Privacy Policy

Privacy Policy

Effective Date: 02/14/2026
Last Updated: 02/14/2026

Welcome to Allyvia (“Company,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use:

  • The Allyvia web application (app.allyvia.co)

  • The Allyvia API (api.allyvia.co)

  • Any related services, features, dashboards, integrations, or AI-powered analytics tools (collectively, the “Services”)

By using our Services, you agree to this Privacy Policy.

1. Information We Collect

Allyvia is an AI-powered ERP platform designed for small businesses. In order to provide these services, we collect the following categories of data:

A. Business Account Information

When a business registers:

  • Business name

  • Owner name

  • Email address

  • Phone number

  • Business address

  • Industry classification

  • Subscription plan details

  • Billing contact information

B. Financial & Transaction Data

Depending on enabled modules, we may process:

  • Revenue data

  • Sales transactions

  • Inventory purchases

  • Payroll data

  • Expense records

  • Profit & loss data

  • Vendor details

  • Tax-relevant summaries

Payment processing is handled by third-party payment processors such as Stripe. Allyvia does not store full credit card numbers.

C. Employee Data (If Payroll/HR Module Enabled)

Businesses may upload or input:

  • Employee names

  • Contact details

  • Work schedules

  • Clock-in/clock-out records

  • Hourly rates

  • Payroll calculations

Businesses are responsible for ensuring they have appropriate legal authority to provide employee data to Allyvia.

D. Usage & Technical Data

We automatically collect certain information:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Login timestamps

  • API usage logs

  • Error logs

  • Session activity

This data helps us maintain platform security and improve performance.

E. Integration Data

If you connect third-party tools (e.g., accounting software, POS systems, calendar tools), we may access:

  • Transaction history

  • Inventory data

  • Calendar data

  • Financial summaries

Only data explicitly authorized via integration is accessed.

2. How We Use Information

We use collected information to:

  1. Provide and maintain the Allyvia platform

  2. Generate dashboards, reports, and AI-powered forecasts

  3. Improve machine learning models

  4. Process subscriptions and billing

  5. Authenticate users and secure accounts

  6. Provide customer support

  7. Comply with legal obligations

  8. Prevent fraud and abuse

We do not sell personal data to third parties.

3. AI & Machine Learning Processing

Allyvia uses machine learning and AI models to:

  • Forecast revenue trends

  • Analyze inventory efficiency

  • Provide staffing recommendations

  • Detect financial anomalies

  • Generate operational insights

AI outputs are predictive and informational only. Business owners remain solely responsible for operational decisions.

Where applicable:

  • Data may be processed through secure AI infrastructure

  • Models are trained on aggregated and anonymized data

  • We do not use individual business data to train public AI models

4. Data Storage & Security

Allyvia uses industry-standard cloud infrastructure, including:

  • Secure AWS-hosted servers

  • Encrypted databases (RDS)

  • Secure secrets management systems

  • HTTPS encryption in transit

  • Role-based access controls

  • Audit logging

Security measures include:

  • Encryption in transit (TLS/HTTPS)

  • Encryption at rest

  • Firewall protections

  • Least-privilege IAM policies

  • Regular monitoring

However, no system can be guaranteed 100% secure.

5. Data Sharing & Disclosure

We may share data with:

A. Service Providers

  • Cloud hosting providers

  • Payment processors

  • Analytics providers

  • Email providers

These providers are contractually obligated to safeguard data.

B. Legal Compliance

We may disclose data if required by:

  • Law enforcement

  • Court order

  • Legal obligation

C. Business Transfers

In the event of:

  • Acquisition

  • Merger

  • Asset sale

User data may transfer as part of the business.

6. Data Retention

We retain information:

  • As long as your account is active

  • As necessary to provide services

  • To comply with legal obligations

  • For legitimate business analytics

After account deletion:

  • Data may remain in backups for a limited time

  • Financial records may be retained for tax compliance

7. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Export your data

  • Withdraw consent

To exercise rights, contact:
sarthakpatel@allyvia.co

8. California Privacy Rights (CCPA)

If you are a California resident:

  • We do not sell personal information

  • You may request disclosure of collected categories

  • You may request deletion of personal information

Submit requests to: sarthakpatel@allyvia.co

9. International Users

If you access Allyvia outside the United States:

  • Your data may be transferred to and processed in the U.S.

  • You consent to such transfers by using our Services

10. Children’s Privacy

Allyvia is not intended for individuals under 18 years of age.
We do not knowingly collect data from minors.

11. Cookies & Tracking

We may use:

  • Session cookies

  • Authentication cookies

  • Analytics cookies

Users may disable cookies via browser settings, though this may affect functionality.

12. Account Security Responsibilities

Users are responsible for:

  • Keeping login credentials confidential

  • Using strong passwords

  • Not sharing administrative access

We are not responsible for unauthorized access due to compromised credentials.

13. Third-Party Links

Our platform may contain links to external websites.
We are not responsible for third-party privacy practices.

14. Changes to This Policy

We may update this Privacy Policy periodically.

When updated:

  • The “Last Updated” date will change

  • Material changes may be communicated via email

Continued use of the Services constitutes acceptance of changes.

15. Contact Information

If you have questions regarding this Privacy Policy:

Allyvia
Email: sarthakpatel@allyvia.co
Website: https://allyvia.co