Privacy Policy

1. Local data

Aivium is an application for the computer and for the phone (Android and iOS). Your files are opened from your device or from storage you connect, and by default are not uploaded to our servers.

2. What data we process

• Account data: name, email, subscription and license status.
• Payment data is processed by the payment provider, including Paddle where a payment is processed by Paddle; we do not store full card details.
• Technical data about application failures — described in detail in “Diagnostics and error reports” below.

3. Diagnostics and error reports

To find and fix defects, Aivium sends us technical crash reports.

Sent automatically: an anonymous installation identifier, application and operating system versions, the error class and stack trace, and structured agent events — the names of the tools used, retry counters and how the task ended.

Not sent: the content of your conversations with the agent, your files, keys and passwords, your e-mail address, the names of your projects and files.

If you submit a report yourself (the “Send” button in the error dialog), it also carries your comment, e-mail address, project name and the name of the open file — so that we can investigate and reply to you. The same dialog lets you submit anonymously.

You can turn diagnostics off in the application settings. A report you submit manually is delivered regardless — we treat pressing the button as your consent.

4. Working with AI providers

To fulfil a request, the agent may send the context you select to the AI provider you select. This is a separate workflow action, not an automatic upload of all files. Processing on the provider's side is governed by its policy.

5. Secrets and keys

API keys and credentials are stored in the secrets vault on your machine and are not passed to the agent without an explicit action.

6. Cloud connections: email, Telegram, WhatsApp Business

Some Aivium Cloud features work with your external accounts only after you connect them yourself in the application (Settings → Email / Messengers). A connection can be revoked there at any time.

What we receive and store. For email — the mailbox credentials (IMAP/SMTP or a Google token); for Telegram — your Telegram session; for WhatsApp Business — the identifiers of your business account and phone in Meta (WhatsApp Business Account ID, Phone Number ID) and the access token Meta issues when you connect through the official Facebook login page. All credentials and tokens are kept in the encrypted Aivium Cloud vault and are never returned to the application, to models or to chats.

Messages. For WhatsApp Business we receive from Meta, via webhook, only the messages and delivery statuses that arrive at the connected phone after it was connected; no older history is imported. Message text, sender name and attachment descriptions (never the files themselves) are stored encrypted and used solely to show them to you and to perform the tasks you assigned to the agent. Email and Telegram in the cloud are read on demand by a task and are not copied into permanent storage.

What we do not do. We do not share connection data or conversations with third parties, do not use them for advertising or model training, and do not send messages on your behalf without an action you set up in a task yourself. Data from the Meta platform is processed in accordance with the Meta Platform Terms and used only to operate the features you enabled.

Retention. Credentials and tokens — until the connection is revoked. WhatsApp Business messages — up to 90 days from receipt, or until deleted at your request.

7. The mobile app: what it asks for on your phone

The Aivium mobile app asks for a permission only for a specific feature, and only when you use that feature. You can withdraw any of them in your phone's settings — the app keeps working, only the matching feature stops.

Google Drive. When you connect Google Drive, the app reaches only the files it created itself or that you opened for it (the drive.file scope) and its own service folder, which is hidden from the Drive interface (drive.appdata). The rest of your Drive is out of reach for the app — it can neither read nor list it. The service folder holds chat backups; the files you share sit in the «Aivium» folder on your Drive and are encrypted before upload — the key stays with you and never reaches our servers.

Use of data obtained through Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not pass this data to third parties, do not use it for advertising and do not feed it to models for training. You can disconnect Google Drive in the app, and revoke the app's access on your Google account permissions page.

Contacts. Used to show which people from your address book already use Aivium, and to let you send and receive a contact card. The book is read on the phone itself; we do not upload it wholesale to our servers and do not use it for mailings.

Microphone and speech recognition. Calls, the voice agent and dictating text. Speech is turned into text by your phone's operating system. A call is recorded only if you switch recording on, and the people on the call can see that recording is running.

Camera. Scanning the QR code to pair with your computer, video calls, and taking photos to send in a chat.

Photos, video and files on the phone. When you attach something, the app opens the system file picker and reads only what you pick there. We do not browse your gallery and do not upload its contents.

Screen recording. Only for sharing your screen during a call, and only while you have it on.

Notifications. Push notifications are delivered through Firebase Cloud Messaging (Google). The service receives a technical identifier of your app installation; the contents of your messages are not disclosed in notifications.

Biometrics. A fingerprint or Face ID unlocks your keys and confirms sensitive actions. Biometric data is handled by the phone's operating system; it is never given to the app and never sent to us.

Updates. A copy installed from Google Play updates only through Google Play. A build downloaded directly from aivium.app may check our site for a newer version and offer to install it; for that it contacts aivium.app for details of the latest release.

8. Data deletion

You can revoke a connection and delete its credentials in the application: Settings → Email / Messengers → “Disconnect from Aivium Cloud”. The token is destroyed immediately and new messages stop arriving.

To delete stored WhatsApp Business conversations, account data or all of your data, write to support@aivium.app from the email address your Aivium account is registered with. We confirm deletion within 30 days. If you connected WhatsApp through Facebook, you may also request the same by removing the Aivium app in your Facebook settings — we receive the notice and delete the related data.

9. Cookies

The website uses necessary cookies for sessions and basic analytics. You can restrict them in your browser settings.

10. User rights

You can request access to your data, its correction or deletion by writing to support@aivium.app.

11. Changes

This policy may be updated. The current version is always available on this page.

12. Contacts

Questions about data processing: support@aivium.app. See also the offer and the license agreement.

Personal data operator details

• Name: TOO «MADE IN DREAM»
• BIN: 251040021293
• Registered address: 041602, Ospanhan Aubakirov str., house 9, Talgar, Almaty region Kazakhstan
• E-mail: billing@aivium.app
• Bank: АО Kaspi Bank
• SWIFT: CASPKZKA
• Settlement account: KZ58722S000049147728