Privacy Policy

Aurva is an AI Business Operations Workforce operated as a sole proprietorship based in California, United States (“Aurva”, “we”, “us”). Questions about this policy can be sent to aurva.operations@gmail.com.

We collect three categories of information:

• Account data — name, email address, workspace name, industry, timezone, role, and profile picture.
• Business data — events, transactions, invoices, tickets, and metadata streamed from the systems you connect to Aurva (Stripe, Shopify, QuickBooks, Slack, Salesforce, etc.). We only ingest what your credentials authorize us to read, and we minimize what we persist — order and customer identifiers, event timestamps, and worker-generated audit trails. Full personal fields (customer name, email, phone, shipping address) from third-party systems like Shopify are fetched on demand for the specific worker action that needs them and are not stored beyond the pilot window.
• Usage data — device, browser, IP address, pages visited, feature use, and diagnostic logs, collected to keep the product secure and improve it. Emails and other personal identifiers are redacted from application logs.

We use your information to:

• Provide, operate, and maintain the Aurva service — including running AI workers on your workspace.
• Detect operational problems and opportunities across your business and prepare recommended actions.
• Send transactional messages (billing receipts, security alerts, approval requests, service updates).
• Improve Aurva's models and features. Your business data is never used to train third-party models.
• Comply with legal obligations and enforce our Terms of Service.

We share information only with:

• Sub-processors that power Aurva — payment processing (Stripe), transactional email, cloud hosting, error monitoring, and AI providers we use to power our workers. A current list is available on request.
• Your team — other members of your Aurva workspace, according to the role you assign them.
• Authorities — when we are legally required to do so or need to protect rights, safety, or property.

We do not sell your personal or business data. Ever.

We retain account and business data for as long as your Aurva workspace is active. When you close your workspace we delete personally-identifiable information within 30 days, except where we are legally required to retain it (for example, financial records). Business memory that Aurva has learned from your workspace is deleted alongside your workspace.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal data. To exercise any of these rights email aurva.operations@gmail.com. We will respond within 30 days.

Aurva is operated from California, United States and may transfer data to sub-processors in other regions. We use Standard Contractual Clauses and equivalent safeguards where required by law.

We protect your data with encryption in transit and at rest, least-privilege access, audit logging, and continuous monitoring. See our Security page for details.

Aurva is a B2B product not intended for anyone under 16. We do not knowingly collect data from children.

We will notify you in-product and by email at least 14 days before material changes take effect. Continued use of Aurva after that period constitutes acceptance of the updated policy.