Privacy Policy

Last updated: [effective date]

Archivow exists to hold some of the most sensitive records of your life. This policy explains, in plain English, what we collect, who processes it, how long we keep it, and the rights you have over it.

1. Who we are

Archivow (“Archivow,” “we,” “us”) provides a web-based service that helps couples organize relationship and immigration evidence into a filing-ready PDF packet. This policy covers archivow.com and the application there (the “Service”). The controller responsible for your information is [Archivow Operating Entity]; contact us at hello@archivow.com. Archivow is a self-help tool — it is not a law firm, does not provide legal advice, and using it does not create an attorney-client relationship.

2. Information we collect

We collect only what we need to run the Service:

  • Account information — your email address and authentication credentials (managed by Supabase Auth). We never store your password in readable form.
  • Evidence and case content (sensitive) — photos, civil and identity documents (e.g. birth/marriage certificates, passports), financial records, relationship details (trips, residences, joint assets), your first-person relationship statement, and immigration-related details. We treat all of this as sensitive personal information.
  • Chat statistics, not your messages — if you import a chat history, the messages are parsed entirely on your device and only aggregate counts are stored (see §3).
  • Payment information — handled by Stripe. We never receive or store your full card number, only limited confirmation details.
  • Limited technical/log data — e.g. IP address, browser type, timestamps, used for security and debugging. We do not run advertising trackers and do not perform analytics on your evidence content.

A case is shared by two people — a petitioner and a beneficiary. Information either partner adds is, by design, visible to both. Only invite a partner you trust with this information.

3. How on-device chat parsing works

When you import a chat export, the parsing happens locally in your browser, on your device. Archivow counts things like message totals, who sent how many, and date ranges, and stores only those aggregate statistics. The messages themselves never leave your device and are never uploaded to or stored by Archivow or any of our sub-processors.

4. How we use information

  • Create and secure your account and authenticate you.
  • Provide the Service — store and organize your vault, auto-file uploaded images, generate your relationship statement and final PDF packet.
  • Process payments through Stripe.
  • Send transactional and account email (sign-in, verification, receipts, security and inactivity notices).
  • Maintain security, prevent fraud and abuse, and comply with law.

We do not use your information for advertising, and we do not sell it (see §6).

5. AI processing

Two features use a third-party AI processor, Anthropic (Claude): drafting your first-person statement from the answers you provide, and classifying uploaded images so we can file them in the right section. To perform these features, the relevant answers and images are transmitted to Anthropic, which processes them to return a result and, under its commercial API terms, does not use them to train its models. You can choose not to use AI drafting and not to rely on auto-filing; your documents can still be stored and organized.

6. Who we share with — sub-processors

We do not sell your personal information and do not share it for advertising. To run the Service, we rely on a small set of vetted vendors who process data on our behalf under contracts that require them to protect it:

  • Supabase — database, authentication, encrypted file storage (US region): account data and all vault content.
  • Stripe — payment processing: payment details you enter directly with Stripe.
  • Anthropic (Claude) — AI drafting and image classification: the answers/images used by those features.
  • Resend — transactional and authentication email: your email address and message contents.
  • Cloudflare — DNS / content delivery: network/technical data.
  • DigitalOcean — the server that renders your PDF packet: vault content at render time.
  • Vercel — web hosting: network/technical data.

Government and legal requests. We do not share your information with USCIS or any government agency unless legally compelled by valid legal process (such as a lawful subpoena, court order, or warrant). If we receive such a request and are legally permitted to do so, we will notify you before disclosing your information. We may also disclose information where necessary to protect the safety, rights, or property of users, the public, or Archivow, and in connection with a merger or sale of assets (we will require the successor to honor this policy).

7. Data retention & our promises

We will never delete your vault because you didn’t pay. Ever. Your free vault is kept indefinitely. Your data is deleted only when (a) you delete it — you can export or permanently delete your vault, or close your account, at any time; or (b) after prolonged inactivity — if neither partner signs in for approximately 24 months, we may delete the case after sending advance notice(s) to the email(s) on file, giving you a chance to keep it active. On-device chat messages are never retained by us at all. Limited security logs are kept for a reasonable period and then deleted or anonymized.

8. Security

  • Encryption in transit (TLS) and encryption at rest for stored files and database content.
  • Per-couple isolation via database Row-Level Security — only the two members of a case can access that case’s data.
  • Access controls limiting administrative access, plus authentication safeguards on your account.

No method of storage is perfectly secure. Please use a strong, unique password, keep your sign-in link private, and only invite a partner you trust.

9. Your rights and choices

Wherever you live, you can access the information in your vault, export it, correct it by editing it in the app, and delete specific items, your entire vault, or your account at any time. To exercise a right you can’t complete in the app, email hello@archivow.com; we will verify your request (typically by confirming control of your account email) and respond within the time required by law, and we will not discriminate against you for exercising your rights.

10. California rights (CCPA/CPRA)

California residents have rights to know/access, delete, and correct their personal information, to opt out of sale or sharing (we do neither, so there is nothing to opt out of), to limit the use of sensitive personal information, and to non-discrimination. Archivow collects information that qualifies as sensitive personal information (including immigration-related and financial information and the contents of communications you provide). We use sensitive personal information only to provide and secure the Service you requested — we do not use or disclose it to infer characteristics about you. Contact hello@archivow.com with any request.

11. EU/UK rights (GDPR)

Where the GDPR or UK GDPR applies, you also have rights to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent. Our lawful bases are performance of a contract, legitimate interests (security and fraud prevention), consent where required, and legal obligation. You may lodge a complaint with your supervisory authority, though we’d prefer the chance to resolve your concern first.

12. Data location, children, and changes

Archivow stores vault data primarily in the United States; if you use the Service from elsewhere, your information will be transferred to and processed in the US. The Service is for adults and is not directed to children under 18, and we do not knowingly collect information from anyone under 18 (evidence about children that you upload as part of your case is protected like all other vault content). We may update this policy; when we make material changes we will update the date above and notify you where required.

13. Contact

Questions, requests, or concerns about privacy: [Archivow Operating Entity], hello@archivow.com.