Privacy Policy

This Privacy Policy explains how Arivana, Inc. (“Arivana,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information. It applies to our marketing website and blog at arivana.com, and to the Arivana real estate workspace and related products and services (together, the “Services”).

Arivana is a workspace for real estate professionals. It helps agents research properties, build comparative market analyses (CMAs), manage their contacts, prepare and share listings, and communicate with clients. We are continually adding features, and this policy is written to cover both the features available today and functionality we are actively rolling out. Where a feature relies on data you choose to connect or upload, we describe that data here so you know how it is handled before you use the feature.

If you do not agree with this policy, please do not use the Services. If you have questions, contact us at privacy@arivana.com.

1. Who we are and roles

Arivana, Inc. is the data controller for personal information we collect about visitors to our website and about the real estate professionals who hold accounts with us (“Agents”).

When an Agent uses the Services to store and process information about their own clients, prospects, and contacts (for example, in the contacts module or in a CMA), the Agent is the controller of that information and Arivana acts as a processor or service provider on the Agent’s behalf. Agents are responsible for having a lawful basis to upload and process their contacts’ information and for providing any notices their own clients require.

2. Information we collect

Information you provide directly.

• Waitlist and marketing. When you join our waitlist or sign up for updates, we collect your email address.
• Account registration. When you create an Agent account, we collect information such as your name, email address, password, brokerage, and profile details. If you register or sign in using Google, we receive basic profile information from Google as described in Section 5.
• Lead and contact forms. Public contact and lead forms collect details such as first name, last name, email address, phone number, how you heard about the business, and whether you are a buyer, seller, or both.
• Contacts you manage. Agents can add and store records about their clients and prospects, including names, email addresses, phone numbers, referral sources, and notes, and can link those records to a CMA.
• Content you upload or create. This includes property details, subject and comparable property data, photos you upload, branded report covers, listing materials, and documents such as home inspection report PDFs that you choose to upload for AI assisted summaries and repair proposals.
• Communications and feedback. When you email a report to a client, submit feedback or a bug report through our in product widget, or otherwise contact us, we collect the content of those messages and related details.

Information we collect automatically.

• Usage and device data. When you use the Services, we may collect log data such as IP address, browser type, device information, pages viewed, and timestamps, for security, troubleshooting, and to operate and improve the Services.
• Shared link view tracking. When an Agent shares a CMA report or a login free client property view, we may record view events (such as the time and number of views) and notify the originating Agent so they can gauge interest and follow up.
• Cookies and similar technologies. We use a small number of cookies as described in Section 7.

Information we receive from third parties.

• Multiple Listing Service (MLS) and property data. We integrate with property data providers such as Repliers and RealTracs to display listings, comparable sales, market statistics, and listing photos. This data is supplied by those providers and the relevant MLS.
• Sign in providers. If you choose to sign in with Google, we receive the profile information described in Section 5.

3. How we use information

We use personal information to:

• Provide, operate, maintain, and secure the Services, including authentication and account management.
• Create and deliver core features such as CMAs, market statistics, listing assembly, net proceeds calculations, shareable reports, and client timelines.
• Send transactional and service messages, including notifications to an Agent when a shared report is viewed or when a lead form is submitted.
• Respond to feedback, bug reports, and support requests.
• Communicate about the waitlist, product updates, and marketing where permitted.
• Generate AI assisted output you request, as described in Section 6.
• Monitor, analyze, and improve performance, reliability, and usability of the Services.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our terms.

Where required by law, we rely on one or more legal bases to process personal information, including your consent, performance of a contract, our legitimate interests in operating and improving the Services, and compliance with legal obligations.

4. Internal notifications

We use internal alerting tools, including Slack, to notify our team about events such as new waitlist signups, new account registrations, and submitted feedback. These notifications can include limited personal information, for example a name and email address, so we can respond and follow up. Access to these tools is restricted to authorized personnel.

5. Google user data and Limited Use

Some features of the Services let you connect your Google account. We handle Google user data in accordance with this section.

Google sign in. If you choose to register or sign in with Google, we request basic profile information (such as your name, email address, and Google account identifier) solely to create and authenticate your Arivana account.

Sending email through Gmail. If you connect Google to send messages such as a CMA report to your client from your own address, we request permission to send email on your behalf. We use this access only to send the specific messages you initiate from within the Services. We do not read, scan, import, or store the contents of your Gmail mailbox, and we do not use Gmail access for any purpose other than sending the messages you ask us to send.

Limited Use commitment.Arivana’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the features you have enabled, such as signing in and sending email on your behalf.
• We do not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to affected users.
• We do not use Google user data for serving advertising, including retargeting, personalized, or interest based advertising.
• We do not use Google user data to develop, improve, or train generalized or non personalized artificial intelligence or machine learning models.
• We do not allow humans to read Google user data unless we first obtain your affirmative agreement to view specific data, it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

You can disconnect Google access at any time from your account settings and through your Google Account permissions.

6. Artificial intelligence features

Certain features use artificial intelligence to generate content you request, such as listing copy, location intelligence, daily briefings, and summaries or repair proposals based on a home inspection report you upload. To provide these features we send the relevant input you supply to trusted AI processors, including Anthropic, which process it on our behalf to return the requested output.

We do not use information you connect from Google to train AI models, as stated in Section 5. We do not permit our AI processors to use your data to train their generally available models, and AI generated output can contain errors, so you should review it before relying on or sharing it.

7. Cookies and similar technologies

Our marketing website uses minimal cookies. We do not use advertising or cross site tracking cookies on the marketing site. When an authorized editor previews unpublished content, our content system sets a draft mode cookie so the preview renders correctly. The signed in workspace uses cookies and similar technologies that are strictly necessary to keep you logged in and to operate core functionality. Where required, we will ask for your consent before setting non essential cookies.

Our pages may load web fonts from Google Fonts. When your browser requests these fonts, Google may receive your IP address and request information as part of delivering them.

8. How we share information

We do not sell your personal information. We share information only as described below.

• Service providers and subprocessors. We use vendors to host and operate the Services and to provide specific features. Current and planned providers include our content management and lead storage system (Strapi), application and object storage hosting (including Railway with Tigris storage, and DigitalOcean), property data providers (Repliers and RealTracs), AI processing (Anthropic), internal notifications (Slack), and Google for sign in and Gmail sending. These providers may process personal information only on our instructions and for the purposes of providing their services.
• At your direction. When you share a CMA report, send an email to a client, generate a shareable login free client property view, or publish a listing, we share the information you choose to include with the recipients or destinations you select.
• Legal and safety. We may disclose information to comply with law, regulation, legal process, or enforceable governmental request, to enforce our terms, or to protect the rights, property, or safety of Arivana, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

9. Data retention

We retain personal information for as long as needed to provide the Services, to comply with our legal obligations, resolve disputes, and enforce our agreements. Waitlist and lead information is retained until you ask us to remove it or it is no longer needed. Account and content data is retained for the life of the account and for a reasonable period afterward, unless a longer period is required by law. When information is no longer needed, we delete or anonymize it.

10. Data security

We use technical and organizational measures designed to protect personal information, including access controls, authentication, encryption in transit, and restricting access to authorized personnel and processors. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Your rights and choices

Depending on where you live, you may have rights to access, correct, update, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in the European Economic Area or the United Kingdom, these rights arise under the GDPR and UK GDPR. If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights to know, access, delete, and correct your information, and to opt out of the sale or sharing of personal information and certain targeted advertising. We do not sell or share personal information for cross context behavioral advertising.

You can unsubscribe from marketing email using the link in those messages. To exercise any of these rights, contact us at privacy@arivana.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights. If your information is managed by an Agent using the Services, please direct your request to that Agent, and we will assist them as needed.

12. International data transfers

We are based in the United States and process information there and in other countries where we and our providers operate. Where we transfer personal information across borders, we use appropriate safeguards as required by applicable law, such as standard contractual clauses.

13. Children’s privacy

The Services are intended for real estate professionals and other adults, and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

14. Third party links and services

The Services may link to or integrate with third party websites and services that we do not control, including MLS providers and Google. Their use of your information is governed by their own privacy policies. We encourage you to review them.

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

16. Contact us

If you have questions or requests regarding this policy or your personal information, contact us at privacy@arivana.com.

Arivana, Inc.
Tennessee, United States

You can also return to the Arivana home page or read our blog.