Privacy Policy

What we collect

Account information you give us (name, email, organization), the documents you upload for processing, and operational records of how the service is used (access logs with IP addresses, timestamps, and the actions taken). If you sign in with Google, we receive your name, email address, and Google account identifier, nothing else.

What we do with it

We process your documents to analyze and remediate them for accessibility. That is the entire purpose. We do not sell your data, we do not advertise, and we do not use your documents to train machine learning models.

When AI-assisted alt text is enabled for your workspace, images and nearby text from your documents are sent to our model provider (Anthropic) to generate descriptions. Anthropic does not train on this data under our API terms.

Where it lives and how long

Documents and metadata are stored on Cloudflare infrastructure (R2 object storage and D1 databases), encrypted in transit and at rest. Retention is enforced in code: your workspace has a retention window (default 90 days, configurable from 1 day to 10 years), and documents past that window are automatically and permanently deleted, including all stored versions. You can delete any document immediately at any time.

Access and audit

Every access to customer material inside Vivian is written to an append-only audit log (who, what, when, from where). Workspace administrators can review this log at any time under Settings.

Cookies

One session cookie, HttpOnly and same-site, used only to keep you signed in. No tracking pixels, no third-party analytics cookies.

Your rights

You can export or delete your documents at any time from the dashboard. To delete your account and workspace entirely, or to exercise rights under applicable privacy law (such as GDPR or CCPA access and deletion requests), email us and we will act within 30 days.

Contact

Privacy questions: karthik [dot] subramanian [at] berkeley [dot] edu