Legal

Privacy Notice

Last updated: June 18, 2026

Note for businesses: This page is a draft template provided for informational purposes. Before relying on any privacy notice for legal compliance, organizations should consult qualified legal counsel familiar with their jurisdiction and applicable regulations.

Idrava ("we," "our," or "us") provides AI-assisted business analytics and advisory services. This Privacy Notice explains how we collect, use, and handle information when you visit our website, request a demo, or use Idrava's service. We are committed to privacy-conscious workflows and being transparent about our data practices.

1.Information We Collect

Contact Form Information

When you submit a contact or demo request form, we collect the information you provide — such as your name, business email address, company name, industry, and any message or questions you include. This information is used to respond to your inquiry and, where appropriate, to follow up about Idrava's services.

Business Information

In the course of onboarding and service delivery, we may collect information about your organization, such as your industry, company size, types of data you work with, and business goals. This helps us tailor our analysis and recommendations to your needs.

Uploaded Reports, Spreadsheets, PDFs, and Documents

To provide AI-assisted analysis, customers upload business documents — including reports, spreadsheets, PDFs, internal data exports, and similar files. These documents are processed in order to generate summaries, insights, trends, cost-saving opportunities, risk flags, and action plans.

Customers are responsible for ensuring that any documents uploaded to Idrava do not contain unnecessary sensitive personal information unless a written data processing agreement or similar arrangement is in place. We recommend redacting personal data from documents before upload where it is not relevant to the analysis.

Usage and Analytics Data

We may collect standard website usage data — such as pages visited, session duration, referring URLs, browser type, and device type — through analytics tools. This data is used in aggregate to understand how the website is used and to improve our service. We do not use this data to build individual behavioral profiles for advertising purposes.

2.How We Use Information

Providing Demos and Services

We use contact and business information to respond to demo requests, schedule consultations, and communicate with prospective and active customers about how Idrava can support their organization.

Analyzing Business Documents and Reports

Uploaded documents are processed by Idrava's platform — which may use AI APIs or cloud services — to generate business analysis outputs. These outputs are returned to the customer and used to deliver the contracted service.

Improving the Website and Service

Aggregate usage data and customer feedback help us identify areas for improvement, prioritize product development, and refine the quality of AI-generated analysis.

Communicating with Leads and Customers

We may send informational emails related to your inquiry, the status of your account, service updates, or new features. We do not send unsolicited commercial email to people who have not expressed interest in Idrava's services.

3.AI Providers and Cloud Services

Idrava's platform may use third-party AI API providers and cloud infrastructure services to process documents and generate analysis outputs. When documents are processed through cloud AI APIs, the content of those documents may be transmitted to those providers in accordance with their terms of service and data handling agreements.

We work with providers that offer reasonable data protection commitments, and we do not authorize those providers to use customer data to train their general models unless that is explicitly agreed to in writing.

For organizations with stricter data control requirements, Idrava offers discussions around private or more controlled deployment options — where AI processing can occur in environments with greater separation from shared cloud infrastructure. Contact us to discuss deployment options suited to your organization's needs.

4.No Selling of Personal Information

Idrava does not sell personal information to third parties. We do not provide personal information to data brokers, advertising networks, or any party for commercial purposes unrelated to delivering Idrava's services.

5.Data Sharing with Service Providers

We may share information with trusted service providers who assist us in operating our website and delivering our service. These may include cloud hosting providers, email communication platforms, customer relationship tools, analytics services, and AI API providers. Service providers are engaged to support our operations and are not authorized to use the data we share for their own unrelated purposes.

We do not share customer business data with other customers or with third parties for commercial purposes beyond what is necessary to deliver the service.

6.Data Retention

We retain contact and inquiry information for as long as is reasonably necessary to respond to your request and, if applicable, to manage an ongoing business relationship. Uploaded documents and analysis outputs are retained for the duration of the service engagement, or as otherwise agreed in a customer agreement.

Customers may request deletion of their data by contacting us at the email address below. We will respond to reasonable deletion requests in a timely manner, subject to any legal or contractual obligations to retain certain records.

7.Security Practices

General Practices

We apply industry-standard security measures to protect information handled through Idrava's platform, including encryption of data in transit and at rest, access controls, and secure infrastructure practices. No system is completely immune to security risks, and we encourage customers to use strong credentials and report any suspected security concerns promptly.

Sensitive Business Data

Idrava's service is designed to handle business documents, financial data, operational reports, and similar business-sensitive information. Customers should be thoughtful about what personal data appears in uploaded documents. We recommend removing or redacting personal information — such as employee personal details or customer personal data — from documents before upload, unless such information is directly relevant to the analysis and a data processing arrangement is in place.

Cloud and Private Deployment Options

Most customers use Idrava's cloud and API-based deployment, which provides a good balance of speed, cost, and security for the majority of business use cases. Organizations with heightened data sensitivity — such as those in heavily regulated industries — may benefit from discussing private or local deployment arrangements, where processing can occur in more controlled environments.

Idrava does not claim HIPAA, SOC 2, GDPR, or other specific regulatory compliance unless certifications are formally in place for your specific engagement. Our platform is designed with privacy-conscious workflows and deployment flexibility to support your organization's own compliance program.

8.International Users

Idrava is based in the United States. If you access our website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. Data protection laws in those countries may differ from those in your jurisdiction.

By using our website or submitting information to us, you acknowledge this transfer. Organizations subject to cross-border data transfer restrictions should contact us to discuss appropriate arrangements.

9.User Rights and Requests

Depending on your location, you may have rights with respect to your personal information — including the right to access, correct, or request deletion of data we hold about you. To exercise any of these rights, please contact us at the address below with sufficient information to identify your request. We will respond in a reasonable timeframe and in accordance with applicable law.

We do not make automated decisions that have legal or similarly significant effects on individuals based solely on personal data without human review.

10.Contact Information

If you have questions about this Privacy Notice, how we handle your information, or to submit a data request, please contact us:

Idrava
hello@idrava.com

We may update this Privacy Notice from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.