Privacy Policy

Effective Date: January 1, 2026

At Tavra, we believe privacy is a fundamental right. This Privacy Policy explains how we collect, use, and protect your information when you use our AI assistant services.

Our Privacy Commitment We collect only what we need to provide our services. We never sell your personal data. We give you control over your information.

1. Information We Collect

Information you provide:

  • Phone number: Your primary identifier for our services
  • Messages: Text and voice messages you send to our service
  • Notes and reminders: Content you ask us to save
  • Calendar data: If you connect your calendar (Google Calendar, etc.)
  • Payment information: Processed securely by Stripe; we don't store card numbers

Information collected automatically:

  • Usage data: Interaction counts, feature usage, timestamps
  • Device information: Phone type, carrier (from SMS metadata)
  • Performance data: Error logs, response times

2. How We Use Your Information

We use your information to:

  • Provide and improve our AI assistant services
  • Send you reminders, notifications, and responses
  • Process payments and manage your subscription
  • Calculate and purchase carbon offsets for your usage
  • Analyze usage patterns to improve our services (in aggregate)
  • Communicate service updates and support information
  • Comply with legal obligations

3. AI Processing

Your messages are processed by AI systems to generate helpful responses. Important points:

  • We use third-party AI providers (such as OpenAI) to process messages
  • Messages are sent securely and not used to train AI models
  • We maintain conversation history to provide contextual assistance
  • You can request deletion of your conversation history at any time

4. Information Sharing

We share your information only in these limited circumstances:

  • Service providers: Companies that help us deliver services (Twilio for SMS, OpenAI for AI, Stripe for payments, CNaught for carbon offsets)
  • Calendar integration: If you connect Google Calendar, we access only necessary calendar data
  • Legal requirements: When required by law, court order, or to protect safety
  • Business transfers: In connection with a merger or acquisition (with notice)

We never:

  • Sell your personal information
  • Share data for advertising purposes
  • Allow third parties to use your data for their own marketing

5. Data Security

We protect your information using:

  • Encryption in transit (TLS) and at rest
  • Secure cloud infrastructure (Supabase)
  • Access controls and authentication
  • Regular security reviews
  • Rate limiting and abuse prevention

6. Data Retention

We retain your data as follows:

  • Account data: Until you delete your account
  • Messages and notes: Until you delete them or your account
  • Usage logs: 90 days for operational purposes
  • Payment records: As required by law (typically 7 years)

7. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your data
  • Portability: Receive your data in a portable format
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, text "PRIVACY" to our service number or email privacy@tavra.ai.

8. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us information, please contact us immediately.

9. California Privacy Rights

California residents have additional rights under the CCPA:

  • Right to know what personal information we collect
  • Right to delete personal information
  • Right to opt-out of sale (we don't sell data)
  • Right to non-discrimination for exercising privacy rights

10. International Users

Our services are primarily offered in the United States. If you use our services from outside the US, your information will be transferred to and processed in the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via SMS or by posting a notice on our website. Your continued use after changes constitutes acceptance.

12. Contact Us

For privacy questions or to exercise your rights:

Email: privacy@tavra.ai
Text: Send "PRIVACY" to our service number
Mail: Tavra, Inc., [Address]

13. Carbon Offset Data

As part of our Carbon Negative Initiative, we track interaction counts (not content) to calculate and purchase carbon offsets. This data is:

  • Used only for environmental impact calculations
  • Aggregated and anonymized for reporting
  • Verified by third-party carbon offset providers