AICO PRIVACY POLICY

Effective Date: 2026
This Privacy Policy explains how RENVAR INC, Toronto, Ontario, Canada, collects, uses, discloses, stores, and protects personal information in connection with AICO.
1. Information We Collect
We may collect the following categories of information.
Information you provide directly
  • name, username, display name, profile details;
  • email address, phone number, login details, account information;
  • profile photo, biography, preferences, settings;
  • messages, posts, uploads, prompts, support requests, and other content you choose to submit;
  • information you provide when using AI-assisted features.
Information collected automatically
  • device identifiers;
  • IP address;
  • app version, browser type, crash logs, diagnostics, and usage logs;
  • language, approximate region, and time zone;
  • feature interactions, session information, and engagement events.
Information from third parties
  • sign-in providers;
  • app stores and platform operators;
  • analytics, anti-fraud, moderation, communications, and identity-related service providers;
  • other users, where they interact with you through the Service.
2. How We Use Information
We may use personal information to:
  • create and manage user accounts;
  • provide messaging, networking, content sharing, and AI-assisted functionality;
  • authenticate users and protect accounts;
  • personalize product features and recommendations;
  • detect, investigate, and prevent fraud, abuse, spam, and policy violations;
  • respond to support requests and user feedback;
  • improve, maintain, troubleshoot, and develop the Service;
  • comply with legal obligations;
  • send service-related notices and, where permitted, marketing communications.
3. AI Processing
Some AICO features may use AI systems or third-party AI providers to process prompts, messages, content, or metadata in order to generate outputs, support safety reviews, improve functionality, or provide requested features.
AI outputs may be inaccurate or incomplete. Users should review outputs before relying on them and should avoid sharing highly sensitive information unless clearly necessary.
4. Legal Bases
Where applicable, we process personal information on one or more of the following bases:
  • consent;
  • performance of a contract;
  • legitimate interests;
  • compliance with legal obligations;
  • other lawful grounds recognized by applicable law.
5. How We Disclose Information
We may disclose personal information to:
  • hosting, cloud, infrastructure, and storage providers;
  • authentication, communications, analytics, security, and moderation vendors;
  • AI service providers supporting product functionality;
  • professional advisors, auditors, insurers, and transaction counterparties;
  • regulators, courts, law enforcement, or other authorities when required by law or where legally justified.
We do not sell personal information in the ordinary sense unless expressly stated otherwise.
6. International Data Transfers
Personal information may be processed in Canada, the United States, the European Union, and other jurisdictions where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.
7. Data Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security, preventing fraud and abuse, complying with law, resolving disputes, and enforcing our terms.
Our standard operational retention approach includes the following:
  • account and profile data: while the account is active and generally up to 30 days after a valid deletion request;
  • private messages and user content: generally 30 to 60 days after a valid deletion request where deletion or de-identification is feasible, with limited longer retention for safety, legal, or dispute-related needs;
  • security logs: generally 12 months;
  • support records, deletion requests, and appeals: generally 24 months;
  • moderation and abuse records: generally 24 months, and up to 36 months for severe or repeat-abuse matters;
  • marketing consent records: generally 3 years after the last relevant activity or withdrawal of consent;
  • user-level analytics data: generally 12 months, after which we may aggregate, anonymize, or de-identify it where feasible;
  • AI prompt and response logs: generally 30 days, and up to 90 days where needed for debugging, safety, or quality purposes;
  • billing and accounting records: generally 7 years;
  • backups: rolling cycles of up to 90 days.
If law, fraud prevention, security, dispute handling, or regulatory obligations require longer retention, we may retain relevant information for that purpose.
8. Account Deletion
Users may request account deletion through the in-app settings and, where provided, through a web-based request method.
Our standard target is to process account deletion requests within 30 days, although some residual data may remain temporarily in backup systems for up to 90 days or be retained longer where legally required or justified for fraud prevention, safety, dispute resolution, or compliance.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, or disclosure. No method of transmission or storage is completely secure.
10. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or request portability of your personal information, or to withdraw consent where processing is based on consent.
To make a privacy request, contact: aico.app1@gmail.com
11. Age Restrictions
AICO is intended only for users who are 16 years of age or older. We do not knowingly allow users under 16 to create accounts or use the Service. If we learn that we have collected personal information from a user under 16 in violation of this Policy or applicable law, we may suspend or terminate the account and delete the relevant information, subject to legal and safety obligations.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service, by email, or by other reasonable means.