EL
Eriva Labs

Privacy Policy

Last Updated: 24 April 2026

Eriva Labs (registered as a sole proprietorship in India) ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our interactive learning platform (collectively, the "Services").

This policy is designed to comply with global privacy standards, including the General Data Protection Regulation (GDPR) in the European Union and the California Consumer Privacy Act (CCPA).

1. Information We Collect

A. Personal Data

Information you voluntarily give to us when you register:

  • Account Information: Email address, display name, and profile picture (typically obtained via OAuth providers like Google).
  • Communications: Information you provide when contacting [email protected].

B. Derivative Data & Analytics (Cookieless)

To protect your privacy, we utilize Umami Analytics, a privacy-first, cookieless analytics solution.

  • We collect anonymized, aggregated data regarding page views and general usage patterns.
  • Our analytics implementation does not collect Personally Identifiable Information (PII) and does not track you across other websites.

C. Financial Data

We do not collect or store credit card numbers. All purchases are processed by our Merchant of Record, Paddle. Paddle collects the necessary financial information to process transactions and comply with tax regulations. Please review Paddle's Privacy Policy for more information.

D. Simulation Creator Data

When you use our "Simulation Creator" tool:

  • Transient Processing: We process the content you provide (e.g., YouTube links, text, or documents) to generate educational simulations.
  • No Raw Storage: We do not store, host, or archive the original raw content (full PDF files, source video data, etc.) once the simulation generation process is complete. We only store the resulting simulation data linked to your account.

2. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and the UK, we process your personal data under the following lawful bases:

  • Consent: When you create an account via Google Auth or opt-in to newsletters.
  • Contractual Necessity: To provide you access to the courses and services you purchased.
  • Legitimate Interests: To maintain the security of our platform and analyze anonymized usage data to improve our educational content.

3. How We Use Your Information

We use the information collected to:

  • Create, manage, and secure your account.
  • Track and save your progress in courses and simulations.
  • Quality & Safety Audits: Review generated simulations to ensure platform quality, pedagogical accuracy, and compliance with our Acceptable Use Policy.
  • Fulfill purchases and manage transactions (in conjunction with Paddle).
  • Respond to customer service requests.
  • Prevent fraudulent activity and enforce our Acceptable Use Policy.

4. Disclosure of Your Information

We may share your information in the following situations:

  • Merchant of Record: We share necessary transactional data with Paddle to facilitate payments and tax compliance.
  • Service Providers: We use third-party services for hosting (e.g., AWS, Vercel) and database management. These providers are bound by strict data processing agreements.
  • Legal Obligations: If required by law, subpoena, or to protect the rights and safety of Eriva Labs and our users.

5. International Data Transfers

Eriva Labs is based in Bangalore, India. If you are accessing the Services from the EEA, US, or other regions with laws governing data collection and use, please note that your personal data will be transferred to and processed in India and the United States (where our cloud servers are hosted). We ensure appropriate safeguards are in place, such as utilizing standard contractual clauses approved by the European Commission for such transfers.

6. Your Global Privacy Rights (GDPR & CCPA)

Depending on your location, you have the following rights regarding your data:

  • Right to Access: Request copies of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
  • Right to Restrict or Object: Object to or restrict our processing of your data.
  • Right to Data Portability: Request transfer of your data to another service.
  • CCPA "Do Not Sell My Personal Information": We do not sell your personal data. We only share it with essential service providers as outlined in Section 4.

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days.

7. Children's Privacy (COPPA Compliance)

The Services are not intended for children under the age of 13 (or 16 in certain EU jurisdictions). We do not knowingly collect personally identifiable information from children. If you become aware that a child has provided us with personal data, please contact us immediately so we can delete such information from our servers.

8. Data Retention and Security

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law (e.g., tax records). We implement robust technical measures, including CSRF protection and HttpOnly cookies, to safeguard your data against unauthorized access.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last Updated" date.

10. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Eriva Labs Email: [email protected] Address: #17, 2nd floor, 7th Main Road, Indiranagar 2nd Stage, Bangalore, India. 560038