This Privacy Policy explains how Fairform Labs, LLC (“we” or “us”), the company that runs Alvia, handles personal information when you use our website, the documentation, the dashboard, the Alvia API and the MCP server (together, the “Service”).
Two kinds of data
- Your content. Our customers’ applications send Alvia statements, conversations, queries and memory feedback, and Alvia forms memories from them. This content can include personal information about the customer’s own users. We process it for the customer, as the Terms of Service describe, and the customer decides what is sent and why. If you are one of our customer’s users, contact that customer about your information.
- Account and website data. Information about our customers’ staff and the visitors to our website. This policy describes how we handle it, and how long we keep your content.
What we collect
- Account information. Your name, email address, profile picture, organization and role, through our sign-in provider, and the email addresses of the people you invite.
- Billing information. Your plan, billing contact and payment history. Card details are held by our payment processor, not by us.
- Your content. The content your application sends, the memories formed from it and their earlier versions.
- Activity records. For each call made with an API key: the operation, its time, result and scope, the query text of read calls and the IDs and scores of the memories returned. We also count the reads and writes each organization uses.
- Website and dashboard data. Website page views, counted by analytics that use no cookies. Error reports from the website, the dashboard and the API, which hold details such as the page or request, the browser, the error and account IDs, and are set up not to store IP addresses. Our hosting providers process IP addresses to deliver and protect the Service. See the Cookie Policy.
- Messages. What you send us when you email us.
How we use it
- To provide the Service and support you
- To bill you and to measure your use against your plan
- To keep the Service secure, prevent fraud and enforce our Terms, such as by comparing names, email addresses, email domains, organization details and payment details to find accounts that break the one Free organization rule
- To send you messages about your account, billing, security and changes to the Service
- To improve the Service, using data that does not include your content or identify you
- To meet legal duties
We never use your content to train or improve AI models. We do not sell personal information, we do not share it for advertising and we do not show ads.
Who we share it with
- Service providers. Companies that help us run the Service: cloud hosting and databases, search indexing, AI models, sign-in, payment processing, email delivery, error reports and website analytics. To form memories and answer queries, we send the content needed for each request to AI model providers. Some service providers also use data under their own terms, for example our payment processor to prevent fraud and our AI model providers to detect abuse or fix problems.
- Legal reasons. When the law requires it, or to protect the rights, safety or property of our company, our customers or others. We disclose your content only as the Terms allow.
- Business transfers. As part of a merger, acquisition or sale of assets, under the protections of this policy.
How long we keep data
- Your content stays until you delete it.
- Forgetting a memory removes it from results, usually at once and otherwise as soon as a delayed step finishes. Its earlier versions, relationships, memory feedback and the text you submitted stay until you delete the project.
- Deleting a project deletes its memories, earlier versions, relationships, memory feedback, submitted text and API keys. Its activity records stay until they expire, without query text or scope.
- Deleting an organization deletes all of its projects, content, activity records, usage counts and member data at once, or as soon as a system that was unavailable is back. The same happens when we close an organization.
- Activity records are deleted after 90 days.
- Billing records stay as long as tax and accounting laws require.
- Backups. We keep system-wide backups only to recover from an outage. You cannot access them, and deleted data can stay in them for up to 12 months, until they expire.
- Legal duties. We keep data longer only when the law requires it.
- Sign-in profile. Your name and email address can stay with our sign-in provider after an organization is deleted. Email privacy@alvia.ai to delete it, and we will delete it within 30 days. If you belong to another organization, your profile stays for that organization.
How we protect it
Each API key can reach only its own project. The Service uses encrypted connections (HTTPS). We keep only a hash of each API key, plus a short ID and its last four characters so that you can recognize it, and any admin can revoke a key at any time. See Security for more. No system is perfectly secure. If a breach affects your personal information, we will tell you as the law requires. Report a security issue to security@alvia.ai.
Your choices
- Your content. Retrieve, forget and delete your content through the API and the dashboard.
- Your account information. Email privacy@alvia.ai to see, correct or delete it.
- Your state’s privacy rights. If a state privacy law gives you rights over your personal information, email privacy@alvia.ai. We will respond as that law requires.
- Do Not Track. We do not track visitors across other websites, and we do not let other companies do so through our website or dashboard, so we do not respond differently to Do Not Track signals.
Children
The Service is for developers and is not for anyone under 13. We do not knowingly collect personal information from children under 13 who use the Service, and if we learn that we hold it, we will delete it. If your application is directed to children under 13, you are responsible for meeting the Children’s Online Privacy Protection Act (COPPA), including getting parental consent, before you send their information to Alvia.
Changes to this policy
We may update this policy. We will tell you at least 30 days before a material change takes effect, by email to your organization’s admins or in the dashboard. If a change would let us use information we already hold in a materially different way, we will ask for your consent first. The date at the top shows the latest version.
Contact
Fairform Labs, LLC
8735 Dunwoody Place, Ste N
Atlanta, GA 30350
United States
privacy@alvia.ai