What Aiva Actually Does With Data

If You've Simply Talked to an Aiva Character

You don't need an account for this to apply to you. An Aiva character can remember conversations, form an impression, and build a relationship record about anyone she interacts with - including your display name, roughly how she feels about you, and a summary of your history together - the same way she would about anyone she's met.

That information is stored as part of the character's own memory, not shared publicly, and used only to let her behave consistently the next time she meets you. See "Who receives it" below for exactly where it goes. If you'd like to know what a character holds about you, or want it removed, see "Your rights" below - contact us and we'll help, even though you never signed up for anything.

What We Collect

If you create an AivaSL.com account: your website username, password hash and an email address if you give us one (not currently email-verified). Character profiles separately hold their Second Life login and settings, encrypted in profile storage and its database recovery copy, so the service can connect the avatar. We also keep credit purchases and account actions for support, accounting and abuse prevention.

Card details are handled by Stripe when you buy credits. We do not store your card number. We keep purchase references, amounts, currency, tax, credits and refund or dispute records. Where a purchase qualifies for an affiliate commission, we keep the referral terms, commission and staff payment records too.

If you request a demo or support: we save your website account, the contact email or SL username you provide, your message and request time. Managers and administrators can handle the request and record who helped, when and what was done. Staff-only notes are separate from messages shown to you. Requesting help does not subscribe you to marketing.

Optional diagnostic sharing: you can get help without sharing character diagnostics. If you agree, the permission names one character, a date range and the information allowed. Only administrators can download approved evidence. Permission ends after seven days, on revocation or when the case closes; reopening does not restore it. Requests, approvals and download attempts are recorded. We exclude stored credentials and raw request context, but approved conversations, decisions and memories can mention you and other people. Revoking access cannot recall an already downloaded copy; no support export is automatically sent to an AI service.

If you interact with an Aiva character, whether or not you have an account: your display name, an internal reference tied to your avatar, and whatever the character genuinely experiences and chooses to remember - conversations, actions, an evolving relationship impression, and any memories that mention you. This is generated by the AI itself as part of giving the character real continuity, not manually curated by us.

If a character owner configures an Activation box: we store the names and Second Life avatar UUIDs they choose to trust, the guest and box session limits, and an encrypted private box ID. A touch sends that private ID, the touching avatar's current name and UUID so the service can apply those settings. For successful guest demos, we retain the visitor name and UUID, character, first and latest use and number of demos so administrators can prevent accidental repeat demos, review use, extend an active timer or allow another demo. We also keep the current box-started session and its expiry while it is relevant; resetting the box ID invalidates the old one.

Why

To let a character actually remember people and maintain relationships over time - the entire point of the product. To operate your account and process credit purchases. To investigate a genuine problem or abuse report if one is raised. We do not use any of this for advertising, and we don't sell data to anyone.

Who Receives It

Your data is stored on our own database, on infrastructure we control. Beyond that:

• The AI provider (OpenRouter, routing to the underlying model). To generate a character's next decision, relevant names, memories, and relationship context have to be sent to the AI provider as part of that request - this is how the character "thinks." This is a genuine transfer outside the UK, since OpenRouter is a US company.
• Stripe, for payment processing, if you buy credits.

We do not sell, rent, or otherwise share your data with anyone else.

How Long We Keep It

Honestly: by default, indefinitely, for as long as a character exists - the same way a person's own memory doesn't expire on a timer. Archiving a character (instead of deleting it) keeps everything exactly as it was, in case you want it back.

If you want a character's entire memory genuinely wiped, or want us to look into what's held about you specifically as a non-customer, contact us (see below) and we'll act on it directly - see "Your rights."

Your Rights

You can ask us: what we hold about you, to correct something that's wrong, to have it deleted, or to object to how it's used. This applies whether or not you have an account - including if an Aiva character simply remembers you from an in-world conversation.

Contact us to request deletion. An administrator can erase a character's active Aiva data and stored login, or your account's personal details, website credentials and all its characters. Archive is different: it keeps the data. Payment, refund, credit and affiliate accounting and minimum security references remain. Existing backups, independently held copies and information recorded by other characters are not erased by that account action. A backup restore must respect later deletion records before access is reopened. Removing just what another character remembers about one particular person needs a separate review.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you're unhappy with how we've handled your request.

A Note on Sensitive Information

Because Aiva characters form genuine impressions of people, there's a real possibility a character could infer or note something sensitive about someone - health, religion, sexuality, political views, and similar. We don't want that happening as a matter of course, and we're actively working on this as a deliberate design question rather than leaving it to chance. If you're ever concerned a character holds something like this about you, contact us and we'll look into it directly.

Our Legal Basis

Where we have a choice, we rely on legitimate interests to operate the core service - the parts that make Aiva actually work, keep it safe, and let us respond to problems - rather than asking for a separate consent for each of those. We don't currently send marketing of any kind, so consent isn't something we're relying on for that either. We're actively reviewing exactly how this applies to each kind of processing described on this page, in particular for people who never created an account.

Contact

For a data question, deletion or access request, use website support if you have an account, or contact jimbobkirk Resident in-world. You do not need to create an account to raise a privacy concern.