EL
Eriva Labs
Go back Home

Privacy Policy

Last Updated: 7 July 2026

Eriva Labs (registered in India under Udyam MSME) ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our interactive learning platform (collectively, the "Services").

This policy is designed to comply with global privacy standards, including the General Data Protection Regulation (GDPR) in the European Union and the California Consumer Privacy Act (CCPA).

1. Information We Collect

A. Personal Data

Information you voluntarily give to us when you register:

  • Account Information: Email address, display name, and profile picture (typically obtained via OAuth providers like Google).
  • Communications: Information you provide when contacting [email protected].

B. Derivative Data & Analytics (Cookieless)

To protect your privacy, we utilize Umami Analytics, a privacy-first, cookieless analytics solution.

  • We collect anonymized, aggregated data regarding page views and general usage patterns.
  • Our analytics implementation does not collect Personally Identifiable Information (PII) and does not track you across other websites.

C. Financial Data

We do not collect or store credit card numbers. All purchases are processed by our Merchant of Record, Paddle. Paddle collects the necessary financial information to process transactions and comply with tax regulations. Please review Paddle's Privacy Policy for more information.

2. Eriva Lens (AI Research Companion) Data

When you use Eriva Lens, we process additional types of information:

  • Document Uploads: When you upload PDF files or submit arXiv URLs to Eriva Lens, we store the PDF file securely in our cloud storage (e.g., Supabase / AWS) solely to make it accessible to you in your sessions and transmit it to the LLM processor.
  • Chat History: We store the chat conversations and queries you send to the Eriva Lens AI assistant.
  • Local Search Queries: General search queries used to locate research papers within our vector database are processed locally and on-the-fly. We do not store, log, or track your search terms.
  • Third-Party AI Processing: To generate summaries and answer your queries, Eriva Lens securely transmits your uploaded PDF documents, queries, chat history, and relevant context from searched arXiv papers to third-party Large Language Model (LLM) providers (such as OpenAI, Anthropic, or Google Gemini).
  • AI Training & Privacy Tiers:
    • Paid Subscription Tiers: For users on our paid subscription plans, Eriva Labs routes all AI requests through enterprise-grade API connections. We strictly enforce agreements with our providers that prohibit them from using your uploaded documents, queries, or chat histories to train their public or proprietary AI models.
    • Free Tiers: For users on our free tier, we may route queries through developer-tier API connections to keep the service free. Depending on the provider's terms, queries and uploaded PDF documents routed through free APIs may be retained and used by the provider to train their models or be reviewed by human evaluators. If you require absolute data confidentiality with no AI training, you must upgrade to our paid subscription plans.
  • Data Retention & Deletion: Your uploaded documents and chat histories are stored as long as you maintain your session or account. You can permanently delete any session from your dashboard, which immediately removes all corresponding PDF files and chat logs from our storage.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and the UK, we process your personal data under the following lawful bases:

  • Consent: When you create an account via Google Auth or opt-in to newsletters.
  • Contractual Necessity: To provide you access to the courses and services you purchased.
  • Legitimate Interests: To maintain the security of our platform and analyze anonymized usage data to improve our educational content.

4. How We Use Your Information

We use the information collected to:

  • Create, manage, and secure your account.

  • Track and save your progress in courses and simulations.

  • Fulfill purchases and manage transactions (in conjunction with Paddle).

  • Respond to customer service requests.

  • Prevent fraudulent activity and enforce our Acceptable Use Policy.

5. Disclosure of Your Information

We may share your information in the following situations:

  • Merchant of Record: We share necessary transactional data with Paddle to facilitate payments and tax compliance.
  • Service Providers: We use third-party services for hosting (e.g., AWS, Vercel), identity authentication (Supabase Auth), and database management (Supabase). These providers are bound by strict data processing agreements.
  • AI Providers: As detailed in Section 2, chat conversations, user prompts (within the AI chat assistant), uploaded PDF documents, and relevant arXiv paper content are securely transmitted to third-party AI model providers (such as OpenAI, Anthropic, or Google Gemini) solely to generate research summaries and chat responses. General search queries used to locate papers in our catalog are processed locally using local embedding models and database search, and are not shared with these providers.
  • Legal Obligations: If required by law, subpoena, or to protect the rights and safety of Eriva Labs and our users.

6. International Data Transfers

Eriva Labs is based in Bangalore, India. If you are accessing the Services from the EEA, US, or other regions with laws governing data collection and use, please note that your personal data will be transferred to and processed in India and the United States (where our cloud servers are hosted). We ensure appropriate safeguards are in place, such as utilizing standard contractual clauses approved by the European Commission for such transfers.

7. Your Global Privacy Rights (GDPR & CCPA)

Depending on your location, you have the following rights regarding your data:

  • Right to Access: Request copies of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
  • Right to Restrict or Object: Object to or restrict our processing of your data.
  • Right to Data Portability: Request transfer of your data to another service.
  • CCPA "Do Not Sell My Personal Information": We do not sell your personal data. We only share it with essential service providers as outlined in Section 5.

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days.

8. Children's Privacy (COPPA Compliance)

The Services are not intended for children under the age of 13 (or 16 in certain EU jurisdictions). We do not knowingly collect personally identifiable information from children. If you become aware that a child has provided us with personal data, please contact us immediately so we can delete such information from our servers.

9. Data Retention and Security

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law (e.g., tax records). We implement robust technical measures, including secure JWT token verification and data encryption at rest, to safeguard your data against unauthorized access.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last Updated" date.

11. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Eriva Labs Email: [email protected] Address: #17, 2nd floor, 7th Main Road, Indiranagar 2nd Stage, Bangalore, India. 560038