Privacy Policy

Effective Date

This Privacy Policy is effective as of October 5, 2026. It describes how Pure Grace AI, LLC handles personal information collected through https://servegrace.com.

Introduction

Pure Grace AI, LLC (“we,” “us,” or “our”) operates https://servegrace.com. This Privacy Policy explains what personal information we collect, how we use and disclose it, and the choices available to individuals whose personal information we process. Personal information means information that identifies, relates to, or could reasonably be linked with a particular individual or household.

Information We Collect

We collect personal information that individuals provide to us directly, and information that is collected automatically when an individual interacts with our website. The categories of personal information we collect depend on how an individual interacts with https://servegrace.com. We collect this information for the business purposes described in this Policy.

Personal Information of Consumers Under 16

We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

How We Use Your Information

We use personal information to provide and maintain our services, to respond to inquiries, to secure our systems, and for other business purposes described at the point of collection. The purposes for which we process each category of personal information, and the period for which we retain it, are described in this Policy.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate https://servegrace.com, remember preferences, and analyze usage. Some tracking technologies enable behavioral advertising. Individuals may manage cookie preferences through their browser settings or any cookie preference tools we make available. Our Cookie Policy provides further detail on the categories of cookies in use.

AI, Automated Processing, and Model Training

We use artificial intelligence and automated processing to provide certain features of our services. Where automated processing produces a legal or similarly significant effect concerning an individual, we describe that processing and the choices available. Individuals may contact us at privacy@servegrace.com with questions about our use of automated processing.

We do not process sensitive data for the purpose of training, fine-tuning, or evaluating artificial-intelligence models without the individual’s consent. Where an individual has given that consent, it may be withdrawn at any time by contacting us at privacy@servegrace.com; withdrawal takes effect prospectively and does not affect processing carried out before the withdrawal. [ATTORNEY REVIEW REQUIRED]

Personal Data and Large Language Model Training

We do not collect, use, or sell personal data for the purpose of training large language models. This statement covers training performed by us and training performed by a vendor acting on our behalf. If this changes, we will update this Policy and provide notice and, where applicable law calls for it, obtain consent before personal data already collected is used for that purpose.

ServeGrace Chat Assistant (Grace) — Visitors to Websites That Use It

Businesses can add our AI chat assistant, Grace, to their own websites. When you chat with Grace on a business’s website, that business decides why and how your chat data is used (it is the “controller”), and we process the data on its behalf as its service provider (the “processor”). Please also read that business’s privacy policy, which the chat links to. This section describes how the chat itself handles your information.

• You are told before anything is collected. Before the chat starts, it shows a notice explaining that it is an automated AI assistant, that your chat is recorded, who processes it, and links to the relevant privacy policies. Nothing is stored on your device and no conversation is started until you choose “Start chat.”
• Your chat is recorded. Messages you send, and any name, email address, or files you choose to share, are stored and can be read by the business’s support team. A screen recording is made only if you separately agree to it.
• Nothing is sent until you press Send. The chat does not transmit text you have typed but not sent.
• Who processes it. We use AI providers, Anthropic (to generate replies) and OpenAI (to match your question to the business’s help articles), along with hosting and other service providers listed on our sub-processor page. Our AI providers do not use your chat to train their models.
• Automated analysis. Messages are analyzed automatically for sentiment and to route you to the right person. This analysis does not produce legal or similarly significant decisions about you.
• Page context. The chat sends the address and title of the page you are on, without its query string or fragment, so the business knows where you needed help.
• On your device. The chat stores a session identifier (cleared when you close the tab), your accessibility settings, and your consent choice. It does not set advertising or cross-site tracking cookies.
• Proactive help is optional. The chat offers help based on how you use the page (for example, scrolling or moving to leave the page) only if you separately opt in, or, on sites using a consent manager, only if you allow the “analytics” category. It is also turned off when your browser sends a Global Privacy Control signal.
• Opt-out signals. We honor Global Privacy Control as a valid opt-out of sale and sharing. When it is detected, the chat confirms that your opt-out was honored and your information is not sent to the business’s connected CRM systems.
• Withdrawing consent. You can stop at any time with “Stop chat & forget me” at the bottom of the chat. This ends the chat and removes the chat data stored on your device.
• Access or deletion. Use “Access or delete your data” in the chat, contact the business that runs the website, or email privacy@servegrace.com. We verify your request by confirming you control the email address associated with the data. A deletion removes your conversations and the information derived from them.
• Retention. The business sets how long chat data is kept. Unless it chooses otherwise, conversation transcripts are deleted after 365 days and screen recordings after 90 days.

Your Privacy Rights

This section describes the privacy choices we make available. Regardless of where an individual lives, we offer every individual the ability to ask us what personal information we hold about them, to ask us to correct it, to ask us to delete it, to ask for a copy of it, and to tell us not to sell or share it. The sections that follow describe the additional rights that particular state privacy laws give to residents of those states, the conditions attached to them, and how they are exercised. Where a state law gives a resident of that state a right that goes beyond the choices described in this section, the state section controls for that resident.

How These Choices Apply to Us

Some privacy laws apply only to organizations above a size, revenue, or data-volume threshold, and we are below those thresholds for the laws that set them. We offer the choices described in this Policy as a matter of our own policy rather than because a particular statute obliges us to, and we honor them on the terms stated here. Where a privacy law applies to us directly, we follow that law, and the state sections below describe what it provides.

California Residents — CCPA/CPRA

This section applies to California residents and supplements the rest of this Policy under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). Under the CCPA/CPRA, a California resident is a “consumer,” and the information we handle about them is “personal information.” The rights described below are available to California residents and may be exercised as described in the Submitting a Privacy Request section.

California residents have the right to know what personal information we collect, use, disclose, and sell. [ATTORNEY REVIEW REQUIRED]

California residents have the right to request deletion of their personal information, subject to certain exceptions. [ATTORNEY REVIEW REQUIRED]

California residents have the right to correct inaccurate personal information we maintain about them. [ATTORNEY REVIEW REQUIRED]

California residents have the right to opt out of the sale or sharing of their personal information. [ATTORNEY REVIEW REQUIRED]

Notice at Collection — Categories of Personal Data We Process

This section is our notice at collection. It states each category of personal information we collect, the purpose for which we collect and use that category, and the period for which we retain it, or the criteria we use to determine that period. Whether we sell or share personal information is stated separately in this Policy.

Category of personal information	Business or commercial purpose for collection	Retention period or criteria
Identifiers	To create, authenticate, and secure accounts; to answer chat visitors’ questions, route them to a human, and let the business operating Grace follow up; to send text messages only when permitted and honor STOP/HELP; and to keep proof of consent.	For as long as the account is active, plus the applicable statute of limitations period.
Commercial information	To bill account holders, manage their subscriptions, and meet automatic-renewal and tax recordkeeping obligations.	For as long as the account is active, plus the applicable statute of limitations period.
Internet or other similar network activity	To provide the chat conversation, for security, and to keep proof of consent.	For as long as the account is active, plus the applicable statute of limitations period.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	To let the business operating Grace follow up with a chat visitor who provides a name, email, or phone number, and to administer and bill account holders.	For as long as the account is active, plus the applicable statute of limitations period.
Audio, electronic, visual, thermal, olfactory, or similar information	To help resolve a chat visitor’s request. Screen recordings are made only with the visitor’s explicit consent.	For as long as the account is active, plus the applicable statute of limitations period.
Professional or employment-related information	To create and administer business accounts.	For as long as the account is active, plus the applicable statute of limitations period.
Inferences drawn from other personal information	To measure and improve service quality, using conversation sentiment and AI-response-quality scores derived from the chat.	For as long as the account is active, plus the applicable statute of limitations period.

We disclose personal data to the following categories of third parties:

• Service providers and contractors
• Internet service providers and hosting providers
• Payment processors
• Government entities and law-enforcement agencies (where required by law)

Where we sell or share personal information, the notice of the right to opt out and the choices available to individuals appear in the Your Privacy Rights section of this Policy. This Policy is available at https://servegrace.com, and a link leading directly to this section appears at or before the point at which we collect personal information.

California Residents — Categories of Sources

We collect personal information from the following categories of sources:

• Directly from the consumer
• The consumer’s d