Privacy Policy

We collect information that you provide directly to us, including:

• Contact information: name, email address, phone number, company name, and job title when you submit a project enquiry or other form.
• Communications: messages, feedback, and other content you send to us through our contact forms or email.
• Usage data: information about how you interact with our website, including pages visited, time spent, referring URLs, and device information. This data is collected through privacy-respecting analytics.
• Technical data: IP address (hashed for abuse prevention and stored with form submissions), browser type, operating system, and device information.

We use the information we collect for the following purposes:

• To respond to your enquiries and form submissions
• To provide, maintain, and improve our services
• To send you relevant information about our services, with your consent
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We process your data based on your consent (for marketing communications), contract performance (for service delivery), and legitimate interests (for security and analytics).

When you choose to connect Aatvi Calendar, we request your Google account identity, the list of calendars available to you, and read-only access to events on calendars you select. If you later choose a write-capable action, we separately request permission to create and manage events only in the secondary Google calendar created by Aatvi.

We use this information only to connect the correct Google account, show selected calendars and events in your Aatvi Personal Workspace, keep those views synchronized, and create or update events that you explicitly send to the Aatvi-managed calendar.

We store the connected account identifier, granted scopes, calendar and event identifiers, synchronization cursors and status, and mirrored event fields such as title, description, location, time, timezone, and recurrence. OAuth tokens and watch-channel secrets are encrypted with resource-bound authenticated encryption. Mirrored event content is stored in the tenant-scoped application database and is not field-level encrypted.

We do not sell Google user data, use it for advertising or credit decisions, or use it to train generalized AI or machine-learning models. Data is processed only by Aatvi and infrastructure providers acting on our behalf to operate and secure the user-facing Calendar feature, or when disclosure is legally required.

Disconnecting immediately disables the connection and cryptographically shreds locally stored OAuth credentials and watch secrets. Provider revocation is attempted on a best-effort basis. Mirrored calendar content is scheduled for deletion after a minimum 24-hour cleanup delay and normally drains within approximately 24–48 hours after disconnect; bounded retries apply if cleanup is interrupted.

You can choose which calendars to use, grant the write permission only when needed, disconnect the Google account from Calendar source settings, remove an Aatvi-managed Google copy without deleting the local event, and revoke Aatvi access at any time from your Google Account permissions.

Aatvi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Aatvi Calendar

We do not sell your personal data. We may share your information only in the following circumstances:

• Service providers: We use trusted third-party services (such as Cloudflare for hosting and email delivery) that process data on our behalf, under strict data processing agreements.
• Legal requirements: We may disclose data if required by law, regulation, or valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We store project enquiries to review and follow up on your request. The website does not currently apply an automatic expiry period to enquiry records. Contact us below to request deletion; any retention requirements need to be considered for that request.

The submission service periodically attempts to delete rate-limit entries older than two hours when processing requests. This housekeeping is separate from enquiry records, which include a hashed address used for abuse prevention.

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at privacy@aatvi.ai. We will respond to your request within 30 days.

If you have questions about this Privacy Policy or our data practices, please contact us: