Who we are
Ignitara is a brand of JTA Ventures LLC, a North Carolina company based in the Raleigh-Durham area and serving practices nationwide. In this policy, "Ignitara," "we," "us," and "our" mean JTA Ventures LLC.
We sell software to medical spas and aesthetics practices. We do not provide medical care, and we do not sell anything to the general public.
| Company | JTA Ventures LLC, d/b/a Ignitara |
|---|---|
| Location | Raleigh-Durham, North Carolina, United States |
| Privacy contact | [email protected] |
| Support | [email protected] |
| Phone | +1 919 737 2679 |
The two different roles we play
This is the most important thing to understand about how we handle data, and it determines which rules apply to which information.
- When we act for ourselves
- When you visit this website, message us, sign up for the Local Brief, or buy a subscription, you are dealing with us directly. We decide how that information is used, and this policy governs it in full.
- When we act for a practice
- When a medspa becomes our customer, their clients' information flows through our software. We process that information only on the practice's instructions and only to run the service they bought. The practice, not Ignitara, decides what is collected and why, and the practice's own privacy policy governs it.
If you are a client of a medspa that uses Ignitara and you have a question about your information, contact the practice first. They control it. We will help them respond, and we will respond directly to you if they ask us to.
Information we collect
From visitors and prospective customers
- Contact details you give us: name, practice name, email address, phone number, city and state
- The content of messages you send us by text, web chat, Instagram, Facebook, or email
- Basic website analytics: pages viewed, referring link, approximate location from IP address, device and browser type
- Local Brief signups: your email address and the practice you asked us to report on
From customers
- Account and billing information, including the legal business details required for carrier registration
- Configuration you provide about your practice: services, pricing, hours, booking rules, and escalation preferences
- Support conversations
On behalf of customers
Running the service means our software handles information about the practice's own clients, including names, phone numbers, email addresses, appointment details, the treatments discussed or booked, and the contents of calls and messages. We hold this as a service provider to the practice.
How we use information
- To provide, configure, support, and improve the service
- To answer your questions and follow up on conversations you started
- To send the Local Brief if you asked for it
- To bill you and manage your account
- To register your business with mobile carriers so your messages can be delivered
- To keep the service secure and to investigate misuse
- To meet legal and regulatory obligations
We do not use the information we process on behalf of a practice to build profiles, train general-purpose models for our own benefit, or market to that practice's clients.
Text messaging and mobile information
If you give us your mobile number, we use it to reply to you, to send you information you asked for, and to send account and service notices if you become a customer. Message and data rates may apply. Message frequency varies.
You can opt out at any time by replying STOP to any message from us. Reply HELP for help, or contact us at [email protected] or +1 919 737 2679.
We do not sell, rent, or trade phone numbers. We do not buy or sell leads. We have no affiliate or lead-sharing arrangements of any kind.
For the full messaging terms, including consent and carrier disclaimers, see our Terms of Use.
Calls, recording, and transcription
Our voice agent answers calls on behalf of a practice. Whether those calls are recorded or transcribed, and for how long recordings are kept, is controlled by the practice. Each practice can turn recording and transcription on or off at its own discretion.
Where recording is enabled, audio and transcripts are stored within the platform under the practice's account and are handled as the practice's data.
Protected health information and HIPAA
Medical spas that provide treatments under medical direction are frequently covered entities under the Health Insurance Portability and Accountability Act. Where that is the case, information our software handles about their clients can be protected health information.
Ignitara acts as a Business Associate. We enter into a Business Associate Agreement with each covered practice before handling protected health information on their behalf. Where a BAA is in place, it governs our handling of that information and its terms control over anything inconsistent in this policy.
Under that agreement we use and disclose protected health information only as permitted, apply administrative, physical, and technical safeguards, require the same of our subcontractors, report security incidents, and return or destroy the information when the relationship ends.
If you are a practice and have not signed a BAA with us, contact [email protected] before routing client health information through the service.
How we use artificial intelligence
The service uses AI to read and respond to calls and messages. Some things we think you should know plainly:
- It identifies itself. Our agents disclose that they are an AI assistant rather than implying they are a person.
- It escalates rather than guesses. Anything clinical, anything that sounds like a complaint or an adverse reaction, and anything outside its configuration is routed to a human at the practice.
- It does not give medical advice. It is configured never to do so.
- It does not make decisions with legal effects about anyone, and it does not score, rank, or profile individuals.
Conversation content is sent to the AI providers listed below solely to generate a response for the practice. We do not permit those providers to use practice or client data to train their general models.
Service providers we rely on
We use a small number of vendors to run the service. Each is bound by contract to protect the information they handle, and each covered vendor is under a business associate agreement where protected health information is involved.
| Provider | What it does |
|---|---|
| GoHighLevel (HighLevel Inc.) | The underlying platform, white-labeled as Ignitara. Hosts accounts, conversations, calendars, and contact records. |
| Telecommunications carriers and messaging providers | Deliver calls and text messages, and process carrier brand and campaign registration. |
| AI model providers | Generate agent responses from conversation content. |
| Payment processor | Handles subscription billing. We never receive or store full card numbers. |
| Email and analytics providers | Deliver our email and measure website usage. |
An up-to-date list of named subprocessors is available on request at [email protected].
How long we keep information
- Prospect and inquiry records: kept while there is an active conversation and for a reasonable period afterward, then deleted or anonymized.
- Local Brief subscribers: kept until you unsubscribe.
- Customer account and billing records: kept for the life of the account and then as long as required for tax, accounting, and legal purposes.
- Data we hold for a practice: kept according to the practice's own retention settings and instructions. When a practice's account ends, we return or delete their data as set out in their agreement and any applicable BAA.
How we protect information
We use encryption in transit, access controls limiting who can see what, authentication requirements for administrative access, and vendor agreements requiring comparable protection. We review access when roles change.
No system is perfectly secure, and we will not claim otherwise. If a breach affects your information we will notify you and any required authority within the timeframes the law sets, and where a BAA applies, on the terms that agreement requires.
Your privacy rights
Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, to opt out of sale or targeted advertising, and not to be discriminated against for exercising any of these rights. California, Virginia, Colorado, Connecticut, Utah, Texas, and a growing number of other states provide rights along these lines.
Because we do not sell personal information or use it for cross-context behavioral advertising, there is nothing to opt out of on those two points.
To make a request, email [email protected]. We will verify your identity before acting and respond within the period the applicable law requires. You may use an authorized agent where the law permits.
If your request concerns information we hold for a medspa, we will forward it to that practice, since they control it, and support their response.
Children
The service is sold to businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18 through this website. Practices set their own minimum treatment age and are responsible for how they handle information about minors in their care.
Changes to this policy
We may update this policy. When we do, we will change the "last updated" date at the top. If a change materially affects how we handle your information, we will give notice by email or in the product before it takes effect.
How to reach us
Questions about this policy, or about information we hold:
JTA Ventures LLC, d/b/a Ignitara
Privacy: [email protected]
Support: [email protected]
Phone: +1 919 737 2679
Raleigh-Durham, North Carolina, United States
See also our Terms of Use.