Privacy Policy
What Allevia collects, why, where it is kept, how long, who handles it for us, and how to get a copy or have it deleted. In plain words, because you should not need a lawyer to read it.
Last updated: 15 October 2026
The short version
- We read your public website, and whatever you choose to share: questions, photos, numbers and connected accounts.
- Each business is its own separate database. We never mix businesses, never sell your information, and never use it to train AI models.
- An AI model (Claude, from Anthropic) reads what it needs to answer. Sensitive details are removed from text first.
- Connections to Instagram, Google Search Console, Google Analytics and Google Business Profile are read-only, and are being built.
- Ask for a copy, or for everything to be deleted, by email. We do it within 30 days.
This summary is for convenience. The full text below is what applies.
1. Who we are
Allevia is operated by Allevia AI, with its registered office at Raipur, Chhattisgarh, India ("Allevia", "we", "us"). You can reach us about privacy at ankit@allevia-ai.in. Our person responsible for privacy requests and complaints is Harjinder Singh Vohra.
We play two roles. For what a business gives us to run its team (its website, photos, numbers, connected accounts, chats), we process the information on that business's behalf and under its instructions, and the business decides what to share. For our own website, contact requests and billing, we decide how the information is used.
2. What this policy covers
This policy covers the Allevia website at allevia-ai.in ("the site"), the Allevia app, the public demo, and the Allevia server and bot on Discord (together, "the service"). It does not cover other sites we link to, or the platforms you connect, such as Instagram, Google and Discord, which have their own policies.
3. What we collect, and why
We collect only what the service needs. Here is each kind of information, where it comes from, what we use it for, and where it is kept.
| Where it comes from | What we collect | Why we use it | Where it is kept |
|---|---|---|---|
| You contact us or ask for a Brain Snapshot | Your name, email address, business name, website address, country and whatever you write to us. | To reply, to set up your team and to support you. | Our email and our records. |
| Your public website | The text, headings, page titles, product and service names, images' addresses, and the colours and fonts of the pages we can read without logging in. Phone numbers and email addresses are removed before anything is stored. | To learn what you sell, who it is for and how you sound; to run website checks; to propose your goals. | Your business's own database. |
| Public information about your business and the competitors you name (only when public lookups are switched on) | From your public Google Maps listing: address, opening hours, category, rating, number of reviews, and recent reviews of your business with the reviewer's first name at most (no surnames, photos or profile links; phone numbers and email addresses are removed). From public Instagram profiles of your business and the competitors you name: follower and post counts and the public likes, comments and views of recent posts. From the public ad libraries of Meta and Google: the ads a brand runs. Never private accounts or private insights. | To know your business's basic facts from day one, to compare you with competitors you choose, and to show what their public posts and ads look like. | Your business's own database. |
| What you tell your team | Your questions and instructions, your edits to drafts, what you approve or reject, and the rules your team learns from those edits. | To answer you, to remember what you taught it, and to improve the next draft. | Your business's own database. |
| Photos and videos you upload (in the app or the Studio channel on Discord) | The image or video, the note you add, and its size and shape. Location and device details are removed on arrival. See Photos and videos. | To make clean-up versions and post captions for your approval. | A folder of your own on our server, and a record in your business's database. |
| Spreadsheets and numbers you upload (this is being built) | The figures, dates and column names in the file. Please do not upload files with your customers' personal details: we do not need them. | To measure your goals against your own numbers. | Your business's own database. |
| Accounts you connect (being built; see Google and Instagram) | Read-only numbers: for Instagram, your profile details and post and account reach; for Search Console, clicks, impressions, search terms and pages; for Google Analytics, visits, sources and conversions; for your Google Business Profile, calls, direction requests, website clicks and reviews. | To show how you are doing and to explain why a number moved. | Your business's own database. |
| Your owner link | A one-way fingerprint of the private link that opens your business (never the link itself), and when it was made. If you join our Discord, which Discord role your invite gave you. | To check that a request is from your business, and to cancel the link if you ask. | Our registry, apart from every business's own database. |
| Discord | What you write and the files you attach in your business's channels, and your membership of its area. See Discord. | To answer you, to show approval cards, and to give you support. | Discord, and your business's own database. |
| Billing (when payments open) | Your name, billing email, plan and whether payments went through. Card numbers go to the payment provider, never to us. | To charge you, give refunds and meet tax law. | Our payment provider and our records. |
| Visiting this site or the demo | The usual server log: your IP address, the time, the page asked for and your browser's name. No cookies, no analytics. See Cookies and analytics. | To keep the site working and to spot abuse. | Our web server. |
We do not collect passwords to your accounts, card numbers, or anything about your customers that you do not choose to give us. We do not buy information about you from anyone else.
4. What we do with it, and what we do not
We use information to run the service for the business it belongs to: to read your site, answer your questions, draft work for your approval, check facts, write your notes and keep the service secure and working. A person at Allevia may open your workspace to set it up and to help you.
- We do not sell your information, and we do not share it for advertising.
- We do not use one business's information for another business. Each business is its own separate database.
- We do not use your information to train AI models. See Who handles it for us.
- We do not post, reply or change anything in your accounts without your OK on that exact item.
Our reasons under privacy law, where it applies: to perform our contract with you, our legitimate interest in running and securing a business-to-business service, your consent where we ask for it (for example, when you connect an account), and legal duties such as tax records.
5. Google user data and limited use
When you connect a Google service, you choose to let Allevia read data from your own Google account. This is what we ask for, and what we do with it. These connections are being built, and each will be turned on only after Google has approved Allevia and this page is current.
| Google service | Permission we ask for | What we read | What we use it for |
|---|---|---|---|
| Search Console | Read-only: webmasters.readonly, or you add our read-only account as a restricted user in Search Console | Clicks, impressions, average position, search terms and pages for your own site | To show your search numbers, to explain changes, and to find pages that lost visitors |
| Google Analytics (GA4) | Read-only: analytics.readonly, or you add our read-only account as a viewer | Visits, where visitors come from, and the conversions you have set up | To show your visits and sign-ups and to explain why they moved |
| Google Business Profile | business.manage, the only permission Google offers for these APIs. We use it to read, never to change your listing | Calls, direction requests, website clicks and reviews for your own listing | To show how people find and contact you. A reply to a review will only ever go out from a card you approve, and only once we add that feature |
Allevia's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In line with those requirements:
- We use Google user data only to provide and improve the features you see in your own Allevia workspace, for you.
- We do not transfer it to others, except to provide those features (for example, to the AI model that writes your answers, see Who handles it for us), to follow the law, or as part of a sale of the business with the same protections.
- We do not use it to serve advertising, and we do not sell it.
- We do not use it to train generalised AI or machine-learning models.
- People at Allevia do not read your Google data unless you ask us to look into something specific, it is needed to keep the service secure or to find a fault, the law requires it, or it is combined and anonymous.
You can stop this at any time at myaccount.google.com/permissions. We then stop reading immediately, and you can ask us to delete what we already hold (see Delete your data).
6. Instagram and Meta data
When you connect your business's Instagram account, you let Allevia read information about that account. This is being built, and it will be turned on only after Meta has approved Allevia and this page is current.
- What we ask for: read-only access to your account's profile details and posts (
instagram_business_basic) and to its insights, such as reach and follower numbers (instagram_business_manage_insights). We do not ask to read your messages or comments, and we do not ask to publish. - What we use it for: to show how your posts and account are doing, to learn which of your posts worked, and to write better drafts for you. We use it only for your own account, only to provide the service to you.
- What we do not do: we do not sell Instagram data, share it with data brokers, use it for advertising or to profile people, or use it for any other business. We do not use it to train AI models.
- Publishing: Allevia does not post to Instagram today. If we add posting, we will update this page first, and a post will go out only when you approve that exact post.
- Who else sees it: the AI model that writes your answers receives the numbers it needs for a question, see Who handles it for us.
You can remove Allevia at any time in Instagram, under Settings, Apps and websites. We then stop reading, and you can ask us to delete what we already hold. The steps are on Delete your data, which is the address to give Meta as our data deletion instructions.
7. Photos and videos
Studio turns a phone photo into post options for your approval. This is how a photo is handled:
- On arrival, the photo is re-saved without its hidden details, so the location and device information inside it are removed. Videos you send to the Studio channel are kept as they are, and where our server can, their location and device details are removed too.
- It is kept in a folder that belongs to your business alone, and a photo is only shown to the business that uploaded it. It stays until you ask us to delete it or your workspace is deleted. We do not delete photos automatically today.
- It is looked at by an AI model, Claude, which is how the Studio decides what to straighten, what must not change and what to write. The photo is sent to Anthropic for that, see Who handles it for us.
- People in photos. We keep people in your photos as you uploaded them. Each business can switch on a "blur faces" setting in the Studio, and faces are then blurred in the copies we make. We do not use photos of people to identify anyone, and we do not train any model on them.
- Children. We do not apply AI edits to photos that appear to include children. Those get a simple clean-up only: straightening, brightening and cropping.
- Number plates and house numbers that we can see are blurred in the copies we make.
- AI edits are labelled as AI-edited in the app, and a check compares each edit against your original and holds back an edit that added or removed something. Live AI picture edits for customers are not switched on yet. When they are, the photo will also go to our image-generation provider, listed below, and we will tell you first.
You are responsible for having the right to upload every photo and the permission of anyone shown in it. See our Terms of Service.
8. Discord
You can talk to your team in Discord. Each business gets its own private area on our Discord server, and only people with that business's role, our staff and our bot can see it. The bot reads what you write in your business's channels, so it can answer, and it posts waiting approval cards and Today's note there. We store the questions and answers in your business's database. We do not write Discord names or ids into that database.
What you write in #support is read by a person, and a copy goes to a channel only our staff can see, so someone can answer it. Messages and files are also kept by Discord under Discord's privacy policy. The bot does not answer direct messages.
9. Who handles it for us
We use these companies to run the service. Each handles information only to do that job.
| Company | What it does for us | What it receives |
|---|---|---|
| Anthropic (Claude) | The AI model that reads your website, writes answers and drafts, and looks at your photos. | The text, numbers and photos your team needs for a question, after sensitive details are filtered out of text. |
| Higgsfield | Image generation for AI picture edits. Not used for customer photos today. | A photo and an instruction, only once live edits are switched on and you have been told. |
| Discord | The chat where you can talk to your team. | Whatever you and the bot write in your business's channels. |
| Apify | Reads public pages for us when public lookups are switched on: Google Maps listings, public Instagram profiles of businesses, the public ad libraries, and your website if it turns our own reader away. | What to look up: a business name and town, an Instagram handle, a brand name or a website address. Nothing from your private records. |
| Amazon Web Services | Hosting for the site, the app and the databases, in Mumbai, India. | Everything the service stores. |
| Payments | Takes payment when billing opens. | Your name, billing email, plan and card details (which we never see). |
Word embeddings, which let the team search your pages by meaning, run on our own servers. Google and Meta are not our processors: they are the platforms whose data you ask us to read, and their APIs are described above. We do not use advertising networks, analytics services or data brokers. We may disclose information if the law requires it, and as part of a sale of the business with the same protections for you.
10. Where it is stored, and transfers abroad
Your business's information is stored on servers hosted by Amazon Web Services in Mumbai, India. Allevia is run from India, our team can open your workspace from there, and some of the companies in the table above are in the United States. If you are in the UK, the European Economic Area or another place with rules on sending data abroad, we rely on the standard contract terms our providers offer for those transfers. Ask us if you would like a copy.
11. How long we keep it
| What | How long |
|---|---|
| Your business's database, photos and uploads | While you use Allevia. If you stop and do not ask us to delete, we keep your workspace for up to 90 days so you can come back, then delete it. If you ask us to delete sooner, we do (see Delete your data). |
| After you ask us to delete | Gone from our live systems within 30 days, and from our backups within 35 days after that. |
| Billing records | For as long as tax and accounting law require. |
| Support and contact messages | For as long as we need them to help you and to keep a record of what we agreed. |
| Web server logs | 30 days. |
| Discord messages | Kept by Discord until they are deleted. We remove your business's area when you leave and ask us to. |
12. Your rights and choices
Wherever you live, you can ask us to:
- give you a copy of the information we hold about your business (we send your business's memory and your photos as files),
- correct anything that is wrong,
- delete everything we hold about your business,
- stop using or restrict some of it, or object to how we use it,
- move it to another provider, and
- withdraw a connection or a permission you gave us.
Email ankit@allevia-ai.in. We will confirm we received your request within 7 days and complete it within 30 days. It is free. We may ask you to confirm you are the business's owner first, so we do not hand your data to someone else. Today these requests are handled by a person, not by a button in the app.
Depending on where you live, the law may give you more: for example the UK and EU GDPR, the California Consumer Privacy Act, Australia's Privacy Act, the UAE's data protection law and India's Digital Personal Data Protection Act. We honour these requests whichever of those places you are in. You can also complain to your local data protection authority, and we would like the chance to put it right first.
If you are one of our customer's own customers, and your details are in something your business gave us, please ask that business first: it decides what it shares with us, and we act on its instructions. You can also email us and we will pass your request on.
13. Children
Allevia is for business owners and their staff, who are 18 or older. We do not knowingly collect information from children. Photos that appear to include children are handled as described under Photos and videos.
14. Security
Each business is its own separate database, sensitive details are filtered from text before it is stored or sent to the AI model, photos lose their location, and nothing is posted without your OK. No system is perfectly secure, and we are not SOC 2 audited. What we do, and what we do not claim.
15. Changes to this policy
We will update this page when what we do changes, and change the date at the top. If a change matters, we will tell you by email, or in the app or Discord, at least 14 days before it takes effect.
16. Contact us
ankit@allevia-ai.in. Post: Allevia AI, Raipur, Chhattisgarh, India. For help with the service, ankit@allevia-ai.in.