Privacy Policy

This Privacy Policy explains how Chivalry Thoroughbred Analytics LLC (“Chivalry,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use Chivalry AI or visit chivalrythoroughbred.ai.

1. Information we collect

We collect information you provide, including your name, email address, phone number, company or organization name, role, account preferences, support communications, research prompts, conversations, uploaded files, and feedback.

Clerk processes authentication, verification, session, device, organization, membership, role, and invitation information. Stripe processes payment methods, billing addresses, tax identifiers, subscription status, invoices, transactions, and fraud signals. Chivalry does not store complete payment-card numbers.

We automatically collect service and device information such as IP address, browser and device type, timestamps, referring pages, cookie or session identifiers, feature usage, error and security logs, and usage and cost measurements needed to operate plan limits.

2. How we use information

We use information to:

• create and secure accounts, sessions, and organizations;
• provide research, AI responses, citations, files, exports, and conversation history;
• process trials, subscriptions, taxes, cancellations, plan limits, and customer support;
• enforce organization, role, seat, allowance, security, and abuse controls;
• diagnose failures, monitor reliability, prevent fraud, and protect customers;
• communicate about the service, billing, security, policies, and support requests; and
• comply with legal obligations and establish, exercise, or defend legal claims.

Authorized Chivalry personnel and service providers may access account information and customer content as reasonably necessary to operate, maintain, troubleshoot, secure, and support the service; investigate suspected abuse; comply with law; or establish, exercise, or defend legal claims. Our use of customer content remains subject to the model-training choice described in section 3. This policy does not promise that customer content will never be accessed by authorized people.

If you use the service through an organization, its administrators may manage membership, roles, billing, and available account or usage information. Organization membership or an administrator role alone does not automatically grant access to another member’s private conversations through ordinary conversation controls. Files, outputs, and other resources made available through sharing features or resource permissions may be accessible to other authorized users. You are responsible for the content you choose to share and for reviewing the recipients and permissions you select.

3. AI and research processing

Chivalry sends the content needed to answer a request to AI infrastructure and model providers configured for the service. We use provider, routing, and data-handling controls designed to limit retention and secondary use where available. Providers, models, routing, and processing locations may change as the service evolves.

Chivalry does not use customer prompts, conversations, or uploaded files to train generalized AI models unless the customer separately and affirmatively opts in. Service providers may process that content as needed to deliver, secure, and support their services, subject to the controls and terms applicable to Chivalry’s use of those providers.

We may use suggestions, evaluations, and other feedback you choose to provide to develop and improve the service, as described in the Terms of Service. Private research, conversations, and uploaded files do not become feedback merely because you submit them for processing. Providing feedback does not by itself constitute the separate model-training opt-in described above. We will not publicly attribute feedback to you or use your name, organization name, or logo in connection with that feedback without your consent.

When web search is used, search queries may be sent to search providers and public websites. Research queries may access Chivalry’s read-only structured thoroughbred data services. Customer prompts and private content are not added to those research datasets merely because they are queried.

Do not submit sensitive personal information that is unnecessary for your research. AI-generated responses can be inaccurate and should be independently verified.

4. Service providers and disclosures

We disclose information to service providers as reasonably needed to operate, secure, support, and improve the service. These providers support functions such as identity and organization management; billing, payments, and fraud prevention; cloud hosting, databases, storage, and delivery; AI and model routing; web search and research; communications; customer support; and security and reliability. Providers may use subprocessors under their own contractual and privacy commitments. Information about material provider categories is available on request.

We may also disclose information when required by law; to protect rights, safety, and security; in connection with a merger, financing, acquisition, or sale of assets; or with your direction or consent. We do not sell personal information or share it for cross-context behavioral advertising.

We may create aggregated or deidentified information and use it for lawful business purposes, including service measurement, reliability, security, and product improvement. We do not attempt to reidentify that information except as permitted by law to test or protect the deidentification.

Where sharing or export features are available, recipients may retain, download, or make their own copies of information you share. Changing permissions or deleting the original does not necessarily remove copies already obtained by others. Third-party services you choose to use may handle information under their own terms and privacy policies.

5. Cookies and similar technologies

Chivalry and its providers use cookies and similar browser technologies for functions such as authentication, session security, organization context, preferences, redirects, fraud prevention, payment processing, and application operation. We may also use these technologies to understand and improve the service. Where notice or choice is required for a particular technology or use, we will provide it. Blocking necessary technologies may prevent sign-in, payment, or other core features. We honor legally recognized opt-out preference signals where required and applicable to our processing.

6. Retention

We retain information for as long as reasonably necessary for the purposes described in this policy. Retention depends on factors such as the type of information, account status, customer choices, operational needs, contractual commitments, legal and accounting requirements, security and fraud concerns, dispute preservation, and provider or backup schedules.

Canceling a subscription, allowing a trial to expire, or losing access to the service does not by itself request deletion of an account or erase its information. We may retain information after cancellation or account closure for the purposes and periods reasonably necessary under this policy and applicable law, including billing and transaction records, security and fraud prevention, compliance, and dispute resolution. Continued retention does not guarantee continued service access, storage, recovery, or export availability.

Conversation history, uploaded files, shared resources, and related records may have different retention settings and deletion processes. Where temporary or expiring features are available, expiration and cleanup depend on the feature and applicable configuration. Deleting a conversation does not necessarily delete separately stored files, independently saved copies, or records retained for another purpose described in this policy. Use the available controls for those items or contact us with a deletion request.

When information is no longer reasonably needed, we take steps to delete or deidentify it in the ordinary course of our operations. Deletion and expiration may involve separate processing across active systems, storage, and providers and are not necessarily immediate or simultaneous. Information may remain for a limited period in backups, logs, fraud-prevention systems, or records we must retain for legal, accounting, security, or dispute purposes. Retained information remains subject to applicable safeguards and legal requirements. We may retain aggregated or deidentified information as described above. You may contact us to ask about retention that applies to a particular category of information.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, provider-managed authentication, server-side tenant and role checks, restricted credentials, billing idempotency, and least-privilege data access. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your choices and rights

You may update certain account and organization information through the application, manage billing through the available billing portal, and cancel your subscription. Depending on applicable law, you may have rights to request access, correction, deletion, portability, restriction, objection, or an appeal of a privacy decision. You may make a request by contacting support@chivalrythoroughbred.ai. We may verify your identity or authority and may retain or decline to change information where permitted or required by law.

You may contact us about privacy rights after your subscription or account access ends. Please identify the account and the information or action involved; do not send passwords or unnecessary sensitive information. We respond to verified requests as required by applicable law, including applicable deadlines and exceptions. An organization-related request may require verification of your authority or coordination with the organization. Nothing in this policy limits rights that cannot lawfully be waived.

You can control optional communications through the method provided in the message. Transactional, security, and service communications may continue while your account remains active.

9. Children

Chivalry is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. Contact us if you believe a person under 18 supplied information so we can investigate and delete it as appropriate.

10. International processing

Chivalry AI is currently offered only to customers in the United States. Our providers may process information in the United States and other countries. Where required, we use legally recognized safeguards for international transfers. We will review applicable transfer requirements before offering the service to customers outside the United States.

11. Changes to this policy

We may update this policy. We will post the new effective date and provide additional notice when required by law.