Privacy Policy

Koru & Ivy ("Company," "we," "us," or "our") operates the website located at koruandivy.com and the client portal at portal.koruandivy.com (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information, including your rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

By accessing or using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

1. Information We Collect

We collect personal information in the following categories:

We do not knowingly collect sensitive personal information such as Social Security numbers, financial account credentials, precise geolocation, racial or ethnic origin, health data, or information from individuals under 18 years of age.

2. How We Collect Information

We collect information directly from you when you create an account, purchase a subscription, contact us, or interact with our AI tools. We also collect information automatically through cookies, web beacons, and similar tracking technologies when you visit our website. Third-party service providers such as payment processors (Stripe) and analytics platforms may also provide us with information about your interactions with our Services.

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and improve our Services and AI-powered tools
• Process payments and manage your subscription
• Send transactional emails, account notifications, and service updates
• Respond to your inquiries and provide customer support
• Personalize your experience and tailor content to your business goals
• Comply with legal obligations and enforce our Terms of Service
• Detect and prevent fraud, abuse, and security incidents

We do not sell your personal information to third parties, and we do not use your personal information for cross-context behavioral advertising.

4. Sharing Your Information

We may share your personal information with trusted service providers who assist us in operating our business, including payment processors (Stripe), email service providers, analytics platforms, and cloud hosting providers. These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

We may also disclose your information when required by law, in response to a valid legal process, to protect the rights and safety of Koru & Ivy or others, or in connection with a merger, acquisition, or sale of company assets (with prior notice to you).

5. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purposes, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required.
• Right to Limit Use of Sensitive Information: We do not collect sensitive personal information as defined under CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us at [email protected]. We will respond to verifiable consumer requests within 45 days as required by law.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, remember your preferences, and analyze traffic. You may control cookie settings through your browser. Disabling cookies may affect the functionality of certain features of our Services. We do not respond to "Do Not Track" browser signals at this time, as there is no uniform industry standard for such signals.

7. Data Retention

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we securely delete or anonymize it.

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at: