Privacy Policy

Arvapaly LLC (“Arvapaly”, “we”, “our”, or “us”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our website (arvapaly.com), our Smart Summify AI Chrome extension and related online services, and when you contact us. If you do not agree with this policy, please do not use our services.

1. Scope

This policy applies to information processed in connection with:

• Our marketing website and contact forms;
• Smart Summify AI (browser extension, backend API, and authenticated features such as history, chat on a summary, exports, and billing).

Our services may change over time; we will update this page when we make material changes.

2. Information we collect

2.1 Account and identity

When you create or use an account, we collect:

• Email address and display name (or name fields you provide);
• Authentication data — for email sign-in, credentials are handled by our authentication provider (e.g. hashed passwords and account security signals we do not directly store as plain text). For Google sign-in, we receive identifiers and profile details allowed by that sign-in method;
• Internal user IDs used to link your account to summaries and subscription status.

2.2 Content you provide (Smart Summify AI)

To provide summarization and related features, we process content you actively submit, including:

• Web page text extracted from the tab you are summarizing (plus page title and URL for context and your history);
• Uploaded files (e.g. PDF, Word, plain text) you choose to summarize;
• Prompts and messages you send when using chat or similar features tied to a summary;
• Generated outputs (summary text, export files, slide decks, social card text) that we deliver back to you.

We use this content to operate the product—for example, to generate summaries, show your history, enforce plan limits, and respond to support requests tied to your account. We do not sell your personal data or your submitted content to data brokers, and we do not use your content to train public or third-party AI models.

2.3 Usage, device, and logs

We collect limited technical and usage information, such as:

• API and server logs (e.g. timestamps, request metadata, error diagnostics, and client IP address as part of normal HTTPS traffic);
• Product usage signals needed for quotas and plans (e.g. counts of summaries, exports, or uploads within a billing period);
• Extension preferences stored locally on your device (e.g. theme or display settings) as described in your browser’s extension storage.

We do not collect a complete browsing history of every site you visit. The extension processes the current page when you choose to summarize it, or files you upload.

2.4 Payments

Paid plans are processed by our payment partner (Stripe). We receive billing-related records such as subscription status, customer identifiers Stripe assigns, and invoice metadata—not your full card number, which Stripe handles according to its own terms and PCI requirements.

3. How we use information

We use information to:

• Provide, maintain, and improve our services;
• Authenticate users and secure accounts;
• Operate AI-powered features (content is sent to our backend and then to our configured AI provider solely to generate results for you);
• Store summaries and related artifacts you choose to keep in your account (e.g. history, downloads you request);
• Process payments and communicate about billing;
• Respond to lawful requests, enforce our Terms, and protect rights, safety, and security.

4. AI processing

Smart Summify AI uses third-party AI model providers (for example Google Generative AI / Gemini) as subprocessors. Content required for a request is transmitted to them only to fulfill that request. Their use is governed by their terms and our agreements with them. We configure services for our users’ benefit and do not permit the provider to use your content to train their models where the provider offers that as a contractual or account-level setting; we rely on the provider’s current enterprise/API policy in effect for our integration.

5. How we share information

We share information only with:

• Service providers that help us run our business under confidentiality and security obligations—for example cloud hosting, authentication (e.g. Firebase / Google), payments (Stripe), email delivery, and AI inference;
• Professional advisers where required (e.g. lawyers, accountants);
• Authorities when required by law or to protect rights.

We do not sell personal information for money. We do not share data for cross-context behavioral advertising as defined under U.S. state privacy laws.

6. Retention

We retain information only as long as needed for the purposes above, including legal, accounting, and dispute-resolution needs. You may delete your account or request deletion where applicable; some records may persist for a limited period in backups or logs before aging out.

7. Security

We use industry-standard safeguards such as encryption in transit (HTTPS), access controls, and trusted infrastructure providers. No method of transmission or storage is 100% secure; we work to reduce risk and respond to issues responsibly.

8. International transfers

We are based in the United States. If you access our services from other regions, your information may be processed in the U.S. or other countries where our providers operate. Those countries may have different data-protection laws than your own.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise these rights, contact us at contact@arvapaly.com. We may need to verify your request. You may also manage subscription billing through the in-product billing links (handled by Stripe where applicable).

10. Children

Our services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, please contact us and we will take appropriate steps.

11. Third-party sites and services

Our website may link to third parties; their practices are governed by their own policies. AI sign-in and payments are provided by third parties as described above.

12. Cookies and similar technologies

Our public website (arvapaly.com) currently does not use first-party analytics or advertising cookies in the Site code we ship, and our Site scripts do not use localStorage or sessionStorage. We load fonts from Google Fonts, which involves requests to Google’s infrastructure; see our dedicated Cookie Policy for a concise breakdown. The Smart Summify AI product (extension and related services) may use browser storage for in-product preferences as described elsewhere in this policy.

If we add analytics, marketing cookies, or similar technologies to the marketing site in the future, we will update the Cookie Policy and this section and, where required by law, obtain consent before using non-essential cookies.

13. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes may be communicated through the product or by email where appropriate.

14. Contact

Questions about this policy or data requests: contact@arvapaly.com or our Contact page.

Arvapaly LLC — If you need a mailing address for legal or regulatory correspondence, email us at the address above and we will provide it.