Privacy Policy

Our core promise

What we collect

Laivara is built on a single founding constraint: we never see what you type. Our browser extension and mobile app capture only behavioral metadata — never prompt content, never response content.

The metadata we collect includes:

• Which AI tool was used (e.g., ChatGPT, Claude, Gemini, Perplexity)
• Session duration — how long the tab was in focus
• Session count — how many distinct sessions occurred
• Timestamp of each session (date and hour, not minute-level precision)
• Device type (desktop or mobile) for cross-surface aggregation
• Account identifiers — your email address and a randomly generated user ID

We do not collect: prompt text, AI responses, conversation history, screenshots, keystrokes, clipboard contents, or any data from non-AI websites. The extension is scoped only to known AI tool domains.

How we use it

The metadata we collect is used solely to generate your personal clarity profile — the patterns, weekly insights, and focus scores visible in your Laivara dashboard. We use it to:

• Identify which AI tools you use and how frequently
• Calculate session patterns across days and weeks
• Generate focus scores and trend indicators
• Send you opt-in weekly digest emails with your usage summary
• Improve aggregate, anonymised product analytics (never individual profiling)

We do not sell your data, share it with advertisers, or use it to train AI models. Your metadata is yours.

Data retention

Session metadata is retained for up to 12 months on the Free plan and up to 36 months on Laivara Plus. Team plan data is retained for the duration of the active subscription plus 90 days. When you delete your account, all associated data is permanently erased within 30 days. Backup deletion follows a 90-day cycle from account termination.

Third-party processors

We use a small number of carefully selected sub-processors to operate the service. None of them receive your prompt content, conversation history, or any data from non-AI websites — they handle only the infrastructure needed to run and bill for Laivara.

• Amazon Web Services (AWS)

  Secure cloud hosting for our backend API, database, and desktop installer distribution via S3 and CloudFront. AWS processes data in the EU/US under standard contractual clauses.

• Stripe

  Payment processing for Laivara Plus and Team subscriptions. Laivara never sees or stores full card numbers — Stripe handles all PCI-DSS compliance.

• Transactional email provider (SMTP)

  Delivery of account verification, weekly digest, and security alert emails. Only your email address and the email body are shared — no session metadata.

We do not use advertising networks, analytics resellers, or any processor whose business model involves monetising user data. Data Processing Agreements (DPAs) are in place with all sub-processors.

Your rights

Depending on your jurisdiction, you have some or all of the following rights regarding your personal data:

• Access — request a copy of all data we hold about you
• Correction — update inaccurate or incomplete records
• Deletion — request permanent erasure of your account and all associated data
• Portability — export your session history as JSON or CSV at any time
• Restriction — limit how we process your data while a dispute is resolved
• Objection — opt out of any processing based on legitimate interests

You can exercise these rights directly from your dashboard under Settings → Data Controls, or by contacting us at privacy@laivara.com.

Contact

For privacy questions, data requests, or concerns, contact us at privacy@laivara.com. We aim to respond to all privacy requests within 72 hours and to fulfil them within 30 days.