Privacy Policy

Last updated: January 2025

Alvris ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use alvris.com and our services. By using Alvris, you agree to this policy.

This policy complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

We comply with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023.

1. Information We Collect

1.1 Information you provide directly

Email address — when you join our waitlist or create an account
Portfolio data — asset names, types, values, and sectors you enter into the stress test tool
Company name — if provided when signing up for enterprise access

1.2 Information collected automatically

Browser type and version
Device type (desktop/mobile)
Pages visited and time spent
Approximate location (country/city level only, via IP address)
Referral source (how you found us)

1.3 Information we do NOT collect

We do not collect your actual bank account numbers, PAN, Aadhaar, or government IDs
We do not collect payment card information (handled by Razorpay if applicable)
We do not collect passwords in plaintext

2. How We Use Your Information

To run portfolio stress test simulations (portfolio data is processed locally in your browser — it is not sent to our servers in Phase 1)
To send you updates about Alvris when you join our waitlist (with your consent)
To improve our platform and fix bugs
To respond to your enquiries or support requests
To comply with legal obligations

3. Portfolio Data — Important

In the current version (Phase 1), your portfolio data is processed entirely within your browser. It is not transmitted to or stored on Alvris servers. When you close or refresh the page, your portfolio data is gone. We cannot see it.

When we launch the full platform (Phase 2) with account creation and saved portfolios, portfolio data will be stored securely on our servers (Firebase/Google Cloud infrastructure). We will update this policy before that happens.

4. Data Storage and Security

Email addresses collected via our waitlist form are stored securely. We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse, in accordance with the SPDI Rules 2011.

Our infrastructure is hosted on Google Cloud (Firebase), which maintains ISO 27001, SOC 2 Type II, and other relevant certifications.

5. Sensitive Personal Data

Portfolio data (financial asset information) is classified as Sensitive Personal Data or Information under Indian law. We treat it with the highest level of care. As noted above, in Phase 1, this data never leaves your browser.

6. Third-Party Services

We may use the following third-party services:

Google Analytics / Mixpanel — for understanding how users use our platform (anonymised)
Firebase (Google) — for authentication and data storage (when applicable)
Razorpay — for payment processing (when applicable)
Anthropic Claude API — for AI narrative generation (portfolio data shared only for this purpose, not stored by Anthropic for training)

7. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Withdraw consent for marketing communications at any time
Lodge a complaint with the relevant authority

To exercise any of these rights, email us at privacy@alvris.com.

8. Cookies

Alvris uses minimal cookies — primarily for analytics (understanding how users navigate the site) and for keeping you logged in (when account features are available). You can disable cookies in your browser settings, though some features may not work correctly.

9. Data Retention

Waitlist email addresses are retained until you unsubscribe or request deletion. Account data (when applicable) is retained for the duration of your account plus 90 days after deletion, unless required longer by law.

10. Children

Alvris is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of Alvris after changes constitutes acceptance.

12. Contact

For privacy-related queries: privacy@alvris.com
For general queries: hello@alvris.com