Privacy Policy

Effective 15 October 2026. [Pending legal review: remove this line and the bracketed items once approved.]

Targets is made and operated by Ivy Interactive ([registered company name], "we"). This policy says what personal data we collect on the targets.one website and inside the Targets platform, why, who sees it, how long we keep it, and what you can ask of us.

Two roles, two kinds of data

On the website we are the controller: we decide what is collected when you fill in a form or use the assistant. Inside the platform the situation is different. The company that holds a Targets account decides what its users enter, and that data belongs to that company. We process it on the company's behalf under our terms of service, and the company is responsible for telling its own staff, distributors and customers how their data is used.

What we collect on the website

• Demo and contact forms: name, work email, phone or WhatsApp number, company, the size of your team and what you want to see.
• Sign-up: legal and trading name, contact name, login email, finance email, phone and country, sent to the Targets platform to create your account.
• Newsletter: your email address and where on the site you subscribed.
• The assistant: the questions you type. Most are answered from the site's own pages without any AI model. If a conversation turns to buying, the recent turns may be sent to an AI provider to compose a reply, and if you ask to be contacted, your details and the transcript are stored as a lead.
• Technical data: your IP address, browser and pages visited, in server logs kept for security and capacity, and in analytics where we have switched it on.
• Preferences: your chosen price region and similar settings, stored in your own browser and never sent to us.

What is processed inside the platform

Employee records, attendance and location check-ins, orders, customers and outlets, payments, payroll, candidates' CVs and interviews, and everything else a company enters. Each company has its own database. We access it only to run the service, support the company, or as the law requires. Records are deactivated rather than deleted while the account is open, because the platform keeps an audit history; the company controls what is entered and can deactivate what it no longer needs.

Why we use it

• To answer you, book a demo, open your account and provide the service you subscribed to (performance of a contract).
• To send invoices and service notices, keep the service secure, and improve it (our legitimate interests).
• To send the newsletter and marketing messages, which you can stop at any time (your consent).

AI features

Reports and the report analyser make no AI calls. AI conversation, CV scoring, AI interviews and the project planner are switched on by the company that holds the account, not by us. When they are on, the necessary context is sent to a model provider (Anthropic, Google or OpenAI) to produce a reply, and the level of context is stated before use. In most cases only figures and internal codes are sent, not product names or company details. For recruitment, AI scores are advisory; a person makes every decision about a candidate. We do not use your data to train models.

Who else sees it

• Hosting and backup providers that run our infrastructure.
• Stripe, which handles card and bank payments. We never see your full card number.
• Email delivery services that send invoices, notices and the newsletter.
• AI model providers, only for features a company has switched on, as described above.
• Authorities, where the law requires it, such as the Federal Board of Revenue for invoices posted to its digital invoicing system.

We do not sell personal data.

Where it is kept

Website data and most platform databases are hosted with cloud providers in [primary hosting region]. Enterprise customers can choose a hosting region, including the Gulf. Data may pass through other regions for delivery and backup, always under contracts that require the same protection.

How long we keep it

• Leads and demo requests: 24 months from the last contact.
• Newsletter subscriptions: until you unsubscribe.
• Assistant transcripts stored as leads: with the lead. Other conversations are not kept.
• Platform data: for the life of the account and 90 days after it closes, so it can be exported, then deleted from live systems; backups expire on their own schedule within a further 90 days.
• Invoices and payment records: as long as tax law requires.

Security

One database per company, logins bound to devices, access set screen by screen and button by button, an audit log of business actions, encrypted connections, and regular backups. No system is perfectly secure; if we learn of a breach affecting you we will tell you and the authorities as the law requires.

Your rights

Subject to applicable data protection law, you can ask what personal data we hold about you, have it corrected or deleted, object to marketing, and receive a copy in a usable format. If your data sits inside a company's Targets account, ask that company first; we will help them answer. Write to [contact email] and we reply within 30 days. You may also complain to the data protection authority for your country.

Cookies and local storage

The site uses local storage for your preferences and, if you sign in to the editor, a session token. Analytics cookies are used only where switched on and disclosed in the banner. No advertising trackers.

Children

Targets is a business service and is not directed at anyone under 18.

Changes

We will post changes here with a new effective date, and notify account holders of material changes by email.

Contact

Ivy Interactive, [registered address]. Email: [contact email]. WhatsApp and phone numbers are in the site footer.