ALLIVISTA · STRUCTURAL INTELLIGENCE

Privacy Policy

Effective 28 June 2026 · Last updated 28 June 2026

This policy covers the Allivista website (allivista.com), the Allivista API, and the Allivista MCP connector / desktop extension. It explains exactly what we collect, why, and — for your stored memory — why we cannot read it.

1. Who we are

Allivista provides a structural-knowledge cortex and an end-to-end encrypted memory service that AI assistants reach through the Model Context Protocol (MCP). "We", "us", and "Allivista" refer to the operator of allivista.com.

2. What we collect, and why

Account & authentication. When you create an account we use Amazon Cognito to authenticate you. We store your account identifier, email address, and plan tier. Purpose: sign-in, account management, and enforcing your plan.

API keys. Pro API keys (alv_…) are stored only as a SHA-256 hash. We never store the plaintext key and cannot recover it — if you lose it, you revoke and reissue.

Usage metering. We count requests per period to enforce quotas and prevent abuse: anonymous use is counted by IP address and calendar week; signed-in use by account and month. We do not use IP addresses for any purpose other than rate-limiting and abuse prevention.

Query history (discover / verify). For signed-in users we may store your query terms and the results so you can review them in your account. You can delete this history at any time.

Cortex queries & narration. The concept terms you pass to discover and verify are processed on our servers against a fixed research-literature cortex, and a short natural-language narration is generated using a third-party large-language-model provider (Anthropic). Only the explicit tool inputs you send are transmitted — never the rest of your AI assistant's conversation.

Your memory (remember / recall) is end-to-end encrypted. Text you store is encoded into a per-user dialect and encrypted with AES-256-GCM on your own device, using a key derived from a passphrase that never leaves your device. Our servers store only ciphertext and opaque token identifiers. We cannot read your stored memory, and we cannot recover it if you lose your passphrase.

3. What we never do

We do not sell or rent your data.
We do not use your queries or memory to train machine-learning models.
We do not access, store, or transmit your AI assistant's wider conversation — only the explicit arguments you pass to a tool.
The connector does not read data belonging to other connectors or tools.

4. Service providers

We share the minimum necessary with infrastructure providers who process data on our behalf:

Provider	Purpose	What it sees
Amazon Web Services	Hosting, authentication (Cognito), database, compute	Account data, ciphertext memory, hashed keys, usage counts
Anthropic	Generates the narration for `discover` / `verify`	Only the concept terms for that query
PayPal	Subscription billing	Processes your payment; we store a subscription id and billing email

5. Retention

Account, usage, and query-history data: kept while your account is active; deleted when you close your account or on request.
Encrypted memory: kept until you delete it or close your account (and it is unreadable to us throughout).
Hashed API keys: kept until you revoke the key.

6. Security

All traffic is encrypted in transit (TLS). API keys are stored hashed. Your memory is end-to-end encrypted with a key that never leaves your device.

7. Your choices

You can view and delete your query history and stored memory from your account, revoke API keys at any time, and request export or deletion of your account data by emailing us. Deleting a memory document removes its ciphertext from our store.

8. Children

Allivista is not directed to children and is not intended for use by anyone under 16.

9. International processing

Allivista is operated from the United States and data is processed on US-based AWS infrastructure.

10. Changes

We will update this page and revise the "Last updated" date when this policy changes materially.

11. Contact

Questions or data requests: privacy@allivista.com.