Who we are
Araveil Ltd ("Araveil", "we", "us") runs an AI orchestration platform that brings the leading AI models together behind a single interface and sends each request to the model best suited to answer it. Under UK data protection law, Araveil Ltd is the data controller for the personal data described here.
Araveil Ltd is a company registered in England and Wales under company number 17069717. Our registered office is 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom.
We handle personal data in line with the UK GDPR and the Data Protection Act 2018. If you use Araveil from the European Economic Area, the EU GDPR applies in the same way.
Data we collect
We collect only what we need to run the service and personalise it for you.
Information you give us
- Account details. Your name, email address, and a securely hashed password when you register.
- Your content. The prompts, messages, files, images, and voice input you submit, together with the responses generated for you.
- Memory and preferences. The context Araveil keeps so it can personalise answers, such as your writing style, project details, and stated preferences. You choose what is remembered, and you can clear it whenever you like.
- Billing information. On Pro and Premium plans your payment is handled by our payment processor. We store limited billing details such as your plan, status, and invoices, and we never see or store full card numbers.
Information we collect automatically
- Usage data. The features you use, the requests you make, and routing details such as which model tier answered a request.
- Device and log data. Your IP address, browser and device type, timestamps, and diagnostic logs that help us keep the service secure and reliable.
- Cookies and local storage. A small number of essential and preference identifiers, described in our Cookie Policy.
- Location (optional, off by default). If you turn on Location metadata in Settings, your browser shares your device location so we can tailor answers with local context such as your city and current weather. Your precise coordinates are rounded on your device and used only to look up your general area and local weather through mapping and weather services; the AI models that answer you receive your approximate city and weather, never your precise coordinates. This location is cached on your device for a short period and is cleared when you turn the setting off.
Please avoid sending sensitive personal data, such as health, biometric, or financial account details, unless it is genuinely needed. Anything you send is processed by third-party AI providers to generate your response.
How we use it
- Run the service. Read each request, route it to the model best suited to answer, and return the response.
- Personalise your experience. Apply the memory and preferences you have chosen so answers fit your context.
- Handle billing. Manage subscriptions, take payment, and prevent payment fraud.
- Keep things secure. Detect abuse, fix faults, and protect your account.
- Improve Araveil. Learn which features help, using aggregated or de-identified data wherever we can.
- Stay in touch. Send service, security, and account messages, plus product updates when you have asked to receive them.
- Meet our legal duties. Comply with the law and respond to lawful requests.
We do not sell your personal data, and we do not use your private content to train our own foundation models.
How your prompts reach AI models
Araveil does not build the underlying models. When you send a request, our Decision Engine works out which model fits the task and forwards only the content needed to that provider so it can reply. These providers act as our sub-processors, and we list them under Sharing & sub-processors below.
- Only the content needed to fulfil your request is sent to the chosen provider.
- We work with providers on their business or enterprise terms and, where those terms allow, opt out of having your inputs and outputs used to train their models.
- Providers may keep content briefly to deliver the response and to check for abuse, in line with their own policies.
Because your content is processed by these third parties, their handling of it is also governed by their own privacy terms. We choose providers that meet recognised security and data-protection standards.
Improving model routing
To choose better models, our Decision Engine learns from how people use Araveil: which answers they keep, which they retry, and which models they pick themselves. You can switch this off at any time in Settings › Data & privacy › Improve model routing, and switching it off does not change how your requests are answered.
What we use
While the setting is on, we record the following and link it to your account through a pseudonymous identifier, never your name or email address:
- Routing decisions. The model we chose and the backups we ranked, with features our system derives from your request: its broad intent (for example “coding” or “research”), subject area, complexity and approximate length.
- Choices you make. Models you select yourself, retries, “try another model”, and the options you set on a request, such as web search, reasoning modes, image mode, the number of images you attach, and the tone or mood you choose.
- Your ratings. Thumbs up or down, the reasons you pick, and removing a rating.
- How you use answers. Stopping a response, copying it, clicking a suggested follow-up, and how long the first words took to appear.
- Weather. A general weather category, such as “rainy”, and only if you have turned on Location metadata. Never your location, city or coordinates.
We never use the text of your messages, the answers you receive, your files or images, or any comment you write with a rating for this. The Decision Engine keeps only a one-way fingerprint of each request, which cannot be turned back into your words.
We use this to choose faster, more accurate and more reliable models for you and everyone else, to spot when a model is underperforming, and to test changes before they reach you. We do not use it for advertising, we do not sell it, and we do not use it to make decisions that have legal or similarly significant effects on you.
Our legal basis
We rely on our legitimate interests in giving everyone accurate, dependable answers from the best-suited model: Article 6(1)(f) of the UK GDPR and the EU GDPR. We have weighed that interest against your rights and concluded that it does not override them, because we never use your content, the information is pseudonymised, it has no significant effect on you, and you can switch it off in one step. You can ask us for a copy of our assessment.
Your right to object
You can object at any time, without giving a reason, by turning off Improve model routing or by emailing info@araveil.com. When you do:
- We stop straight away. From your next request, the Decision Engine is not told who you are and keeps no record of its decision, and we stop recording your choices, ratings and use of answers for this purpose.
- We delete the information we already hold about you for this purpose, so it is no longer used to improve routing for you or anyone else. Patterns already combined across many users, which cannot identify anyone, are not affected.
- The setting shows as off only once your choice is saved. If we cannot save it, we tell you and nothing changes until you try again.
You can turn it back on whenever you like, and only what you do from then on is used. Records we need to run and secure the service, such as which model answered a request and failed requests, are not affected.
Users under 18
We never use the activity of anyone whose date of birth, as given when they signed up, shows they are under 18. For those users the setting is off and cannot be switched on. It switches on when they turn 18, and they can turn it off at any time.
How long we keep it
We keep this information while your account is in use, and delete it if you switch the setting off. If your account has no activity for five years, we anonymise it in the same way as when an account is deleted, even if the account stays open; your account, chats and settings are not affected. Guest data is deleted after 72 hours without activity. When an account or guest session is deleted, we irreversibly anonymise the routing information: we remove your pseudonymous identifier, conversation identifiers, request fingerprint, location, weather and time-zone context, and any free-text comment, and delete everything that could link it back to you. What remains, such as “a complex coding request was routed to model X and rated positively”, is no longer personal data, and we may keep it to improve our Decision Engine.
Legal bases
Under the UK GDPR we rely on these legal bases:
- Performing our contract with you, so we can provide the features you sign up for.
- Our legitimate interests in securing, maintaining, and improving the service, including improving model routing, balanced against your rights.
- Your consent for optional features you switch on, such as location metadata, and for optional cookies and marketing messages, which you can withdraw at any time.
- Legal obligations, where we must keep or disclose data to comply with the law.
International transfers
Some of our providers process data outside the UK and the EEA. When that happens we rely on safeguards recognised under UK and EU law, such as adequacy decisions, the UK International Data Transfer Addendum, and the EU Standard Contractual Clauses, so your data keeps an equivalent level of protection wherever it is handled.
Data retention
We keep personal data only for as long as we need it:
- Account data stays while your account is open, and for a short time afterwards.
- Conversations and memory stay until you delete them or close your account. You can clear individual items, or your whole memory, whenever you like.
- Deleted conversations move to Recently deleted and can be restored for 30 days, after which they are permanently removed.
- Billing records are kept for as long as tax and accounting law requires.
- Logs are held for a limited period to keep the service secure and to troubleshoot problems.
Deleting your account
You can delete your account at any time from Settings › Data & privacy. Deletion is not immediate: your account is scheduled for removal and held for 30 days, so that you can restore it if you change your mind or if someone else requested the deletion. To restore it, sign back in and choose “Restore account” in Settings › Data & privacy. Signing in on its own does not stop the deletion. If you have a paid plan, you need to cancel it yourself first, under “Manage subscription”. You can delete your account as soon as the plan is set to end; you do not have to wait for the billing period to finish. As set out in our Terms of Service, we do not refund the remainder of the current billing period unless the law requires it, and nothing here limits the refund or cancellation rights you have under UK consumer law. Restoring your account does not restore the subscription.
When the 30 days end, we permanently erase your conversations, projects, generated images, uploaded files, settings, and profile. A small amount of information is kept afterwards, because removing it would be unlawful or would defeat the purpose of keeping it:
- Billing and tax records, for as long as tax and accounting law requires.
- Reports about harmful content, with your identity removed. Retaining these stops account deletion from being used to erase a record of abuse.
- Model routing statistics, irreversibly anonymised so they can no longer be linked to you, as described under Improving model routing.
- A record that a deletion request was made and completed, which we need in order to demonstrate that we honoured it. Your email address is stored only as an irreversible hash, never in readable form.
Security
We protect your data with encryption in transit and at rest, strict access controls, and continuous monitoring. No system is ever perfectly secure, but we work hard to keep the risk low, and we will tell you and the relevant regulator about any breach that affects your rights, as the law requires.
Your rights
Under the UK GDPR you have the right to:
- Access a copy of your personal data.
- Correct data that is wrong or incomplete.
- Delete your data (the "right to be forgotten").
- Restrict or object to certain processing, including switching off Improve model routing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting anything done beforehand.
To use any of these rights, email info@araveil.com. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, though we would rather have the chance to put things right first.
Children
Araveil is not aimed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us their data, contact us and we will delete it.
If the date of birth you gave us shows you are between 13 and 17, we never use your activity to improve model routing, as explained under Improving model routing.
Changes to this policy
We may update this policy as the service grows. When we make a meaningful change we will update the date above and, where it matters, let you know. If you keep using Araveil after an update, that means you accept the revised policy.
Contact us
For any privacy question or request, email info@araveil.com, or write to Araveil Ltd, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom. We aim to reply within 30 days.
This Privacy Policy was last updated on 19 October 2026.