🔐 Privacy Policy

Ivorycom LLC (“Ivorycom,” “we,” “us,” or “our”) operates the Ivorycom CRM platform available at ivorycomcrm.com and through our applications (the “Service”).

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Service.

We are committed to complying with global data protection laws, including:

• General Data Protection Regulation (GDPR) – European Union
• UK Data Protection Act (DPA)
• California Consumer Privacy Act / CPRA (CCPA/CPRA) – United States
• Personal Information Protection and Electronic Documents Act (PIPEDA) – Canada
• Australian Privacy Principles (APP)

1. Data Controller

Ivorycom LLC is the data controller for personal data processed through the Service.

📧 Privacy: privacy@ivorycomcrm.com

📧 Data Protection Officer: dpo@ivorycomcrm.com

📍 Location:
Ivorycom LLC
Apollo Beach, Florida, United States

For official correspondence or legal inquiries, please contact us at privacy@ivorycomcrm.com.

Ivorycom operates globally and complies with applicable data protection laws across the United States, European Union, United Kingdom, Canada, Australia, and other jurisdictions.

2. Information We Collect

2.1 Information You Provide

• Account registration: name, email, phone number, business name, role
• Billing information (processed via Stripe — we do not store full card details)
• Customer data (“User Content”): leads, contacts, deals, notes, files, and other CRM data
• Communications: support requests, feedback, and correspondence

👉 You remain the data controller of your CRM data

👉 Ivorycom acts as a data processor on your behalf

2.2 Information Collected Automatically

• Usage data (pages, actions, timestamps)
• Device and browser information
• IP address
• Session and authentication data

2.3 Third-Party Integrations

When you connect third-party services (Google, Slack, Stripe, etc.):

• Access is granted only with your explicit authorization
• We request only the minimum required permissions
• You can revoke access at any time

2.4 AI Interaction Data

When using AI features:

• We process prompts and generated responses
• Used only to provide and improve AI features
• ❌ Not used to train third-party models
• ❌ Not sold or used for advertising

3. How We Use Your Information

We use personal data to:

• Provide and operate the Service
• Authenticate users and secure accounts
• Process subscriptions and billing
• Respond to support requests
• Send transactional communications (e.g., invoices, alerts)
• Improve performance and user experience
• Detect fraud, abuse, and security risks
• Comply with legal obligations

4. Lawful Basis (GDPR)

We process data based on:

• Contract → to provide the Service
• Legitimate interest → improve and secure the platform
• Consent → marketing and optional features
• Legal obligation → compliance requirements

5. Data Sharing and Sub-Processors

We do not sell your data.

We share data only with trusted providers:

All providers operate under data protection agreements.

We may disclose data if required by law or to protect the rights and safety of Ivorycom, our customers, or the public. The current sub-processor list is published here and updated as it changes.

6. Your Privacy Rights

6.1 GDPR / UK / Canada / Australia

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Export your data
• Object to processing
• Withdraw consent

📧 Contact: privacy@ivorycomcrm.com

⏱ Response time: within 30 days

6.2 California (CCPA/CPRA)

You have the right to:

• Know what data is collected
• Request deletion
• Correct inaccurate data
• Opt-out (we do not sell data)
• Non-discrimination

⏱ Response time: within 45 days

7. Data Retention

• Active accounts → retained while active
• Deleted accounts → removed within 30 days
• Backups → retained up to 35 days
• Financial records → up to 7 years

8. Google API Compliance

Ivorycom complies with the Google API Services User Data Policy:

• Only access authorized data
• Use minimal required scopes
• Do not use data for ads
• Do not train AI models on Google data
• Allow revocation at any time

9. International Data Transfers

Customer data is primarily stored and processed in the United States (AWS us-east-1). Some sub-processors and customer-authorized integrations (e.g., Google APIs) may process data in additional regions according to their own published policies.

To safeguard international transfers, we rely on:

• Standard Contractual Clauses (SCCs)
• UK data transfer agreements
• Encryption safeguards in transit and at rest

10. Cookies

We use only essential cookies for:

• Authentication
• Session management
• User preferences

❌ No advertising cookies

❌ No cross-site tracking

11. Security Measures

We implement:

• AES-256 encryption
• TLS 1.2+ encryption
• Role-based access control
• Multi-tenant isolation
• Continuous monitoring
• Least-privilege access

11a. Benchmark Network (Optional Data Pooling)

Workspaces may opt in to the Ivorycom Benchmark Network, which improves forecast accuracy for participating workspaces using aggregated, anonymized statistics (such as cohort win rates and sales-cycle lengths) computed across participating workspaces in the same industry and sales-motion cohort. Participation is strictly optional and off by default. If you opt in:

• Only statistical aggregates are used — individual records (deals, contacts, amounts, names) never leave your workspace
• Aggregates are published only when at least 3 distinct workspaces contribute to a cohort (k-anonymity), so no single workspace’s figures can be inferred
• Every read of pooled statistics is audit-logged
• You may opt out at any time; your data is excluded from the next daily aggregation run

12. Data Breach Notification

In the event of a breach:

• Authorities notified within 72 hours (GDPR)
• Users notified when required

13. Children’s Privacy

• Service is for users 18+
• No intentional data collection from children

14. Changes to Policy

We may update this policy.

• Material changes → notified in advance
• Continued use = acceptance

15. Contact

📧 privacy@ivorycomcrm.com

📧 dpo@ivorycomcrm.com

📧 support@ivorycomcrm.com

Ivorycom LLC
Apollo Beach, Florida, United States