Privacy Policy

This policy explains how Aolva collects, uses and protects your information when you use our website, desktop app and API services. By using our services you acknowledge you have read and understood this policy.

Information we collect

• Account information: email at registration, login credentials (stored encrypted).
• Usage data: API call volume, model usage, request times, error logs — for billing, quota and service stability.
• Content you submit: inputs sent to models and generated outputs, used to fulfill your requests.
• Technical info: basic logs such as IP, device and browser type.

How we use information

• Provide, maintain and improve the service, including routing, quota and billing.
• Ensure security, prevent abuse and fraud.
• Communicate product and service information within the scope of your consent.

Handling of model content

Your inputs and outputs are used to fulfill your request in real time. We won't use your private content for public purposes; if we want to use data for model improvement, we'll seek separate consent or provide an opt-out. Capabilities like high-end reasoning follow the same handling principles when routed server-side.

Third parties

We use necessary infrastructure and providers (e.g. content delivery/network protection, payment processing) to run the service. These providers access relevant data only to the extent necessary to serve us, and are bound by their respective terms.

Data retention & security

We retain data only as long as needed to provide the service and meet legal obligations, and take reasonable technical and administrative measures to protect it. Sensitive credentials are stored encrypted.

Cookies & local storage

We use cookies and browser local storage by purpose:

• Essential: keep login sessions, security checks and basic features; cannot be turned off.
• Preference: remember language, interface and other settings to improve experience.
• Analytics: understand product usage in aggregate, anonymized form to help us improve.

You can manage or clear cookies in your browser; disabling non-essential cookies doesn't affect core features.

Subprocessors

To run the service, we entrust necessary data to contractually bound third parties, e.g.: identity authentication (login), content delivery and network security, payment processing, cloud and compute infrastructure. These subprocessors access data only to the extent necessary to serve us, and must apply protections comparable to this policy.

Cross-border data transfer

Our operating entity is in Canada; data may be transferred and stored across the jurisdictions where we and our subprocessors are located. Where cross-border transfer occurs, we apply safeguards required by applicable law (such as standard contractual clauses or equivalent mechanisms).

Minors

Our services are for adults. We do not knowingly collect personal information from minors under the age set by applicable law. If you believe we have inadvertently collected a minor's information, please contact us and we will delete it promptly.

Data security incidents

If a security incident occurs that may endanger your personal data, we will notify affected users and relevant regulators within a reasonable time as required by applicable law, and explain the measures taken and recommended.

Your rights

Within applicable law, you may:

• access, correct or delete your personal data;
• restrict or object to certain processing, withdraw consent given;
• request the data you provided in a portable form;
• lodge a complaint with the competent regulator about our processing.

To exercise these rights, contact the email below; to protect your account, we may need to verify your identity first. We will respond within the period required by applicable law.

Contact us

For privacy matters or to exercise rights, contact [email protected]; operating entity: 17866381 Canada Inc.

Policy updates

We may update this policy from time to time. Major changes will update the "last updated" date on this page and be separately notified where necessary.