📋 1. What We Collect
To provide Ava's memory-aware support experience, we collect the following information:
- Account Information — your name, email address, and encrypted password
- Conversation Content — messages you send and responses we generate
- Metadata — sentiment scores, detected intent, frustration ratings, and interaction timestamps
- Usage Data — how you interact with Ava, including features used and session duration
Last updated: June 28, 2026
🔧 2. How We Use Your Data
We use your data to provide and improve Ava AI's functionality:
- Respond to your messages and maintain conversation context across sessions
- Generate sentiment, intent, and frustration scores that help Ava respond appropriately
- Improve accuracy and reliability over time through aggregated analysis
- Personalize your experience by remembering preferences and past interactions
🧠 3. Persistent Memory
Ava stores a summary of past conversations so you don't have to repeat yourself. This includes:
- Important facts you've shared (name, preferences, ongoing projects)
- Recurring topics and issues you've discussed
- Contextual information that helps Ava provide better responses
You can view, export, or delete this stored memory at any time from your account settings.
📊 4. First-Party Product Analytics & Telemetry
To evaluate product readiness, understand feature adoption, and improve Ava during the beta phase, we collect privacy-safe first-party product events. We adhere to strict privacy safeguards:
- No Raw Chat or Prompt Storage — Product analytics telemetry never captures or records raw chat prompts, assistant responses, factual memory text, or passwords.
- No Invasive Fingerprinting — Anonymous visitors are tracked using only transient, random anonymous session IDs generated in your browser. We never track or derive identity from IP addresses, browser hardware fingerprints, or device identifiers.
- No Advertising or Data Brokerage — We do not sell, rent, or monetize your data. We never display third-party advertisements or use third-party tracker scripts.
- Controlled Metadata — Telemetry records only coarse, low-sensitivity metadata (e.g., referrer path, button category, response latency bucket). All unknown or sensitive metadata fields are rejected by the server.
🔒 5. Data Sharing
We take your privacy seriously. We do not sell or rent your personal data to third parties.
Information is processed solely by essential infrastructure providers required to operate Ava (such as cloud hosting and LLM inference providers via Groq), under strict confidentiality obligations.
We never share conversation logs or user data for third-party behavioral advertising or cross-site tracking.
🗑️ 6. Data Retention & Deletion
You have complete control over your data:
- Raw Product Events — Retained for a maximum of 60 days (configurable 30–90 days via
PRODUCT_EVENT_RETENTION_DAYS). Raw product events are removed by an automated background cleanup task that runs on application startup and then every 24 hours. No raw chat messages, responses, or passwords are ever stored in product events.
- Anonymous Session Events — Anonymous visitor telemetry follows the same 60-day retention policy. Anonymous session IDs are randomly generated and contain no personally identifying information (no IP, browser fingerprint, or device data).
- Account-Associated Telemetry — When you delete your account, all product events and beta feedback linked to your account are permanently purged immediately.
- Beta Feedback — Retained until reviewed, resolved, or manually deleted by administrators. Anonymous feedback cannot include a follow-up contact request.
- Conversation History & Sessions — Stored as long as your account is active; individual conversations can be deleted at any time in the chat interface.
- Persistent Memory — Viewable and clearable at any time from your account settings.
- Account Deletion — You can request full deletion of your account and all associated data at any time.
We will permanently purge your data upon request, except where retention is required by applicable law.
🛡️ 7. Security
We implement industry-standard security measures to protect your data:
- Encryption — all data is encrypted in transit (TLS) and at rest
- Authentication — password hashing with PBKDF2 and secure session management
- Access Controls — strict internal access policies and monitoring
- Regular Audits — periodic security reviews and vulnerability assessments
While we strive to protect your data, no system is 100% secure. We encourage you to use strong, unique passwords and enable two-factor authentication where available.
📧 8. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please reach out:
Email: privacy@ava.ai
Response time: We aim to respond within 48 hours
Last updated: June 28, 2026