Privacy Policy

This Privacy Policy explains how Chivalry Thoroughbred Analytics LLC (“Chivalry,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use Chivalry AI or visit chivalrythoroughbred.ai.

1. Information we collect

We collect information you provide, including your name, email address, phone number, company or organization name, role, account preferences, support communications, research prompts, conversations, uploaded files, and feedback.

Clerk processes authentication, verification, session, device, organization, membership, role, and invitation information. Stripe processes payment methods, billing addresses, tax identifiers, subscription status, invoices, transactions, and fraud signals. Chivalry does not store complete payment-card numbers.

We automatically collect service and device information such as IP address, browser and device type, timestamps, referring pages, cookie or session identifiers, feature usage, error and security logs, and usage and cost measurements needed to operate plan limits.

2. How we use information

We use information to:

• create and secure accounts, sessions, and organizations;
• provide research, AI responses, citations, files, exports, and conversation history;
• process trials, subscriptions, taxes, cancellations, plan limits, and customer support;
• enforce organization, role, seat, allowance, security, and abuse controls;
• diagnose failures, monitor reliability, prevent fraud, and protect customers;
• communicate about the service, billing, security, policies, and support requests; and
• comply with legal obligations and establish, exercise, or defend legal claims.

3. AI and research processing

Chivalry sends the content needed to answer a request to AI infrastructure and model providers configured for the service. We use provider, routing, and data-handling controls designed to limit retention and secondary use where available. Providers, models, routing, and processing locations may change as the service evolves.

Chivalry does not use customer prompts, conversations, or uploaded files to train generalized AI models unless the customer separately and affirmatively opts in. Service providers may process that content as needed to deliver, secure, and support their services, subject to the controls and terms applicable to Chivalry’s use of those providers.

When web search is used, search queries may be sent to search providers and public websites. Research queries may access Chivalry’s read-only structured thoroughbred data services. Customer prompts and private content are not added to those research datasets merely because they are queried.

Do not submit sensitive personal information that is unnecessary for your research. AI-generated responses can be inaccurate and should be independently verified.

4. Service providers and disclosures

We disclose information to service providers as reasonably needed to operate, secure, support, and improve the service. These providers support functions such as identity and organization management; billing, payments, and fraud prevention; cloud hosting, databases, storage, and delivery; AI and model routing; web search and research; communications; customer support; and security and reliability. Providers may use subprocessors under their own contractual and privacy commitments. Information about material provider categories is available on request.

We may also disclose information when required by law; to protect rights, safety, and security; in connection with a merger, financing, acquisition, or sale of assets; or with your direction or consent. We do not sell personal information or share it for cross-context behavioral advertising.

We may create aggregated or deidentified information and use it for lawful business purposes, including service measurement, reliability, security, and product improvement. We do not attempt to reidentify that information except as permitted by law to test or protect the deidentification.

5. Cookies and similar technologies

Chivalry and its providers use cookies and similar browser technologies for functions such as authentication, session security, organization context, preferences, redirects, fraud prevention, payment processing, and application operation. We may also use these technologies to understand and improve the service. Where notice or choice is required for a particular technology or use, we will provide it. Blocking necessary technologies may prevent sign-in, payment, or other core features. We honor legally recognized opt-out preference signals where required and applicable to our processing.

6. Retention

We retain information for as long as reasonably necessary for the purposes described in this policy. Retention depends on factors such as the type of information, account status, customer choices, operational needs, contractual commitments, legal and accounting requirements, security and fraud concerns, dispute preservation, and provider or backup schedules.

When information is no longer reasonably needed, we take steps to delete or deidentify it in the ordinary course of our operations. Information may remain for a limited period in backups, logs, fraud-prevention systems, or records we must retain for legal, accounting, security, or dispute purposes. We may retain aggregated or deidentified information as described above. You may contact us to ask about retention that applies to a particular category of information.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, provider-managed authentication, server-side tenant and role checks, restricted credentials, billing idempotency, and least-privilege data access. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your choices and rights

You may update certain account and organization information through the application, manage billing through the available billing portal, and cancel your subscription. Depending on applicable law, you may have rights to request access, correction, deletion, portability, restriction, objection, or an appeal of a privacy decision. You may make a request by contacting cfgavin@ChivalryRacing.com. We may verify your identity or authority and may retain or decline to change information where permitted or required by law.

You can control optional communications through the method provided in the message. Transactional, security, and service communications may continue while your account remains active.

9. Children

Chivalry is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. Contact us if you believe a person under 18 supplied information so we can investigate and delete it as appropriate.

10. International processing

Chivalry AI is currently offered only to customers in the United States. Our providers may process information in the United States and other countries. Where required, we use legally recognized safeguards for international transfers. We will review applicable transfer requirements before offering the service to customers outside the United States.

11. Changes to this policy

We may update this policy. We will post the new effective date and provide additional notice when required by law.