Privacy policy

Last updated September 25, 2026

This policy explains what Avalon collects, how it is used, and the choices you have. Avalon is built to keep as much as possible on your own device.

What stays on your device

• Your conversations, settings, reports, decks and dashboards are saved in your browser’s storage. We don’t keep a copy on our servers unless you turn on sync or create a share link.
• Spreadsheets and data files you add to Data analyst are opened and queried inside your browser. The full file is not uploaded.
• Clearing your browser data or using a private window removes this saved content.

What we send to process a request

• Messages. When you send a message, its text and the recent conversation are sent to our servers and to the AI service we use, to write the answer.
• Data analyst. To answer a question about your data, we send the column names, a small sample of rows and the results of the queries run in your browser.
• Research. With web search on, your question is used to search the web through the same AI service’s search tool, and the pages found are read to write a cited answer.
• Reports and slides. The conversation, and any material you add to the brief, is sent to the same AI service to write the report or deck. Avalon draws the slides itself.

The AI service processes the content only to return a response to you. We don’t use your content to train models, and we don’t sell it.

What we store on our servers

• Sync. If you turn on sync, your conversations and data sets are stored under a private sync code so you can open them on another device. Anyone with that code can read the data, so keep it private. Turning sync off stops new uploads.
• Share links. When you share a conversation or artifact, a copy is stored so anyone with the link can view it.
• Logs. Our hosting provider keeps standard technical logs (such as IP address, browser type and request time) for security and reliability, for a limited period.

What we don’t do

• We don’t require an account, and we don’t run advertising trackers.
• We don’t sell or rent your personal information.

Service providers

We rely on a small number of companies to run Avalon: a cloud provider for hosting and storage, and an AI service for the AI models and web search. Each receives only what it needs to do its job and is bound by its own privacy and security commitments.

Your choices

• Delete a conversation or file at any time inside the app.
• Use incognito mode for a conversation that isn’t saved to your history.
• Email us to ask about, or to delete, anything stored under your sync code or share links.

Children

Avalon is not directed at children under 13, and we don’t knowingly collect their information.

Changes

We’ll update this page when our practices change and revise the date at the top.

Who we are

Avalon is owned by Rivesa Inc.. Contact us at raj@rivesa.ai.