LegalLast updated 11 September 2026
Your privacy, explained clearly.
This policy explains how we handle personal information when you visit aivoralabs.agency, contact us, book a call or use the Aivora Assistant.
Applies to this website only
Who we are
AivoraLabs is a software engineering studio operating from Islamabad, Pakistan. “We”, “us” and “our” mean the AivoraLabs team responsible for this website and its enquiry services.
For privacy questions or requests, email info@aivoralabs.agency with “Privacy request” in the subject, or use our contact page.
This policy covers our company website and supporting enquiry systems. Client-operated products have their own policies; data handled for a client engagement is also subject to the relevant service agreement.
Information we collect
- Enquiries
- Your name, email, company, topic, message and other information you provide. The contact form currently records the name of a selected file; send the file itself by email if needed.
- Bookings
- Contact details, meeting type, date, time, timezone, optional notes and confirmation, update or cancellation records.
- Conversations
- Your messages, generated replies, conversation identifiers and details supplied in chat. The assistant may extract names, email addresses, company names and service interests from your messages.
- Technical information
- Page and referral information, timestamps, browser details, timezone and anti-spam signals. Application records use a hashed network address; infrastructure access and security logs may also contain IP addresses and request details.
- Website usage
- Pages visited, clicks, scroll depth, section viewing time, referrals, campaign information, country and broad device, browser and language categories.
We receive information from you, your interactions and your browser’s requests. Contact details are optional, but a valid email address is needed to reply or confirm a booking.
How we use information
- Respond to enquiries, discuss requirements and prepare proposals.
- Arrange meetings and send confirmations, updates and cancellations.
- Provide chat, preserve context and arrange human follow-up.
- Maintain internal prospect records connecting messages, bookings, service interests and staff notes. Simple interest scores help staff prioritise follow-up; they do not make legally significant decisions about you.
- Understand website performance, prevent abuse, troubleshoot problems and meet legal obligations.
- Send marketing messages where you opt in or where otherwise permitted by applicable law. You may unsubscribe or ask us to stop at any time.
Where a lawful basis is required, we rely on steps you request before an agreement or performance of that agreement; legitimate interests in responding to business enquiries and operating a secure, useful website; consent where required; and applicable legal obligations. We consider your rights when relying on legitimate interests. This policy is a notice, not a request for blanket consent.
AI conversations
The assistant is automated software. Conversations are stored in our systems and can be reviewed by authorised staff. Messages, recent conversation context and relevant public website information are sent through OpenRouter to the model provider generating the reply.
Personal details typed into a message travel with it. Do not submit passwords, payment details, sensitive personal information or confidential client material. Contact our team to agree a suitable channel for confidential discussions.
Provider processing, retention and training terms vary by provider and configuration. We do not promise zero retention or exclusion from training for every request. Read OpenRouter’s Privacy Policy and its provider data-handling information.
You can ask a person to clarify an answer or correct details inferred from chat. Using the assistant is optional; email is available instead.
Website measurement and storage
Our first-party measurement does not use advertising pixels, third-party analytics tags or persistent browser tracking identifiers. A random visit identifier stays in page memory, and the server derives a daily-changing identifier from network and browser information.
These records are pseudonymous, not a guarantee of anonymity. An enquiry, booking or identified chat may be linked to the visit that produced it. We do not use this measurement to follow you across unrelated websites.
Our tracker respects browser Global Privacy Control and Do Not Track signals. Chat uses local storage for conversation continuity and a suggestion-dismissal preference. See Cookies and local storage for details and controls.
Who receives information
Authorised studio staff and the providers needed for the relevant service can process information:
- Hostinger
- Website, application, database infrastructure, backups and our business mailbox. Our current application server is in Malaysia. Hostinger Privacy Policy.
- Resend
- Email delivery, including recipient details, enquiry or booking content and delivery records. Resend Privacy Policy.
- OpenRouter and AI providers
- Assistant requests and generated replies as described above. OpenRouter Privacy Policy.
Our team works in Pakistan. Providers may process information elsewhere, including Malaysia and the United States, where data protections can differ. Contact us for details of the arrangements relevant to your enquiry before sending sensitive information.
We do not sell or rent personal information or share it for other organisations’ advertising. We may disclose relevant information when required by law, to protect legal rights or on your instructions. External services such as WhatsApp and LinkedIn apply their own policies when you use their links.
How long we keep information
Enquiry, booking, conversation and business records are retained according to their continuing purpose: handling requests, maintaining business relationships, resolving disputes and meeting applicable record-keeping obligations. They do not currently have a fixed automatic expiry; the studio handles removal. You can request deletion using the contact details above.
Website measurement has a retention window of up to 180 days, which can be shortened. Older records are removed when retention maintenance runs, including during dashboard maintenance, rather than precisely at the 180-day mark.
The browser’s saved transcript is reused for up to 12 hours. Clearing it does not delete server records. Backups, email copies, security records and provider-held data can remain for their separate operational or legal retention periods after removal from active application records.
Your choices and rights
You may ask to access, correct or delete personal information we hold, stop marketing contact or clarify our processing. Depending on applicable law, you may also have rights to restrict or object to processing, receive a portable copy and withdraw consent without affecting earlier lawful processing.
Email info@aivoralabs.agency, preferably from the address used for your enquiry, with any relevant reference. We may need reasonable identity verification. We respond within the timeframe required by applicable law and explain any lawful reason a request cannot be fulfilled.
We may be unable to identify an unlinked pseudonymous visit from your name or email alone. Identifiable enquiry and conversation records remain subject to your applicable rights. You may complain to the data protection authority competent for your location where that right applies.
Marketing withdrawal does not stop essential replies concerning a service or booking you requested. You can avoid chat and clear or block browser storage while continuing to read public pages.
Security and children
HTTPS, restricted staff access, authentication and operational backups help protect information. No internet or storage system is completely secure. Keep booking cancellation links private: someone holding the link may be able to cancel the appointment.
This business-services website is not directed at children. Contact us if you believe a child has supplied personal information without appropriate permission so we can review and remove it where appropriate.
Policy updates
We update this page when our practices change. The date above identifies the current version. We provide additional notice or seek consent for material changes where applicable law requires it.