Privacy Policy

1. Who we are

Tavra (the "Service") is an AI virtual secretary that helps you manage email, messaging, calendar, and commitments. This policy explains what personal data we process, why, and the choices you have. Where this policy uses "we", "us", or "our", it refers to the provider that operates tavra-secretary.site.

2. Data we collect

• Account data: name, email address, and organization information you provide when you sign up.
• Connected account data: when you connect a communication, calendar, or billing provider, we access the information those providers make available (e.g., messages, contacts, calendar events, subscription details) to the extent required to deliver the Service.
• Usage data: technical information such as timestamps, request logging, and error diagnostics needed to operate and secure the Service.
• Payment data: billing providers (Stripe, Paymob) process payments; we store the subscription state, plan, and status they report but not your full payment card details.

3. How we use data

We use your data to provide, maintain, and secure the Service: normalizing and organizing messages, generating AI suggestions and analysis, scheduling meetings, tracking follow-ups, delivering daily briefings and notifications, processing subscriptions, and providing support. We never sell your personal data.

4. AI processing

Tavra uses artificial intelligence to understand and summarize your communication and to suggest responses or actions. AI output is a suggestion: consequential actions are executed only after you approve them or after you explicitly configure an automation rule granting that permission. External message content is treated as data, never as instructions to the system. AI processing may use a third-party model provider; your content is transmitted to that provider solely to produce the suggestion you requested.

5. Cookies and local storage

The Service uses essential cookies and your browser's local storage to keep you signed in (an HttpOnly refresh-token cookie), to remember preferences such as theme, and to record your acceptance of this notice. We do not use advertising or third-party analytics trackers. You can clear cookies and local storage at any time; signing out does not remove data stored on our servers.

6. Service providers and sharing

We share data only with providers needed to run the Service and within our own organization for support and security: communication providers you connect (e.g., Google/Gmail, WhatsApp), AI model providers, payment providers (Stripe, Paymob), email/SMTP providers for transactional messages, and hosting/infrastructure providers. Each is bound to use the data only to serve you. We may disclose data where required by law or to protect the rights and safety of you, us, or others.

7. Data retention

We retain data for as long as your account is active or as needed to provide the Service, meet contractual obligations, comply with legal obligations, resolve disputes, and enforce our agreements. When you request deletion or your account is terminated, we delete or anonymize your data within a reasonable time unless the law requires us to keep it.

8. Security

We apply security measures in line with the sensitivity of the data we hold: encrypted transmission, encryption of stored credentials, tenant-level isolation, and least-privilege access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Provider credentials are encrypted at rest and are never exposed through the product.

9. Your rights

Depending on your location, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to or withdraw consent from processing. You may also request a copy of the data we hold about you. To exercise these rights or delete your account, contact us at the address below. We will respond within the timeframes required by law.

10. International transfers

The Service is operated from servers that may be located outside your country of residence. By using the Service, you agree to the transfer of your data to the countries in which our providers operate, which may not provide the same data protection rules as your jurisdiction. We take steps to ensure transfers are protected with appropriate safeguards.

11. Changes to this policy

We may update this policy as the Service evolves. We will post changes on this page and, where we have a contact address for you and the change is significant, notify you before it takes effect. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

Questions about this policy, your data, or privacy requests: privacy@tavra-secretary.site.