Privacy Policy

Last Updated: February 2, 2026

Arvori ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered email management platform.

1. Information We Collect

Account Information

  • Email address
  • Name
  • Password (stored as a bcrypt hash, never in plain text)

Email Data

  • Email messages from connected Gmail accounts
  • Email metadata (sender, recipient, subject, timestamps)
  • Email attachments

AI-Generated Data

  • Email triage and classification results
  • AI-generated response drafts
  • Tax research citations and references

Integration Data

  • Zoom meeting transcripts (when Zoom integration is enabled)
  • OAuth tokens for connected services

2. Google OAuth Scopes

When you connect your Gmail account, we request the following permissions:

  • gmail.readonly - To read your email messages for triage and analysis
  • gmail.send - To send emails on your behalf when you approve AI-drafted responses
  • userinfo.email - To identify your Google account

3. How We Use Your Information

  • Email triage and urgency classification
  • AI-powered response draft generation
  • Tax research and citation lookup
  • Meeting transcript analysis and summarization
  • Service improvement and debugging

4. Third-Party Services

We integrate with the following third-party services:

  • Google - OAuth authentication, Gmail API for email access, and Gemini AI for intelligent processing
  • Zoom - Meeting integration and transcript capture
  • Zoho - SMTP email delivery for system notifications

5. Data Storage and Security

Storage Location

Your data is stored in PostgreSQL databases hosted on Supabase infrastructure in AWS us-east-2 (Ohio, USA).

Security Measures

  • Encryption at Rest: All data is encrypted at rest using AES-256 encryption via Supabase
  • Encryption in Transit: All data transmission uses TLS encryption
  • OAuth Token Protection: OAuth tokens are additionally encrypted at the application layer using AES-256-GCM
  • Password Security: Passwords are hashed using bcrypt with appropriate work factors
  • Access Controls: Strict access controls limit data access to authorized personnel

6. Data Retention

We retain your data for as long as your account is active. Email data and AI analysis results are retained to provide continuity of service. You may request deletion of your data at any time.

7. Your Rights

You have the following rights regarding your data:

  • Access: Request a copy of your personal data
  • Deletion: Request deletion of your account and associated data
  • Disconnection: Disconnect your Gmail or Zoom accounts at any time
  • Export: Request an export of your data

8. Children's Privacy

Arvori is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

[email protected]