This Privacy Policy explains how iFixAi Inc. (“iFixAi,” “we,” “us” or “our”), a Delaware corporation at 2810 North Church Street, Wilmington, DE 19802, United States, collects, uses and shares personal information when you visit ifixai.ai or contact us; use iFixAi OS (our web dashboard), our MCP connector or our API (together, the “Hosted Services”); or run our open-source iFixAi tool, which sends us limited usage information unless you switch it off.
Our services are built for businesses and professionals. Our Terms of Service explain the rules for using them, and terms such as “Agent,” “Audit” and “Report” have the meanings given there.
When an organization uses iFixAi to audit an AI agent, it decides what data goes into the audit, such as the agent's files and configuration, the credentials we use to reach it, and the agent's replies. We process that data (“Customer Data”) on the organization's behalf, as its service provider, and only to provide the Hosted Services to it. The organization's own privacy policy applies to any personal information in that data.
If you believe your information is included in an agent audited on iFixAi, please contact the organization that runs the agent. If you contact us instead, we will pass your request on and help them respond.
Information you give us: contact requests (name, company, work email, and your message); account information (name, work email, organization and role in your Workspace); billing information (billing contact, company details, package, invoices and payment records — we don't collect payment card numbers); and communications with our team.
Information from sign-in and connected services: your name, email and account identifier when you sign in with Microsoft or Google; your GitHub account/organization name, selected repositories, and branch/commit information when you install our GitHub App; and the tool's name and permissions you approve when you connect an AI assistant through our MCP connector.
Information collected automatically: IP address, browser and device type, pages requested and timestamps; sign-in activity; on our website, how you use our pages (such as page views, clicks and the ad or link that brought you there), collected through the tools described in Section 8; and open-source usage information (see Section 7).
We do not ask for sensitive personal information such as government ID numbers, financial account numbers, or health or biometric data. Please do not include it in forms, messages or your agent's test data.
We do not sell personal information, and we do not use personal information or Customer Data to train AI models.
The open-source iFixAi tool runs on your own machine with your own AI model keys. Your code, prompts, findings and reports stay on your machine.
By default, the tool sends limited usage information: a random install ID, whether a run started or finished, tool version, OS name, how it was run/installed, and a timestamp — never file contents, findings, prompts, paths, hostnames, usernames or environment values. PostHog is configured to discard your IP address, and telemetry is switched off automatically in CI environments.
To switch it off: run with --no-telemetry, set IFIXAI_TELEMETRY=0 or DO_NOT_TRACK=1, or create a file at ~/.config/ifixai/telemetry-opt-out. To delete information already sent: run ifixai run --show-id and email your install ID to privacy@ifixai.ai.
Our website uses the Meta Pixel to measure the performance of our advertising, and PostHog to understand how visitors use our pages (for example, page views, clicks and which ad brought you to the site). These tools use cookies and similar browser storage. They do not record what you type into the survey and scheduling forms on our demo pages.
When you book a demo, our CRM may also send Meta your contact details (such as your name, email address and phone number) so we can measure which ads lead to bookings. Meta receives this information under its own terms and privacy policy.
Our website also saves display preferences in your browser, and our product demo keeps temporary progress in your browser session. The Hosted Services use only strictly-necessary sign-in cookies.
Your choices: you can block or delete cookies in your browser settings, and manage how Meta uses information for ads in your Meta account settings. We honor Global Privacy Control signals: if your browser sends one, our website turns off the Meta Pixel and PostHog for that browser. To opt out of us sharing your contact details with Meta for advertising measurement, email privacy@ifixai.ai.
No system is perfectly secure. If a security incident affects your personal information, we will notify you as required by law. To report a security issue, email support@ifixai.ai.
We will not discriminate against you for exercising any of these rights.
Depending on where you live — California, Virginia, Colorado, Connecticut or another state with a privacy law — you may have the right to know, access, correct and delete your personal information, receive a portable copy, and opt out of the sale of personal information, targeted advertising and certain profiling. We do not sell or share personal information, use it for targeted advertising, or use it for profiling with legal or similarly significant effects.
In the past 12 months we have collected identifiers, commercial information, internet/network activity and professional information, from the sources in Section 3, for the purposes in Section 4, disclosed only as described in Section 6. We do not use sensitive personal information to infer characteristics about you. To make a request, follow Section 11.
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: performing our contract with you or your organization; our legitimate interests in running, securing and promoting our business; complying with legal obligations; and your consent, where we ask for it.
You can ask us to access, correct, delete, restrict or transfer your personal information, object to our use of it, and withdraw consent. We will respond within one month. You also have the right to complain to your local data protection authority. We are based in the United States, and where the law requires we protect international transfers with safeguards such as the European Commission's Standard Contractual Clauses.
Our services are for businesses and for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
We will post any changes here and update the “Last updated” date. If we make material changes, we will tell account holders by email or in the Hosted Services before the changes take effect.
If you provide your mobile phone number through our website's demo-booking or qualification forms, we and GoHighLevel, the CRM and messaging platform we use to send it, may send you SMS text messages related to your demo booking, such as confirmations, reminders and rescheduling notices. These are transactional messages tied to a specific action you took, not general marketing texts. If that changes, we will ask for separate, specific consent before sending marketing texts.
Full detail on consent, message frequency, message and data rates, and how to opt out is in our separate Messaging Terms & Conditions, which are incorporated into this Policy by reference.