Introduction
This Privacy Policy describes how WisdomLabs.AI, Inc., a Delaware corporation (“Company”), operating under the brand name Viven.ai, collects, uses, and protects information when you use the TwinCafe product and related services (“Service”) at https://stage.asksila.com.
1. Overview of Services
TwinCafe, a Viven.ai product, provides an AI-powered Digital Twin platform designed to help experts preserve and share knowledge and to help users ask questions through AI twins trained on real expertise. The Service may integrate with supported sign-in and productivity systems to provide contextual assistance and knowledge features.
2. Information We Collect
We collect information you provide directly, information generated through your use of the Service, and limited technical information from your device and browser. This may include:
- Account information: name, email address, mobile phone number (for sign-in verification and optional account alerts), profile photo, biography, title, expertise categories, and sign-in credentials or OAuth identifiers.
- User content: messages you send to twins, expert replies, training materials you upload (files, voice notes, text, imports), custom instructions, feedback, reports you submit, and other content you submit to the Service.
- Connection and activity data: expert–client relationships, conversation history, review and moderation flags, notification preferences, and in-product actions such as saves, edits, and training sessions.
- Payment and booking information: paid call prices, selected call type, booking date and time, checkout status, payment processor identifiers, receipt and refund status, dispute or chargeback information, payout support details, and related transaction records. We do not store full payment card, bank account, or UPI credential details; those details are collected directly by our payment processors.
- Public profile information: if you create an expert profile or make content discoverable, we may display information you choose to publish (for example, name, photo, title, topics, and public twin descriptions) to other users and visitors.
- Technical and usage data: IP address, device and browser type, operating system, referring URLs, pages viewed, timestamps, log data, cookies, and similar analytics or diagnostic signals.
3. How We Use Your Information
We use the information described above to operate, secure, and improve TwinCafe, including to:
- create and maintain your account and authenticate you;
- provide conversations with AI twins, expert review workflows, notifications, and related features;
- personalize your experience, including relationship-specific instructions and persona settings;
- display public expert profiles and discovery surfaces you enable;
- process paid call bookings, payment confirmations, receipts, refunds, payout support, disputes, fraud prevention, accounting, tax, and legal compliance;
- detect, prevent, and respond to abuse, fraud, spam, and security incidents;
- communicate with you about the Service, including transactional messages and, where permitted, product updates; and
- comply with law and enforce our Terms of Service.
Viven.ai does not sell your personal information, does not sell or share mobile phone numbers for third-party marketing or promotional purposes, and does not use Google user data for advertising, marketing, or profiling.
4. AI and Automated Processing
TwinCafe uses automated systems, including third-party AI and embedding providers, to retrieve relevant knowledge, generate twin responses, classify content for safety, and improve product features. Prompts, retrieved context, and outputs may be processed by these providers solely to deliver and secure the Service.
Twin responses are generated by AI and may be inaccurate, incomplete, or out of date. They are not a real-time communication from the named expert unless the expert separately chimes in or edits a response.
5. User Content, Profiles, and Conversations
You retain ownership of content you submit. You grant Company a worldwide, non-exclusive license to host, store, reproduce, process, display, and distribute your content as necessary to operate the Service, including showing your public profile, delivering conversations to connected users, and improving safety systems.
Conversations with a twin may be visible to the expert who owns that twin and, where applicable, to connected clients or reviewers. Do not submit information you do not want processed in connection with the Service.
6. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. California residents may have additional rights under the CCPA/CPRA, including the right to know what categories of information we collect and to opt out of certain sharing — though we do not sell personal information.
You can delete your account or request deletion by emailing support@twincafe.com. We will verify requests before acting on them.
7. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at support@twincafe.com and we will take appropriate steps to delete it.
8. Google User Data Access and Use
Data Accessed
When you connect your Google account to TwinCafe, the application requests access only to the Google user data you explicitly authorize via OAuth 2.0 consent. Depending on your permissions, TwinCafe may access basic profile information such as your name and email address to create and maintain your account.
TwinCafe does not access or store data outside of what is explicitly granted through Google's consent screen.
How We Use Google User Data
Google user data is used solely to provide the features and functionality of the Service:
- To authenticate you and maintain your account.
- To personalize your experience within the Service.
Viven.ai does not use Google user data for advertising, marketing, or profiling.
No Human Access
Viven.ai personnel do not have access to user content unless you explicitly grant temporary access for troubleshooting or support purposes. Such access is limited, logged, and revoked immediately after the issue is resolved.
9. Data Sharing, Transfer, and Disclosure
Viven.ai does not sell, rent, or share personal information with third parties for their marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile phone numbers are shared only with our SMS delivery provider as necessary to send messages you request or opt into. Data may otherwise be shared under the following limited conditions:
- Service Providers: With vetted subprocessors that perform infrastructure hosting or processing (for example, cloud hosting, email delivery, SMS delivery, AI inference providers, payment processors, and payout providers), under strict confidentiality and data protection agreements.
- Authorized Integrations: When you choose to connect additional platforms, data is shared only as necessary to enable those integrations.
- Legal Requirements: When required by law or valid legal process, and only to the extent necessary to comply with such obligations.
All subprocessors adhere to GDPR, CCPA, and Google API Services User Data Policy requirements where applicable.
Paid call checkout and payout features are further described in our Paid Expert Calls Terms & Conditions.
10. Data Retention and Deletion
- Personal information and account content remain in your account for as long as your account is active or as needed to provide the Service.
- Upon account termination or user request, personal information is permanently deleted within a reasonable period, subject to legal retention requirements.
- You can request data deletion anytime by emailing support@twincafe.com.
- Viven.ai does not retain personal information for advertising, analytics, or marketing purposes beyond what is described in this Policy.
11. Compliance with Google API Services User Data Policy
Viven.ai's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Under the Limited Use policy:
- Access to Google user data is used only to provide and improve the features directly visible and expected by the user within the Service.
- Google user data is not used to develop, improve, or train generalized AI or ML models outside of the individual user's account.
- Google user data is not transferred to any third party except as necessary to provide the Service or comply with legal obligations.
- Human access to Google user data is strictly prohibited unless explicitly granted by the user for support or legal reasons.
12. Security
Viven.ai applies industry-standard security practices, including:
- Encryption in transit and at rest (TLS 1.2+, AES-256).
- Role-based access controls and audit logs.
- Regular security audits and monitoring for unauthorized access.
13. Ownership and Feedback
- You retain ownership of your data and uploaded content.
- Viven.ai retains ownership of its proprietary Service and technology.
- Feedback you provide may be used to enhance the Service.
14. Cookies and Analytics
We and our service providers may use cookies, pixels, and similar technologies to keep you signed in, remember preferences, measure traffic, and understand how the Service is used. You can control cookies through your browser settings, though some features may not work correctly if cookies are disabled.
15. Term and Data Handling
This Policy remains in effect while you use the Service. If your account is terminated or you stop using the Service, your data will be handled as described in Section 10.
16. Governing Law
This Policy and any disputes arising hereunder shall be governed by the laws of the State of California, USA.
17. Contact Information
If you have questions about this Privacy Policy or wish to request deletion of your data, please contact: support@twincafe.com
18. Security, Fraud Prevention, and Abuse Prevention
We may collect and process information to detect, prevent, investigate, and respond to spam, fraud, abuse, automated signups, fake accounts, security incidents, unauthorized access, violations of our Terms of Service, and other harmful or unlawful activity.
This information may include contact information submitted through forms or account workflows, such as name, email address, phone number, and message content; technical information, such as IP address, device and browser information, operating system, referring URL, pages viewed, timestamps, log data, and approximate location derived from IP address; usage information; verification signals; CAPTCHA results; rate-limit information; and other security, fraud-prevention, or abuse-prevention signals.
19. How We Use Security Information
We may use this information to:
- detect, prevent, investigate, and respond to spam, fraud, abuse, fake accounts, automated signups, unauthorized access, security incidents, and violations of our Terms of Service;
- verify identity, eligibility, authorization, or account information;
- monitor, rate-limit, block, reject, quarantine, delete, or require additional verification for suspicious, abusive, fraudulent, duplicative, automated, or misleading submissions or accounts;
- protect the security, integrity, availability, and reliability of our Service, websites, systems, networks, and infrastructure;
- enforce our Terms of Service, trial eligibility rules, acceptable use restrictions, and other policies; and
- comply with applicable law, legal process, governmental requests, and legal obligations.
Safety and Emergency Interventions: Notwithstanding the No Human Access restrictions herein, Company reserves the right to review anonymized or redacted message logs to evaluate, test, and improve the efficacy of automated safety classifiers, crisis redirections, and content filters designed to detect self-harm or illegal activity.
20. Sharing and Retention of Security Information
We may share information with service providers and vendors that help us operate, secure, monitor, analyze, protect, and improve our Service and websites, including providers of hosting, analytics, logging, security, fraud prevention, CAPTCHA, email delivery, communications, support, and abuse-prevention services.
We may retain security, fraud-prevention, abuse-prevention, and log information for as long as reasonably necessary to prevent repeated abuse, investigate suspicious activity, maintain security, comply with law, resolve disputes, enforce agreements, and protect our rights.
21. SMS and phone numbers
This section describes how TwinCafe collects and uses mobile phone numbers in connection with U.S. A2P messaging compliance and our Terms of Service (Section 19). Our SMS program is operated by WisdomLabs.AI, Inc. under the TwinCafe brand.
What we collect
If you choose to use phone-based sign-in or optional account alerts, we collect and store your mobile phone number in E.164 format, your SMS notification preferences, the time you opted in (if applicable), and records needed to honor STOP and HELP requests.
How we use phone numbers
- Verification codes (OTP): when you enter your mobile number and request a sign-in or phone-verification code, we send a one-time passcode by SMS. These messages are transactional, security-related, and initiated by you. They are not marketing messages and do not require the separate notification opt-in described below.
- Account notifications: only if you separately opt in through Settings after account creation. These are one-way service alerts about activity on your account (for example, new questions, review requests, expert updates, or conversation changes). They are not marketing campaigns, not promotional blasts, and not two-way SMS conversations.
Consent and opt-in
Account notification SMS require your express consent through an optional checkbox in Settings at https://stage.asksila.com/settings. The checkbox is unchecked by default. SMS consent is not required to create an account, use the Service, or receive sign-in codes when you request them.
Our on-screen consent language states:
“I agree to receive account-related text messages from TwinCafe, including notifications about new questions, review requests, and conversation updates. Message frequency varies. Message & data rates may apply. Reply STOP to unsubscribe and HELP for help.”
Opt-out, HELP, and support
- Reply STOP to any account notification message to unsubscribe from notification SMS. We will send a confirmation and disable notification SMS for that number. You may still receive sign-in codes when you request them.
- Reply HELP for information about the program or contact us at support@twincafe.com.
- You may also disable notification SMS at any time in Settings or by removing your verified phone number.
Frequency, charges, and delivery
Message frequency varies depending on your account activity and notification settings. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
Retention
We retain your phone number and SMS preference records for as long as your account is active or as needed to provide the Service, honor opt-out requests, and comply with law. If you delete your account or request deletion, we delete or de-identify this information within a reasonable period, subject to legal retention requirements and fraud-prevention logs.
22. Voice and Audio Data
If you record voice notes or upload audio to train a twin, we process those files to transcribe, index, and retrieve content for the Service. Audio may be processed by our speech-to-text and AI providers under contract. Do not upload audio you do not have the right to use or that contains other people's personal information without appropriate permission.
23. International Data Transfers
We are based in the United States and may process information in the U.S. and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms.
If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing may include performance of our contract with you, legitimate interests (such as security, fraud prevention, and product improvement), compliance with law, and consent where required (for example, optional SMS notifications or certain marketing communications).
24. Service Providers and Subprocessors
We use vetted vendors to host, secure, and operate the Service. Depending on the features you use, subprocessors may process personal information on our behalf, including:
- Supabase — database, authentication, and file storage
- Vercel — application hosting and delivery
- Anthropic — AI inference for twin responses and related features
- Voyage AI — embeddings and retrieval
- Twilio — SMS delivery (and WhatsApp where enabled)
- Resend — transactional email delivery
- Google — OAuth sign-in and authorized Google integrations
- Stripe — hosted checkout, payment processing, receipts, refunds, Stripe Connect onboarding, and expert or charity payouts where available
- Razorpay — payment processing, payment links, refunds, and Route payouts where available
These providers are permitted to process information only to perform services for us under contractual confidentiality and security obligations.
25. California Notice at Collection
California residents: at or before collection, we collect the categories of personal information below for the business and commercial purposes described in this Policy.
- Identifiers (name, email, phone, account IDs, IP address) — account creation, authentication, support, security, and communications.
- Customer records (profile details, preferences) — operating the Service and personalization.
- Internet or network activity (logs, device data, usage) — security, analytics, and product improvement.
- Commercial information (paid call bookings, transaction records, payment and refund status, and related purchase history) — booking fulfillment, payment processing, fraud prevention, accounting, tax, and legal compliance.
- Audio and user-generated content — twin training, conversations, moderation, and safety.
- Inferences (limited personalization or safety classifications) — operating and securing the Service.
We do not sell personal information. We do not share mobile contact information for cross-context behavioral advertising. See Section 6 for your California privacy rights.
26. Additional U.S. State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have rights to access, delete, correct, or obtain a copy of personal information, and to opt out of certain processing such as targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal information or use it for cross-context behavioral advertising. To exercise rights, email support@twincafe.com. You may appeal denied requests by replying to our response.
27. LinkedIn Pages Data Portability
If you connect a LinkedIn Company Page to TwinCafeto import that Page's content into your Digital Twin, the terms below apply.
Authorization
We only import LinkedIn Page data at the direction of, and with the explicit consent of, an authorized administrator of that Page. We do not access or import Page data without this authorization.
Use of imported data
Content imported from a LinkedIn Page is used exclusively to train and power that individual user's own AI twin within TwinCafe. We do not use this data to train any shared, cross-customer, or foundation model, and we do not use it to facilitate bias or discriminatory practices based on any sensitive or legally protected category.
No re-identification
We do not attempt to re-identify any data obtained from LinkedIn that has been de-identified or anonymized.
Retention
Data imported via LinkedIn's Portability API is retained for no longer than one (1) year from the date of import, or until your account is closed or you request deletion, whichever comes first. Upon request or account closure, we will delete this data immediately.
No third-party sharing
We do not distribute, sublicense, sell, or otherwise provide third parties with access to data obtained through LinkedIn's Portability API, and we do not combine this data with data obtained through any LinkedIn Community Management API.
No endorsement
Our integration with LinkedIn is not endorsed by, certified by, or affiliated with LinkedIn Corporation. "LinkedIn" is a trademark of LinkedIn Corporation.
Your controls
You may disconnect your LinkedIn Page at any time in your TwinCafe account settings, or request deletion of imported LinkedIn data by emailing support@twincafe.com.
28. Privacy and Data Protection for Users in India
Applicability
This section provides additional information about how TwinCafe handles personal information in connection with the use of the Service by individuals in India.
TwinCafe is operated by WisdomLabs.AI, Inc., a Delaware corporation based in the United States, under the Viven.ai brand.
This section supplements the other provisions of this Privacy Policy and should be read together with them.
The collection, use, processing, storage, and sharing of personal information are described in this Privacy Policy. Additional requirements may apply under Indian privacy and data protection laws, including the Digital Personal Data Protection Act, 2023, and associated rules, as their relevant provisions come into force.
Nothing in this section is intended to limit any rights available to individuals under applicable law.
Personal Information We Collect
When you access or use TwinCafe from India, we may collect and process the categories of information described in Section 2 of this Privacy Policy, depending on the features you use.
This may include:
- Account and profile information: Your name, email address, mobile phone number, profile photograph, biography, professional title, expertise categories, and sign-in credentials or OAuth identifiers.
- User content and Digital Twin training materials: Questions and messages you send to twins, expert replies, uploaded files, voice notes, text, imported content, custom instructions, feedback, reports, and other information you submit to the Service.
- Conversation and activity information: Conversation history, expert-client relationships, review and moderation flags, notification preferences, and in-product actions such as saves, edits, and training sessions.
- Payment and booking information: Paid call prices, selected call type, booking date and time, checkout status, payment processor identifiers, receipt and refund status, disputes, chargebacks, payout support details, and related transaction records.
- Technical and usage information: IP address, device and browser type, operating system, referring URLs, pages viewed, timestamps, log data, cookies, and similar analytics or diagnostic information.
If you create an expert profile or choose to make content discoverable, information such as your name, photograph, professional title, expertise, and public twin descriptions may be displayed to other users and visitors.
We do not store full payment card, bank account, or UPI credential details. Such information is collected directly by our payment processors, as described in Section 2.
How We Use Your Information
We use personal information for the purposes described in Section 3 of this Privacy Policy.
These purposes include creating and maintaining accounts, authenticating users, operating Digital Twins, providing AI-generated responses, supporting conversations between users and experts, and enabling expert review workflows.
We may also use information to personalize the Service, provide notifications, display public expert profiles, process paid call bookings and related transactions, provide customer support, improve product features, detect and prevent fraud or abuse, maintain security, and comply with applicable legal requirements.
The information processed may vary depending on whether you create a Digital Twin, interact with another person's twin, upload training materials, connect an authorized integration, or use other available features.
Digital Twins, User Content, and Conversations
TwinCafe allows users to create AI-powered Digital Twins using knowledge, documents, voice notes, text, instructions, and other materials they choose to provide.
Information submitted to create or train a Digital Twin may be stored, processed, indexed, and retrieved to support the functionality of that twin and generate responses to user questions.
When you interact with a Digital Twin, your questions, messages, and relevant conversation history may be visible to the expert who owns that twin and, where applicable, to connected clients or reviewers.
The expert associated with a Digital Twin may separately participate in conversations, review information, or provide additional responses through the Service.
Information you choose to publish through a public profile or other discoverable features may be visible to other users and visitors.
You retain ownership of the content you submit, subject to the license granted to the Company under Section 5 of this Privacy Policy.
You should avoid submitting confidential information or personal information that you do not want processed or made accessible in connection with the Service as described in this Privacy Policy.
If you upload or submit information relating to other individuals, you should ensure that you have the necessary rights or permissions to provide that information.
Artificial Intelligence, Voice Data, and Automated Processing
TwinCafe uses automated systems, including third-party artificial intelligence and embedding providers, to retrieve relevant knowledge, generate twin responses, classify content for safety, and improve product features.
Prompts, retrieved context, and generated outputs may be processed by these providers to deliver and secure the Service, as described in Section 4.
If you record voice notes or upload audio to train a twin, those files may be processed to transcribe, index, and retrieve content. Audio may also be processed by speech-to-text and AI providers under contract, as described in Section 22.
AI-generated responses may be inaccurate, incomplete, or out of date. They are not real-time communications from the named expert unless that expert separately participates in or edits a response.
The handling of information obtained through authorized Google integrations and LinkedIn Pages Data Portability is subject to the additional provisions described in Sections 8, 11, and 27 of this Privacy Policy.
Sharing of Personal Information and Service Providers
We may share personal information with service providers that support the operation of TwinCafe, as described in Sections 9 and 24 of this Privacy Policy.
Depending on the features you use, these providers may support:
- Application hosting, databases, authentication, and file storage.
- AI inference, embeddings, and information retrieval.
- SMS notifications, transactional email, and other communications.
- Payment processing, checkout, refunds, and payouts.
- Security, fraud prevention, technical support, and related Service operations.
Information may also be shared through integrations that you choose to authorize, or when required by applicable law or valid legal process.
We do not sell or rent personal information or share it with third parties for their marketing or promotional purposes.
We do not share mobile phone numbers with third parties or affiliates for marketing or promotional purposes, as described in Sections 3, 9, and 21.
User Choices and Privacy Requests
You may choose whether to provide certain information or use optional features, such as uploading training materials, connecting supported third-party services, creating a public expert profile, or enabling account notifications.
Phone-based sign-in, optional account notifications, and the associated SMS consent and opt-out processes are described in Section 21 of this Privacy Policy.
Depending on applicable law, individuals in India may have rights concerning their personal information, including rights relating to access, correction, updating, and deletion.
You may request deletion of your account or personal information by contacting us at support@twincafe.com, as described in Sections 6 and 10.
We will verify requests before acting on them.
Where applicable law provides additional rights relating to personal information, those rights may be exercised in accordance with the relevant legal requirements.
Data Retention, Deletion, and Security
Personal information and account content are retained for as long as your account remains active or as needed to provide the Service, as described in Section 10.
Upon account termination or a user request, personal information is deleted within a reasonable period, subject to applicable legal retention requirements.
Certain security, fraud-prevention, abuse-prevention, and log information may be retained as described in Sections 18 through 20.
Information obtained through specific third-party integrations may also be subject to additional retention and deletion provisions described elsewhere in this Privacy Policy, including Section 27 for LinkedIn Pages Data Portability.
We use the security measures described in Section 12, including encryption in transit and at rest, role-based access controls, audit logs, and regular security monitoring.
Access to user content by Company personnel is subject to the provisions described in Section 8, including the restrictions and conditions for temporary access granted for troubleshooting or support purposes, and the safety-related provisions described in Section 19.
International Processing and Data Transfers
TwinCafe is operated from the United States and may process personal information in the United States and other countries where we or our service providers operate.
Personal information submitted by users in India may therefore be stored or processed outside India, depending on the features used and the service providers involved.
Such processing may include infrastructure hosting, authentication, AI inference, embeddings, communications, payment processing, and other operations described in this Privacy Policy.
Additional information about international data transfers and our service providers is provided in Sections 9, 23, and 24.
International processing and transfers remain subject to any restrictions or other requirements imposed by applicable law.
Children's Privacy
As described in Section 7 of this Privacy Policy, TwinCafe is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
If you believe that a child under 13 has provided personal information to TwinCafe, you may contact us at support@twincafe.com, and we will take appropriate steps to delete that information.
Indian privacy and data protection laws may establish additional requirements concerning the processing of personal information relating to individuals under 18.
For individuals aged 13 to 17, additional requirements under applicable Indian law may affect whether and how the Service may be used.
This section does not alter the general age-related provisions described in Section 7. Any additional requirements under applicable Indian law will be considered in accordance with the relevant legal provisions as they come into force.
Privacy Questions and Contact Information
If you access or use TwinCafe from India and have questions about this Privacy Policy, the handling of your personal information, or the privacy-related features of the Service, you may contact:
WisdomLabs.AI, Inc. (TwinCafe)
Email: support@twincafe.com
You may also use this contact address to submit privacy-related requests, report concerns about personal information, or request account deletion.
Privacy-related requests and concerns will be reviewed in accordance with this Privacy Policy and applicable legal requirements.
Nothing in this section restricts any rights or remedies that may be available to individuals under applicable Indian law.