Privacy Policy for Aviha

Last Updated: [8th April 2026]

Welcome to Aviha, operated by Aviha Technologies Private Limited (“Company,” “ we,” or “our”). We are committed to protecting your privacy and ensuring transparency in how we handle your data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and AI-powered services (collectively, the “Services”). By using Aviha, you agree to the practices described in this policy.

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you (“Personal Data”).

A. Information You Provide

• Account & Authentication Data: Name and email address.
• Phone Number: Collected for account creation, identity verification, and security.
• OTP Data: We use One-Time Passwords (OTP) sent via SMS or WhatsApp to authenticate your login.
• Professional details provided during registration or through SSO (e.g., Google, LinkedIn).
• User Prompts & Inputs: The text, files, or data you input into the Aviha interface to generate responses or perform tasks.
• Communications: Any feedback or support requests sent to hello@aviha.ai or through our official WhatsApp communication channels.

B. Information We Collect Automatically

• Usage and Clickstream Data:We collect information about your activity on the Platform, such as the features you use, the pages or screens you view, the time and duration of your visits, and your "clickstream" (the path you take through the site).
• Log Data:Like most online services, our servers automatically collect information in "log files." This includes your IP address, browser type and settings, the date and time of your request, and how you interacted with the Services.
• Device and Technical Information: We collect information about the device you use to access Aviha, including the hardware model, operating system and version, unique device identifiers, and mobile network information.
• Metadata: We collect metadata related to the content you provide. For example, if you upload a file, we may collect information about when it was created and the technical parameters of the file.
• Location Information: We may collect your approximate location based on your IP address (e.g., city or country) to comply with local laws and provide localized services.
• Cookies and Tracking Technologies: We use essential and analytics cookies, web beacons, and pixel tags to maintain your session, remember your preferences, and analyze platform performance.

2. General Terms of Access and Consent

General Term on Access: By accessing or using the Platform, or the Services, or by otherwise giving us your information, you confirm that you have the capacity to enter into a legally binding contract under the Indian Contract Act, 1872, and have read, understood, and agree with the privacy practices described in this Policy, and the collection, storage and processing of your information in accordance with them. Please go through this Policy in detail and contact us if you have any questions or require any clarifications.

Age Restriction: If you are under 18 years of age, then please do not use or access the Service(s) at any time or in any manner. If you are a parent or guardian and discover that your child under 18 years of age has obtained an account on or otherwise accessed the Service, then you may alert us at hello@aviha.ai.

Service Provider Obligations: As a service provider, you undertake not to collect (or otherwise cause or permit the collection of) any data relating to children to honour any access, correction, deletion or disclosure requirements promptly and efficaciously, and in an event, no later than is required under applicable law.

Your Consent: By using the Platform and the Services, you agree and consent to the collection, transfer, use, storage, disclosure and sharing of your information as described and collected by us in accordance with this Policy. If you do not agree with the Policy, please do not use or access the Platform. If you are accessing or using Services or the Platform from an overseas location, you do so at your own risk, and shall be solely liable for compliance with any applicable local laws.

Compliance: As a service provider, you undertake to comply with applicable law and notify Customers and obtain their consent for collection, use and further sharing of their personal data by you as the service provider.

3. How We Use Your Information

We process your data for the following purposes:

• Service Delivery: To generate AI responses, fulfill specific tasks, and manage your account.
• Authentication: To verify your identity using your phone number via SMS or WhatsApp OTP.
• Task Fulfillment (Human-in-the-Loop): To ensure high-quality results, certain authorized team members may access non-anonymized user data to manually assist in fulfilling complex tasks or troubleshooting issues you encounter.
• Product Improvement & AI Training: We use user prompts and feedback to train, fine-tune, and improve our machine learning models and algorithms. This data may be used in an anonymized, pseudonymized, or non-anonymized format as required for model optimization and quality control.
• Communication: To send you service-related notifications, updates, and security alerts via email, SMS, or WhatsApp.
• Security: To detect and prevent fraud, abuse, or prohibited activities.

4. Disclosure and Distribution of Your Information

We do not sell your personal data. We may share the information that we collect for the following purposes:

• With Service Providers: We may share your information with our vendors, consultants, marketing partners, AI infrastructure providers (e.g., OpenAI, Anthropic), research firms, and other business partners. This includes outside vendors used to send you emails, SMS/WhatsApp messages, or push notifications, as well as analytics platforms (e.g., Mixpanel) to help us improve our Services. These providers are bound by strict data processing agreements.
• To Facilitate Service Requests: When you place a request for a service or task through the Platform, your information is provided to us and to the relevant Service Providers. If you provide a mobile phone number, Aviha may send you text messages or WhatsApp notifications regarding the status of your service provision.
• With Customer(s) and Partners:If a Customer requests a service through the Platform, a Service Provider's information (including contact numbers) may be provided to the Customer if required for service fulfillment. We also reserve the right to use information provided by or about Service Providers for:
  • Publishing such information on the Platform.
  • Offering new products, services, or taking product feedback.
  • Analyzing usage patterns to improve product design and utility.
  • Analyzing anonymized practice information (financial, inventory, etc.) for commercial use.
• With Academic Partners: We may share your information with academic partners for the purpose of carrying out academic research in an anonymized and/or de-identified manner.
• For Crime Prevention or Investigation: We may share information with governmental agencies or companies assisting us when we are:
  • Obligated under applicable laws or in good faith to respond to court orders and legal processes.
  • Detecting and preventing identity theft, fraud, abuse of Services, and other illegal acts.
  • Responding to claims that content violates third-party intellectual property rights.
  • Enforcing our Terms of Use and other agreements to protect the rights, property, or safety of the Company, our customers, or others.
• For Internal Use:We may share your information with any present or future member of our "Group" or affiliates for internal business purposes. "Group" refers to any entity controlled by, controlling, or under common control with the Company, or in the case of a natural person, any Relative as defined under the Companies Act.
• With Advertisers and Advertising Networks: We may work with third-party network advertisers to serve advertisements on the Platform or other media. These parties may use tracking technologies (cookies, JavaScript, web beacons) to personalize content. You may opt out of interest-based advertising on third-party sites through networks like Google AdSense or Facebook Audience Network (visit www.aboutads.info/choices for more info).
• To Fulfill the Purpose for Which You Provide It: We will share information as necessary to carry out the specific task or purpose you requested.
• With Your Consent: We may share your information in other ways if we notify you and obtain your specific consent.

5. AI Training and Opt-Out

Aviha thrives on continuous learning. By using our Services, you acknowledge that your prompts may be used to train our AI models.

• Anonymization: Whenever possible, we strip personally identifiable information (PII) before using data for broad model training; however, as noted in Section 2, certain training processes may utilize non-anonymized data to improve contextual accuracy.
• Opt-Out:Enterprise users may request a "Zero-Retention" or "No-Training" environment by contacting hello@aviha.ai.

6. Data Security and Retention

We implement industry-standard security measures, including:

• Access Controls:Only specific team members with a "need-to-know" for task fulfillment are granted access to user data.
• Retention: We retain your data for as long as your account is active. If you delete your account, we will purge or anonymize your data within 360 days, except where legal retention is required for tax, audit, or legal purposes.

7. Privacy of Minors

We strongly encourage parents and guardians to supervise the online activities of their minor children and consider using parental control tools available from online services and software manufacturers to help provide a child-friendly online environment. These tools also can prevent minors from disclosing their name, address, and other personally identifiable information online without parental permission. Although the Aviha Platform is not intended for use by minors, we respect the privacy of minors who may inadvertently use the internet or the mobile application.

8. Your Rights

In accordance with India’s DPDP Act 2023, and where applicable, GDPR or CCPA, you have the right to:

• Access & Portability: Request a copy of the data we hold about you.
• Correction: Ask us to update or fix inaccurate data.
• Erasure: Request that we delete your personal data.
• Withdraw Consent: Withdraw your consent for data processing. This may limit your ability to use certain features.

To exercise these rights, contact us at hello@aviha.ai.

9. Miscellaneous

Disclaimer: We cannot ensure that all of your Personal Data and Sensitive Personal Data or Information (SPDI) will never be disclosed in ways not otherwise described in this Policy. Therefore, although we are committed to protecting your privacy, we do not promise, and you should not expect, that your information or private communications will always remain private. While using the Platform or availing any of our Services, you understand and agree that you assume all responsibility and risk for your use of the Platform, and Internet generally, and the information you post or access and for your conduct on and off the Platform.

Indemnity: You agree and undertake to indemnify us in any suit or dispute by any third party arising out of disclosure of information by you to third parties either through our Platforms or otherwise and your use and access of websites, applications and resources of third parties.

Severability: Each clause of this Policy shall be and remain separate from and independent of and severable from all and any other clauses herein, except where otherwise expressly indicated or indicated by the context of the Policy. The decision or declaration that one or more clauses are null and void shall have no effect on remaining clauses of this Policy.

Limitation of Liability: The Company shall not be liable for any consequential, incidental, special, indirect, exemplary or punitive damages, or damages for any loss of profits, revenue or business, regardless of the nature of the claim, even if the Company has been notified of the possibility of such damages.

Governing Law and Jurisdiction: This Policy shall be governed by the laws of India as applicable between residents of India without regard to any principles of conflict of laws. Subject to the Terms of use, any and all disputes arising hereunder shall be subject to the exclusive jurisdiction of the courts at Bengaluru, India.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our site and updating the "Last Updated" date.

11. Contact & Grievance Redressal

In accordance with the Digital Personal Data Protection Act, 2023, if you have any questions or grievances regarding our data practices, please contact our Grievance Officer: