and your continued use of the Site after an update means you accept the updated Notice.
Questions, requests, or privacy concerns: ServiceGuru AI LLC, Salt Lake City, Utah. A direct contact address is being finalized and will be posted here.