Privacy Policy

• Account details: your name, email address and a securely hashed password, or your Google account identity (name, email and profile picture) if you sign in with Google.
• Workspace and plan: your workspace name, members and the plan you choose.
• Content you create: websites and landing pages, text, images and videos you upload, business details (such as address, phone and opening hours), designs and settings.
• Google Analytics connection: if you connect Google Analytics, the access tokens Google gives us (stored encrypted) and the IDs of the accounts, properties and data streams we use.
• Usage and technical data: sign-in events, the IP address and browser of requests (used for security and rate limiting), and records of AI features you use (feature, model and cost) so we can run and limit them.
• Messages: emails you send us and the one-time codes we email you.

• To create and run your account, sign you in and keep it secure.
• To store, edit, publish and host the websites and landing pages you build.
• To provide the features you choose, such as importing a site from a web address, AI writing and design, and analytics.
• To send service emails: sign-in and verification codes, password resets, new-lead notifications and important changes.
• To prevent abuse, enforce our Terms and meet legal obligations.
• To understand which features are used so we can improve Arovance (using aggregated, non-identifying information).

We do not sell your personal data, and we do not use it for advertising.

If you sign in with Google, we receive your name, email address and profile picture to create your account. If you connect Google Analytics in Arovance Tracker, you grant access to read your Analytics reports (analytics.readonly) and to create and set up Analytics properties and data streams for your websites (analytics.edit).

We use this access only to show you your own reports and to set up tracking for websites you choose. We store the tokens encrypted. We do not use Google user data for advertising, we do not sell it or transfer it to others except as needed to provide these features or as required by law, we do not use it to develop, improve or train AI or machine-learning models, and our staff do not read it unless you ask us to for support, it is needed for security, or the law requires it.

Arovance's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Analytics in Arovance at any time, which revokes our access at Google; you can also remove Arovance from your Google account's third-party access settings.

When you use AI features (for example importing a site, writing a page or generating a design), the relevant content, such as your site's text, business details and your instructions, is sent to an AI model provider to produce the result, under that provider's data terms. AI output can be wrong, so review it before you publish. Please don't put sensitive personal data into AI instructions. When you import a site from a web address, we fetch that site's public pages and may copy its images and videos into your media library.

For websites and landing pages you publish with Arovance, or outside sites you add to Tracker, you decide what data is collected about visitors, and we process it on your behalf:

• Leads: when a visitor sends a form, we store what they entered (for example name, phone, email and message), the page they used and how they arrived (such as an ad or search engine), show it to you in Tracker and email you a notification.
• Conversion counts:we count actions such as calls, emails, button clicks and add-to-cart as daily totals per site and source. These totals contain no personal data. To credit the right source, a published site keeps how the visitor arrived in the browser's session storage for that visit only (not a cookie).
• Google Analytics and other tags: if you turn on Google Analytics or a Meta pixel, those services collect visitor data into your own accounts under their own terms. Arovance does not store that data.

You are responsible for telling your visitors how their data is used (for example in your own privacy notice), for getting consent where the law requires it, and for handling their requests. We will help you with requests that concern data we hold for you.

Arovance uses essential cookies to keep you signed in across arovance.com and its products and to protect sign-in. We don't use advertising cookies. Websites you publish set cookies only for services you turn on, such as Google Analytics.

We use service providers that process data for us only to provide their service:

• Railway (application hosting and database, servers in Singapore)
• Cloudflare (DNS, file storage and serving published websites, global network)
• Resend (sending email)
• Google (Google sign-in and the Google Analytics APIs, when you use them)
• OpenRouter and the AI model providers it routes to (AI features, when you use them)
• Pexels (stock photos for AI designs, when used; only search terms are sent)

We may also disclose data if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business, in which case this policy continues to apply.

Our database is hosted in Singapore, and files and published websites are served from Cloudflare's global network. Some providers process data in other countries, including the United States. Where data moves between countries, we rely on our providers' contractual and security commitments to protect it.

We keep your account data and content while your account is open. Leads stay until you or the site owner deletes them or the account is closed. When you delete your account, we delete its data within 30 days, except where we must keep some of it longer to meet legal obligations, resolve disputes or prevent abuse. Security logs are kept for a limited period.

We use HTTPS everywhere, hash passwords, encrypt Google tokens, limit sign-in attempts and restrict who can access production systems. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Depending on where you live (for example under India's Digital Personal Data Protection Act or the EU/UK GDPR), you can ask to access, correct, export or delete your personal data, object to or restrict some uses, and withdraw consent. You can update your details and disconnect Google in your account, and export leads in Tracker.

To make a request, or to delete your account, email us from your account's address. We answer within 30 days. You can also complain to your local data protection authority.

Arovance is a business service for people aged 18 or older. We don't knowingly collect data from children; if you believe a child has given us data, contact us and we will delete it.

We may update this policy as Arovance changes. We will post the new version here with its date, and tell you by email or in the product before important changes take effect.