Privacy Policy

Last updated: 26 October 2026

This Privacy Policy explains how I.V.Y collects, uses and protects your personal data when you use https://ivytech-ai.com, in accordance with the EU General Data Protection Regulation (GDPR) and Dutch data protection law (UAVG).

1. Data controller

The data controller is SIC Solutions (operator of the I.V.Y service), registered with the Netherlands Chamber of Commerce (KVK) under number 75285398, based in Den Haag, Netherlands (VAT NL002275142B10). Contact: ivytech.ai@gmail.com.

2. Data we collect

Category	Examples	Purpose
Account data	Name, email address, password (hashed)	Create and manage your account
Authentication	Google account ID & profile (if you use Google sign-in)	Allow secure login
Subscription	Plan, billing status, Stripe customer reference	Process payments and activate access
Security logs	IP address, login attempts, timestamps	Protect against fraud and brute-force attacks
Communications	Emails we send you (verification, reset, updates)	Operate the service

Payment card details are handled directly by Stripe and are never stored on our servers.

3. Legal basis

• Performance of a contract — account and subscription management.
• Legitimate interest — security, fraud prevention and service improvement.
• Consent — optional marketing communications (you can withdraw it at any time).
• Legal obligation — accounting and tax record keeping.

4. Data retention

Account data is kept for the lifetime of your account and deleted within a reasonable period after account closure. Security logs are retained for a limited period (up to 24 months) for protection purposes. Billing records are kept for the legally required period (7 years under Dutch tax law).

5. Data sharing

We do not sell your data. We share data only with trusted processors strictly necessary to run the service:

• Stripe — payment processing.
• Google — optional authentication (if you choose Google sign-in).
• Email / hosting providers — to deliver emails and host the platform.

6. Your rights (GDPR)

You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent at any time. To exercise these rights, contact ivytech.ai@gmail.com. You may also lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the data protection authority of your country of residence in the EU.

7. Cookies

We use only essential cookies required for the site to function (e.g. your session cookie, which is HttpOnly, Secure and SameSite-protected). These do not require consent. We do not use advertising or third-party tracking cookies.

8. Data security

We apply industry-standard measures: encrypted connections (HTTPS), hashed passwords, hardened session cookies, CSRF protection, brute-force throttling and a strict content security policy.

9. Changes

We may update this policy. The "last updated" date above reflects the latest version.

10. Contact

For any privacy question, email ivytech.ai@gmail.com.

11. Ivy Studio: YouTube, Google and TikTok data

Ivy Studio lets you link your own YouTube and TikTok accounts to publish the videos you create in Ivy. With your permission, Ivy only accesses: your channel or account name, its statistics (subscribers, views, likes, number of videos) and the ability to upload the videos you choose. Nothing is published without your click. Access tokens are stored only on your PC, encrypted; they are never sold, shared or used for advertising, and we do not delete or edit your existing videos. You can unlink at any time in Ivy (Studio > Unlink) or revoke access in your Google Account permissions or in your TikTok settings. Ivy Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Ivy Studio uses YouTube API Services: by linking YouTube you agree to the YouTube Terms of Service and to the Google Privacy Policy.

12. AI providers

To answer you, Ivy relies on artificial-intelligence providers. We never sell your data and never use it for advertising.

• Google (Gemini) — Ivy's chat, voice and images. With a paid plan, requests go through our servers and our Google Cloud account. With the free version, they go straight from your PC with your own Gemini key, under Google's terms (Google's free tier may use this data to improve its products).
• Anthropic (Claude) — Vektor, in-depth analysis and coding help, through our servers (paid plans) or with your own Claude key.
• OpenAI (ChatGPT) — only if you add your own OpenAI key in Ivy yourself.
• What is sent: your messages and the useful context of the conversation, the audio of your voice during a voice session, and only the files or folders you explicitly allow. Your API keys, passwords and system files are never sent.
• These providers may process data outside the European Union (notably in the United States). These transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

13. Connections (smart home)

Connections lets Ivy control your devices (lights, TV, cameras, printers, watch, phone). These features are optional and only turn on with your consent.

• Your devices, scenes and settings stay on your computer, encrypted. Ivy talks to your devices directly on your local network; we do not receive this data.
• Cameras: snapshots are taken when you ask and kept on your computer. If you ask Ivy to look at an image (Pro and Max plans), that image is sent to Google (Gemini) to be described, as explained in section 12.
• Watch and heart rate: this is health data. It is only used after your explicit consent, stays encrypted on your computer and is never sent to our servers. It is not a medical device and does not replace medical advice or emergency services. If an alert is raised, only the people you chose are notified. “Forget” erases everything at any time.
• Phone and alerts: notifications go through the ntfy service (ntfy.sh, or your own server) on private channels you create; e-mails are sent from your own mailbox set up in Ivy. Only the necessary text is sent.

Referral cookie

If you arrive through a partner's link (address containing "?ref="), a small cookie named "ivy_ref" keeps that code for 30 days, so the partner is credited if you create an account. It contains nothing else and is read only by our site. The partner never sees your name or email: only that a sign-up and, where applicable, a subscription took place.