Privacy Policy.

We collect three categories of data, and we'll be specific about each. If we don't list it here, we don't collect it.

Account information

When you sign up, we collect:

• Your name and email address (so we can identify you)
• Your company name (optional, used for billing)
• A password hash (we never see your actual password — only its salted bcrypt hash)
• Your billing details when you upgrade to a paid plan (handled by Stripe; we never store your card number)

Product usage data

When you use Aiva Chat, we record:

• Conversation transcripts handled by your assistants (this is your customers' data, in your account)
• Configuration settings — your assistant prompts, escalation rules, integrations
• Aggregate metrics — conversation counts, bookings, leads and topics, shown in your dashboard

Analytics and diagnostics

To keep the product working, we collect:

• Browser type and IP address (used to debug issues and detect fraud — not for advertising)
• Server logs — when something breaks, we record the error on our own servers

The data we collect is used only to provide and improve Aiva Chat. Specifically:

• Run the product: deliver conversations, route to the right channel, store transcripts for your dashboard.
• Bill you: run your Aiva Chat subscription through Stripe and send receipts.
• Support you: when you email support@aivachat.io, our team needs to look up your account.
• Improve the product: error logs and aggregate counts tell us what breaks and what needs work.
• Comply with the law: we keep server logs only as long as we need them for security, fraud detection and legal obligations.

What we never use it for

• We do not train or fine-tune AI models on your customer conversations.
• We do not share data with third parties for advertising or marketing purposes.
• We do not sell anonymized or aggregated data. Ever.

We share data with a small number of service providers that we need to run Aiva Chat. Twilio and OpenAI run on your own accounts, so their terms with you apply. The full list is on our sub-processors page.

Beyond these processors, we will share your data only when required by law (a court order, a valid government request) or when you explicitly direct us to (e.g. when you connect Google Calendar, HubSpot, or a webhook).

If you choose Connect with Google for an assistant or a team member, you let Aiva Chat use your Google Calendar to book appointments. We ask Google for:

• Your Google email address (openid, email), so you can see which account is connected
• Free/busy times (calendar.freebusy), so we only offer times when you are free. We see when you are busy, not what the event is
• Events (calendar.events), so we can add each booked appointment to your calendar, update or remove it when it is moved or cancelled, and notice when you move or delete an event we created

We store an encrypted sign-in token and the ids of the events we created, nothing else from your calendar. We don't read the content of events we didn't create, and we don't pass calendar data to AI models: the assistant is only told which times are open.

Aiva Chat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google user data, use it for advertising, or use it to train AI models, and people at Aiva Chat only see it with your permission, for security, or when the law requires it.

You can disconnect at any time from Booking setup in Aiva Chat or from your Google Account permissions. Disconnecting deletes the stored token; the events already on your calendar stay there.

Aiva Chat stores your data on Amazon Web Services in the United States (US East, Northern Virginia). We don't offer a choice of region today.

Data is encrypted in transit between your browser, the widget, webhooks and our servers. Call audio and AI processing run through your own Twilio and OpenAI accounts, which may process data in other locations under their own terms.

Whether you're in India, the EU, the US, or anywhere else — you have the same rights here. We don't tier privacy by jurisdiction.

• Access: request a copy of all data we hold about you. Much of it can be downloaded as CSV from your dashboard, and we'll send the rest within 30 days.
• Correction: most account details can be edited in your dashboard. For anything else that's wrong, ask us and we'll fix it promptly.
• Deletion: request that we delete your account and all associated data. Done within 30 days.
• Portability: get your data in a machine-readable format to take to another service.
• Object to processing: ask us to stop processing your data for specific purposes (e.g. analytics).
• Complain: if you think we've handled your data badly, file a complaint with your local data protection authority.

To exercise any of these rights, email support@aivachat.io from the address on your account.

We don't use advertising cookies, analytics tools, third-party tracking pixels, or remarketing tags on aivachat.io or our dashboard.

The dashboard keeps your sign-in and a few preferences in your browser's local storage, and the chat widget stores a visitor ID so a conversation survives page changes. Clearing your browser storage removes them.

See our full Cookie Policy for details.

Aiva Chat is a B2B product. Our service is not intended for use by anyone under 16. We don't knowingly collect personal data from children. If you believe we've inadvertently collected data from a minor, email support@aivachat.io and we'll delete it within 7 days.

When you text or call the Aiva Chat business line, Woyce LLC may text you back: replies, booking confirmations, and a text if we miss your call. Product updates and offers go only to people who tick a separate, unticked box on our website. Message frequency varies, message and data rates may apply, and you can reply STOP to opt out at any time. The full details are on our SMS terms page.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We update this policy from time to time. When we do, we:

• Update the “Last updated” date at the top
• Email everyone 30 days in advance of any material change

Continued use of Aiva Chat after the new policy takes effect means you accept the changes. If you don't, you can delete your account at any time.

Aiva Chat is operated by Woyce Technologies and Services Private Limited and provided in the United States by Woyce LLC. Both follow this policy.

Email questions about this policy directly to support@aivachat.io. A real human reads everything that comes in — and we reply within four hours during business hours.

You can also write to us at:

Privacy requests from anywhere, including the EU and UK, go to the same address: support@aivachat.io.