Where your data is, and who can read it.
What a company needs to know before it sends us a document. Anything else, ask below.
Where it is processed
On the standard plans in the European Union and the United States. For companies, in Switzerland on request, under a separate contract.
Encrypted, on the way and in storage
Every connection runs over TLS. Conversations, attachments, project files and Alva's memory, tasks and messages are stored encrypted with AES-256; the key is kept outside the database, so a copy of it cannot be read.
Nobody reads along
Conversations are not evaluated for statistics, research or advertising. Two administrators could technically reach stored data; they look only when you ask for help.
Never used for training
Not for our models and not for anyone else's, on every plan.
What you control.
Delete means delete
A conversation you delete is removed from the database, not hidden. Your account goes in one step.
Incognito
Conversations in incognito mode are never stored. They exist in your window and nowhere else.
One key per environment
Separate API keys for test and production, usage visible per key. Revoke one and only that one stops working.
Colleagues do not read along
A shared business account is not a shared inbox. Nobody sees anybody else's conversations, the owner included.
What is in writing.
Data processing agreement
For business accounts, on request, with the usual annexes.
Every provider named
Who hosts, who runs the models, who sends mail: listed by name in the privacy policy.
A Swiss contract
Swiss company, Swiss law, invoices in francs with a VAT number.
Questions about your data?
A data processing agreement, the Swiss deployment, a question from your IT: write to us and we answer.