Privacy Policy

About Avi

Avi is a local-first AI personal assistant platform that runs on your own machine. It uses artificial intelligence models (including those from Anthropic, OpenAI, Google, AWS Bedrock, and local models via Ollama) to process your instructions, generate responses, and take actions. Because Avi runs locally, the vast majority of your data stays on your device. The Service also offers a Remote Mode that allows you to control your local Avi instance from another device.

Applicability

This Privacy Policy explains our practices regarding the collection, use, disclosure, and processing of your information when you:

• Visit our website at avi.run and affiliated sites, blogs, or social media platforms (collectively, our “Sites”);
• Download, install, or use the Avi desktop application or any related software, APIs, or services;
• Interact with us for support, marketing, or other purposes.

This Privacy Policy does not apply to:

• Third-party products, services, or software accessible via the Service or integrating with it. Contact those third parties directly for their privacy practices.
• Data you process locally using Avi on your own machine, which never reaches our servers.

1. Information We Collect

Because Avi is a local-first application, most data remains on your device and is never transmitted to us. The information we do collect is limited to what is necessary to deliver and improve the Service.

Information You Provide Directly

• Account Information. Email address and profile details when you create an account.
• Transactional Information. Payment details (handled by Stripe; we receive only tokenized references, not raw card data), billing address.
• Support Information. Messages, attachments, and preferences you share when contacting support.
• Feedback. Suggestions, bug reports, or other voluntary submissions.

Information We Do Not Collect

• AI Model Inputs and Outputs. We do not collect, store, or log any prompts you send to AI models or any responses those models produce. These pass transiently through the Service and are never persisted on our servers.
• Local Application Data. Tasks, notes, files, contacts, project data, and other content you create within the Avi application are stored locally on your device and are not transmitted to or stored by us.

Information We Collect Automatically

• Usage Information. Interactions with our Sites: pages viewed, browser type, response times, errors, timestamps.
• Device Information. Browser type and settings, OS, language, ISP.
• Location Information. City and country derived from IP address; we do not collect precise location.
• Telemetry. Anonymized, aggregated statistics about software version usage and crash reports to help us improve stability. No personal identifiers are included.
• Cookies. Browser cookies on our Sites for session management and analytics. Manage these via your browser settings.

2. How We Use Information

We use information to:

• Operate and improve the Service. Deliver, maintain, and enhance features and reliability.
• Provide support. Respond to inquiries and resolve issues.
• Communicate. Send transactional notices, invoices, updates, and (with your consent) product announcements.
• Manage accounts and billing. Process payments and maintain account records.
• Security. Detect and prevent fraud, unauthorized access, and abuse.
• Legal and compliance. Comply with applicable laws and enforce our Terms of Service.

3. How We Retain Your Information

We retain information for the minimum period necessary to fulfill the purposes described in this Policy, meet legal and contractual obligations, resolve disputes, and enforce our agreements.

When information is no longer needed, we delete or anonymize it. If deletion is not immediately possible (e.g., data stored in backups), we isolate and protect it until deletion is feasible.

4. How We Share Information

We share information only on a need-to-know basis and with appropriate safeguards:

• Corporate Affiliates. Entities under common control with Serverless Inc., subject to this Policy.
• Corporate Transactions. In connection with a merger, sale, or acquisition, your information may be transferred as a business asset; we will notify you of any such change.
• Third-Party Service Providers. Vendors we use to operate the Service, including cloud infrastructure (AWS), database services (MongoDB), payment processing (Stripe), email delivery (SendGrid, Resend), and hosting (Vercel). These providers are authorized only to use your information as necessary to provide services to us.
• AI Model Providers. When you use AI features, your prompts are transmitted to the model provider you have configured (e.g., Anthropic, OpenAI, Google). These transmissions are governed by the respective provider's terms and privacy policy. We do not store these inputs or outputs.
• Legal or Public Authorities. When required by law, court order, or to protect the security and integrity of the Service or the rights of others.
• With Your Consent. For any other purpose with your explicit consent.

We do not sell your personal information.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, use, modification, or disclosure, including TLS encryption in transit and AES-256 encryption at rest where applicable.

No security measure is absolute. If you have security questions, contact support@avi.run.

6. Third-Party Services

The Service may link to or integrate with third-party sites and applications not controlled by us. We are not responsible for their privacy practices. Review the terms and privacy policies of any third-party services you connect to Avi.

7. Your Rights and Choices

• Opt-Out of Marketing. Use unsubscribe links in emails or contact us. You will still receive transactional communications.
• Account Data. Update or correct account information via your settings or by contacting support. You may delete your account at any time; see Section 3 for retention details.
• Cookies. Manage cookies via your browser settings; doing so may affect certain Site functionality.
• California Residents (CCPA/CPRA). You have the right to know what categories of personal information we collect and how we use and share them; to request access to or deletion of your personal information (subject to exceptions); and to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at support@avi.run with “CCPA Request” in the subject line. We will respond within 45 days.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact support@avi.run and we will delete it promptly.

9. Changes to This Policy

We may update this Policy by posting a revised version on our Site. Changes are effective upon posting. For material changes, we will provide notice via email or in-app notification. Continued use of the Service after changes constitutes acceptance. We encourage you to review this Policy periodically.

10. Contact Us

For privacy questions or to exercise your rights, contact us at support@avi.run.

California residents should include “CCPA Request” in the subject line.