Your details, used for one thing.

Aivaura ("Aivaura", "we", "us") is an AI and automation studio based in Bhavnagar, Gujarat, India. This notice explains how we handle personal data collected through aivaura.com, including its forms, readiness check and chat assistant.

For this website, Aivaura is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the controller under the EU and UK General Data Protection Regulation ("GDPR").

When we build systems for clients, the client decides what data those systems process. In that work we act on the client's instructions as a Data Processor, under a separate agreement. This notice doesn't cover data inside client systems.

We don't ask for sensitive data such as financial, health or government ID details. Please don't include them in a message.

• Replying to your enquiry and, if you go ahead, scoping and delivering the project. Basis: your consent, given when you tick the box on the form (DPDP Act section 6; GDPR Art. 6(1)(a)), and steps you ask us to take before a contract (GDPR Art. 6(1)(b)).
• Running the chat when you start it, and keeping a record of the conversation so we can answer questions you leave with us and improve the replies. Basis: the voluntary use of the feature for that purpose (DPDP Act section 7(a)); performance of the service you request (GDPR Art. 6(1)(b)); our legitimate interest in following up and improving the assistant (GDPR Art. 6(1)(f)).
• Keeping the site secure and enquiries genuine, including rate limits, spam filtering, checking phone numbers, and recording the IP address, approximate location and device that sent each enquiry. Basis: our legitimate interest in protecting the site (GDPR Art. 6(1)(f)).
• Showing examples in your language, using your approximate location only in the moment, without storing it. Basis: our legitimate interest in making the site relevant to you (GDPR Art. 6(1)(f)). You can pick another language on the example at any time.
• Understanding how the site is used, through Google Analytics. Basis: your consent through the cookie settings, which you can withdraw at any time.

We don't sell personal data, use it for automated decisions about you, or add you to marketing lists without asking.

We use a small number of service providers who process data on our behalf, only for the purposes above:

We may also disclose data where Indian or other applicable law requires it, for example to respond to a lawful request from an authority.

Some of these providers store or process data outside India, mainly in the United States and the European Union. Transfers outside India are permitted under section 16 of the DPDP Act except to countries the Government of India restricts, and we don't use providers in restricted countries.

For visitors in the EU, EEA or UK, transfers rely on the providers' Standard Contractual Clauses or the EU-US Data Privacy Framework, where the provider is certified.

• Enquiries that don't lead to a project: up to 24 months after our last contact, then deleted.
• Enquiries that become a project: for the length of the engagement plus the period Indian tax and contract law requires us to keep records, typically 8 years.
• Chat conversations: up to 12 months, then deleted. Our AI providers may keep them briefly under their own policies.
• Server logs: up to 30 days. Analytics data: up to 14 months.

Under the DPDP Act, you can:

• get a summary of the personal data we hold about you and who we've shared it with (section 11);
• have it corrected, completed, updated or erased (section 12);
• withdraw your consent at any time, as easily as you gave it (section 6(4)). Withdrawing doesn't affect what we did before;
• have your grievance addressed by us (section 13); and
• nominate another person to exercise these rights if you die or become incapable (section 14).

Under the GDPR, you also have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests.

To use any of these rights, email contact@aivaura.com. We'll reply within 30 days, and may ask you to confirm your identity first. There's no charge.

This site is meant for businesses. We don't knowingly collect data from anyone under 18, and we don't track or target children. If you think a child has sent us their details, contact us and we'll delete them.

We use only the cookies the site needs to work, plus analytics cookies if you allow them. See the cookie policy for the full list, or change your cookie settings.

The site runs only over HTTPS. Forms are protected with validation, rate limits and spam filtering, secret keys stay on the server, and access to stored enquiries is limited to the people who need it. No system is perfectly secure, so if a personal data breach does happen, we'll notify the Data Protection Board of India and affected people as the DPDP Act requires, and the relevant supervisory authority under the GDPR within 72 hours where it applies.

Grievance Officer, Aivaura
Bhavnagar, Gujarat, India
Email: contact@aivaura.com

We acknowledge grievances within 7 days and aim to resolve them within 30 days.

If you're not satisfied with our response, you can complain to the Data Protection Board of India under the DPDP Act. If you're in the EU, EEA or UK, you can also complain to your local data protection authority.

If we change how we use personal data, we'll update this page and the date at the top. Significant changes will be highlighted on the site.