Digital Creative Academy LLC, Switzerland, operates Ava and is responsible for the personal data described in this notice. For privacy questions or requests, email ava@digital-creative-academy.com or use the contact form. Swiss data protection law applies, together with GDPR and other laws where their conditions are met.
The Service is available only to individuals aged 18 and above pursuing business, product, or creative innovation projects. We do not knowingly collect personal data from minors.
We process the following categories of information to operate Ava:
Full live-voice transcripts are held temporarily in application memory rather than saved as a permanent transcript history. This does not mean that all conversation content disappears when a session ends: saved summaries, excerpts, and workspace content can remain, and AI providers process content under their applicable retention arrangements.
Share only information you are authorised to provide. Avoid unnecessary sensitive personal information, other people's identifying details, and confidential business material you are not authorised to disclose. AI-generated summaries and insights may be inaccurate.
Where the GDPR applies, the legal basis depends on the purpose:
Accepting the Terms, creating an account, or granting microphone permission is not blanket consent to every use of your data. Ava is not intended to collect health or other special-category information. Where GDPR Article 9 applies, an additional permitted condition is required; contractual necessity alone is insufficient.
Ava records first-party usage information, including visited pages, timestamps, IP addresses, and browser details, for service monitoring and improvement. These records can be personal data; they should not be assumed to be anonymous.
Cookies support authentication. Browser storage also holds preferences and some workspace content on your device. Blocking or clearing it may sign you out or remove local content. Deleting an account does not automatically clear copies on every device, and clearing browser storage does not delete server records. Clear local content on shared devices.
You may request account deletion without waiting for inactivity cleanup. Removal of active account records does not imply immediate erasure of every backup, support message, technical log, payment record, provider record, or browser copy. Contact us for the scope and timing of a particular deletion request and any applicable retention exception.
Ava uses account authentication, password hashing, and encryption for selected account information. This is not a claim that every saved item or browser copy is individually encrypted. The application and its AI providers must process submitted content to deliver the Service; it is not end-to-end encrypted against those providers. No system can guarantee absolute security. Applicable law governs our safeguards and breach-notification responsibilities.
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of covered personal data in a structured, commonly used, machine-readable format. You may object to processing based on legitimate interests and withdraw consent where processing relies on it. These rights can cover personal information in saved AI-generated content, not just your profile.
Email ava@digital-creative-academy.com or use the contact form. We may request proportionate identity verification; do not send passwords, card details, or unnecessary session content. Where GDPR applies, requests are normally addressed without undue delay and within one month. A permitted extension of up to two further months requires notice and reasons within the first month. Requests are normally free, subject to lawful exceptions; other statutory deadlines remain unaffected.
You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a competent EU/EEA supervisory authority where applicable.
Provider retention and model-training terms depend on the service and contractual arrangements involved. This notice does not promise zero provider retention or a single retention period for all AI features. Providers may also process some information independently for legal, security, or payment purposes. Using providers does not remove our own data-protection responsibilities.
Service providers may process personal data outside Switzerland or the EU/EEA, including in the United States. Where required, transfers must be covered by an adequacy decision or appropriate safeguards, such as Standard Contractual Clauses and any necessary supplementary measures. Contact us for information about the countries and safeguards applicable to your data and how to obtain a copy where applicable.
We may update this notice to reflect legal or operational changes and will show the revision date here. Material changes require any notice or consent prescribed by applicable law. Continued use alone is not consent to new processing that requires consent.