Draft. This policy is not yet in effect. Highlighted items must be completed and the whole text reviewed before Aven Cloud admits anyone.

Privacy Policy

Effective [EFFECTIVE DATE]

Aven is a personal AI assistant run by [OPERATOR NAME] ("we"). Aven Cloud is an invitation-only private pilot for up to ten people. This policy explains what we collect, why, who processes it and the choices you have. Contact us at [CONTACT EMAIL].

If you join the waitlist

We store the email address you enter, when you joined and which page you used, in a Google Sheet in our Google account. We use it only to decide on pilot admission and to write to you about it. We do not send marketing email. We keep a waitlist entry for [WAITLIST RETENTION], and you can ask us to delete it at any time.

If you join the pilot

Aven Cloud stores what you create in the hosted service:

• your email address and sign-in records;
• conversations, accepted memory, sources, files, schedules and receipts;
• connected-account credentials, encrypted on the server;
• usage records for your monthly model allowance.

Aven Cloud is not end-to-end encrypted. Content you authorize for a request is processed by the model and browser providers configured for that request.

How we protect connected accounts

Credentials for connected services and devices are encrypted with AES-256-GCM and bound to their owner and purpose. They are never sent to your browser. A cloud browser handover link is shown only to you, only when you ask for it, and expires.

How long we keep things

• Chats are kept for 30 days by default. You can choose 90 days or manage them yourself.
• Accepted memory, files and schedules stay until you remove them.
• Forgetting memory or removing a source keeps it out of future answers. Earlier answers may still contain it.
• Backups are kept for [BACKUP RETENTION]. We cannot promise forensic erasure from backups or from providers' own systems.

Diagnostics

Diagnostic reports exclude conversation content, Google content, screenshots, provider tokens and browser session links. Notification text is private by default.

Mac companion

The optional Mac companion reads only folders you enrol and may send text from them to Aven Cloud and model providers when a request needs it. Its local database is not encrypted. Device credentials use the operating system's encrypted storage.

Service providers

We use these providers to run the pilot. [CONFIRM FINAL PROVIDER LIST]

• Supabase for sign-in, database and file storage;
• Render for the API and background workers, in the US West region;
• Vercel for the website;
• OpenRouter, which routes model requests to OpenAI or Anthropic as you choose;
• Browserbase for the private cloud browser;
• Google Sheets, for the waitlist;
• Google, only if you connect Gmail or Google Calendar.

Hosting in US West does not mean model providers process requests there.

Your choices

• Disconnect any service. Its credentials are removed and routines that depend on it pause.
• Delete conversations, memory, files and schedules from Settings.
• Ask us at [CONTACT EMAIL] for a copy of your data or to delete your account.

[ADD RIGHTS REQUIRED IN YOUR JURISDICTION, FOR EXAMPLE GDPR OR CCPA]

Changes

We will post changes here and tell pilot members by email before they take effect.