Privacy Policy

1. Introduction

AIARVA ("we," "our," or "us") operates the aiarva.com website and mobile applications (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, and password when you register
• Payment information: processed securely through Stripe; we do not store card numbers
• Content: search queries, conversations, uploaded files, and generated images
• Feedback: ratings, comments, and support inquiries

2.2 Information Collected Automatically

• Usage data: pages visited, features used, search frequency, and session duration
• Device information: browser type, operating system, and device identifiers
• Log data: IP address, access times, and referring URLs

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process transactions and manage subscriptions
• Personalize your experience and search results
• Improve AI model quality using anonymized query patterns and feedback (free tier only; paid users may opt out)
• Send transactional emails (password resets, billing)
• Display contextual advertisements (free tier only)
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers: cloud hosting (AWS), payment processing (Stripe), analytics (PostHog), error tracking (Sentry)
• AI model providers: queries are sent to third-party AI providers (OpenAI, Anthropic, Google, xAI) to generate responses; providers are contractually prohibited from using your data for training
• Legal requirements: when required by law, subpoena, or to protect our rights

5. Data Retention

We retain your account data for as long as your account is active. Search history and conversations are retained for 12 months, after which they are automatically deleted. You may delete your data at any time from your account settings. We retain anonymized, aggregated data indefinitely for service improvement.

6. Data Security

We implement industry-standard security measures including encryption at rest and in transit (TLS 1.3), secure password hashing (bcrypt), and regular security audits. However, no method of electronic transmission is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format (GDPR Article 20)
• Opt out of data collection for AI training (paid plans)
• Opt out of targeted advertising
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@aiarva.com.

8. International Data Transfers

Your data may be processed in the United States. We use Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure your data is protected in accordance with GDPR requirements.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such data, we will promptly delete it.

10. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (PostHog) to understand usage patterns. You may disable non-essential cookies through your browser settings.

11. California Privacy Rights (CCPA)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance.

13. Contact Us

For questions about this Privacy Policy, contact us at: privacy@aiarva.com