Privacy policy

Alvar runs at alvar.cc and is operated by T4S Labs LLC, Wyoming, United States. You ask a product question and approve a priced research plan. Alvar then reads public sources and answers with evidence.

This policy says what Alvar stores about you, who processes it, and what you can ask us to do with it.

• Your account email.
• What you create: projects, questions, Product Plans, answers, the evidence excerpts behind them, and History.
• Payment records, when a payment is made. Card details stay with the payment provider.
• If you request an invitation: your email, your question and what the question is about.

A question you start typing on the home page is kept in your own browser until you send it. A cookie keeps you signed in. On the public pages, outside the EEA, the UK and Switzerland, Google Analytics sets its own cookie to tell repeat visits apart; blocking it in your browser changes nothing on the site.

• To run the research you approve and write the answer.
• To keep your projects, Product Plans and History.
• To sign you in and to reply to you by email.
• To take a payment and keep its record.
• To comply with the law.

We do not sell personal information.

• Supabase: the database and sign-in.
• Vercel: hosting, and the store that holds invitation requests.
• OpenRouter: routes model calls to one pinned provider, BaseTen. The routing excludes providers that train on prompts. The model reads your question, your Product Plan and the collected evidence to write the answer. Your project content is not used to train models.
• Research providers: Apify, DataForSEO, Exa, xAI (X search), Google (YouTube Data API), Hacker News search (Algolia), Stack Exchange, GitHub and the Internet Archive. They receive only the search phrases Alvar derives from your question, never your Product Plan.
• Resend: email.
• PostHog: product analytics, which pages are opened and which buttons are used. Session recording is off.
• Google Analytics and Vercel Web Analytics: visits to the public pages, such as which page was opened, the site that sent the visitor, the country and the device type. Neither runs inside the workspace or on the sign-in pages, and neither receives your questions.
• Payment provider: the reseller and Merchant of Record named at checkout. It takes the payment and keeps the card details; we receive only the order record.

Alvar reads only public pages and posts. It reads nothing behind a login.

We share data with law enforcement only when the law requires it.

Data is encrypted in transit with TLS. No method of transmission or storage is fully secure, so we cannot promise absolute security.

We keep your email and payment records for as long as we need them to provide Alvar and to meet legal obligations. Transaction records are kept for 7 years, as the law requires.

You can ask us to delete your data at any time by writing to hello@alvar.cc.

• To see the personal data we hold about you.
• To have inaccurate data corrected.
• To have your data deleted.
• To receive your data in a machine-readable format.
• To stop any email you did not ask for.

To use any of these rights, write to hello@alvar.cc. We answer within 30 days.

If you are in the EU or the UK, our legal bases for processing are:

• Contract: to run the research you approve and keep your account.
• Consent: to reply when you request an invitation.
• Legitimate interests: to improve Alvar and prevent abuse.

You have every right the GDPR gives you, including the right to complain to your local supervisory authority.

We do not sell personal information. California residents can ask what data we collect, ask us to delete it, and opt out of any future sale. Write to hello@alvar.cc.

Alvar is not meant for anyone under 13. We do not knowingly collect data from children. If we learn that we have, we delete it.

When this policy changes in a way that matters, we tell you by email and change the date at the top.