Privacy Policy
Your data is yours. Here's exactly what we collect, why, and how we protect it.
UTMIQ (PVT) LTD ("UTMIQ", "we", "us") operates utmiq.com and the Arivo AI assistant service. This Privacy Policy explains how we handle personal information when you visit our website, join early access, or use our service.
Short version: we collect only what we need to run the service, we never sell your data, and your business information is used only to power your own assistant.
1. Information we collect
1.1 When you visit our website
We collect limited technical data — such as pages visited, browser type, and approximate location — to understand how the site is used and to keep it working reliably. See our Cookie Policy for details.
1.2 When you join early access
When you submit the early-access form, we collect your business name, your name, email address, and optional website URL. We use this to manage the early-access list and contact you about your account.
1.3 When you use the service
To power your AI assistant, we store the business information you provide (products, services, pricing, FAQs), the conversations your visitors have with the assistant, and your account details. Visitor messages may include names or contact details if visitors share them voluntarily.
1.4 When you sign in with Google
If you sign in with Google — or connect a Google account from your account settings — Google shares your name, email address, and profile picture with us. We use this information only to create or verify your account, display your profile, and let you sign in. We do not request access to your Gmail or other Google data beyond this authentication information.
2. How we use your information
- To operate, deliver, and improve the Arivo service.
- To train your assistant so it answers accurately based on your business.
- To share captured leads with you (for example, via email or WhatsApp).
- To send service updates and respond to support requests.
- To comply with legal obligations.
We do not sell your personal information, and we never use your visitor conversations to train models for other customers.
3. Legal basis
We process your personal information based on the following legal grounds: your consent (for early-access sign-ups and optional communications), the performance of a contract (when you use the paid service), our legitimate interests (running and securing the service), and legal obligations.
4. How we share information
We share your information only with service providers who help us run the product (such as hosting, email, and analytics providers), and only where necessary. We require these providers to protect your data. We may also disclose information where required by law or to protect our legal rights.
5. Data retention
We keep account data and business content for as long as your account is active, plus a reasonable period afterwards to handle disputes and legal matters. Conversation logs are retained for lead-management purposes and can be deleted on request unless we're required by law to keep them.
6. Security
We use industry-standard safeguards including encryption in transit and at rest, access controls, and regular backups. No method of transmission is 100% secure, but we work hard to protect your data and will notify you promptly of any breach affecting it.
7. Your rights
You may request access to, correction of, or deletion of your personal information. You may also object to or restrict certain processing, and withdraw consent at any time. To exercise any of these rights, contact us at [email protected] or through our contact page.
8. Children's privacy
Our service is intended for businesses and is not directed at children. We do not knowingly collect personal information from children.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we make significant changes, we'll notify you by email or through the service. The date at the top of this page reflects the latest revision.
10. Sign in with Google and Google user data
You can sign in to Arivo with Sign in with Google, or connect a Google account from your account settings. When you do, we receive only the authentication information described in section 1.4 (name, email address, and profile picture). We use it solely to create or link your account and to identify you when you sign in.
We do not use Google user data for advertising, and we never use it to build customer profiles or sell it to anyone. Our use of information received from Google APIs complies with Google's API Services User Data Policy, including its Limited Use requirements: access is limited to what's needed for authentication, we make no other uses of the data, and we transfer it only as needed to provide the feature or as required by law.
You can stop using Google sign-in at any time by setting an email-and-password login from your account settings and disconnecting your Google account. If you need help, contact us using the details below.
11. WhatsApp Business Platform (Meta)
Arivo is a Tech Provider on Meta's WhatsApp Business Platform. When a business connects WhatsApp, it signs in with Facebook through Meta's Embedded Signup and shares its WhatsApp Business Account and phone number with us. We receive and store:
- the business's WhatsApp Business Account ID, phone number ID, display number, display name and quality rating;
- an access token issued by Meta for that business (stored encrypted), and the Meta user ID of the person who authorised us;
- the messages exchanged on that number — including the phone number, WhatsApp profile name and message text of the business's customers — so the assistant can answer them, log the conversation and capture leads.
We use this data only to provide the service to that business. We do not sell it, use it for advertising, or use it to train models for other customers. Meta processes WhatsApp messages under its own terms and privacy policy; the business is responsible for having a lawful basis to message its customers and for following the WhatsApp Business Policy.
Removing access and deleting data. A business can disconnect WhatsApp at any time from its Channels page, or remove Arivo from Facebook's Business integrations settings. When access is removed we stop using the token immediately. When Meta notifies us of a data-deletion request we erase the connection, its stored conversations, messages and captured leads, and provide a confirmation code. Instructions and status are on our Data Deletion page. Orders and bookings a business recorded remain that business's own records and may be retained where the law requires.
12. Contact
Questions about this policy? Contact us at [email protected] or via our contact page.