Privacy & Policies
Version: 2026-10-27.3
Effective date: 27 October 2026
Last updated: 27 October 2026
Find privacy, billing and connected-service policies in one place. Terms & Conditions remain a separate document.
Privacy Policy
Version: 2026-10-27.3 · Effective date: 27 October 2026 · Last updated: 27 October 2026
About this policy
AIPA PTY LTD operates AIPA. This policy explains the information processed to provide the website, AI assistant, account, billing and connected-app features. Only features you use and permissions you grant determine the relevant data flow.
Information processed
- Account email, display name, authentication and account preferences.
- Prompts, conversations, uploaded documents and images, generated content and Library notes.
- Voice recordings submitted for transcription and transcripts you choose to send.
- Terms/policy acceptance records and checkbox interactions associated with successful sign-in or sign-up.
- Usage credits and counts, technical diagnostics, device/browser information and approximate city or country supplied by hosting infrastructure.
- Subscription status and payment references or billing metadata, rather than full card numbers or CVV codes.
- Connected account identity, granted permissions, encrypted OAuth credentials, connection status and relevant data retrieved from authorised services.
- Feedback and information you provide in support, advertising or enterprise enquiries.
Connected apps and permissions
Google apps and Microsoft work/school apps use OAuth. You choose the read permissions; organisation administrators may restrict or require approval for managed accounts. AIPA does not receive your provider password. Required access and refresh credentials are stored securely server-side.
The active capabilities are Google Drive, Gmail, Google Calendar, OneDrive, Outlook Mail and Outlook Calendar, subject to plan and granted scopes. Microsoft access is a read-only beta for organisational accounts; personal Microsoft accounts are not supported.
Relevant authorised source content can be retrieved on request and included in the AI response context. Answers and source references may be saved in chat history. Explicitly imported excerpts become private Library notes. These reads are bounded samples, not complete mailbox or drive synchronisation.
AIPA uses Google-connected data only to provide the user-facing features you request. AIPA does not sell that data or use it for advertising or training its general-purpose models. Google API Services User Data Policy requirements, including Limited Use, apply to use and transfer of that data.
Integration audit records contain action types, outcomes and usage counts, not email bodies, file contents, OAuth secrets or refresh tokens. Disconnecting clears AIPA’s stored connection credentials; provider-side grant removal and saved-content deletion are separate controls.
Service providers and international processing
AIPA uses providers for AI processing, hosting, storage/authentication, payment handling, analytics and diagnostics. Current services include OpenAI, DeepSeek, Supabase, Vercel, Safepay, Google Analytics, PostHog and Sentry. Transactional email delivery may use an additional configured email service. Google and Microsoft connected services also apply their own account/data rules.
Data may be processed outside your country depending on the provider and deployment. We do not promise Pakistan-only hosting, a particular data-residency location or a compliance certification. Specific Idara arrangements must be agreed separately.
Retention, deletion and your choices
Saved conversations, generated files, Library notes and source references remain available until you delete them through available controls or retention rules apply. Disconnecting an app does not delete already saved content or necessarily revoke the provider’s consent grant.
Retention can also be needed for subscriptions, security, legal obligations, disputes and backups. We do not promise immediate erasure from every backup or a fixed retention location/duration without an agreed schedule. Contact us for account/privacy assistance; applicable legal rights remain available.
You can manage interface settings, saved content, subscription controls and app connections in AIPA. Provider account settings and organisation administrators control additional permissions.
Organisation and Idara data
Organisation-wide knowledge and administrator-managed connections are not enabled in the standard app. Any future Idara deployment may require separate enterprise terms, a data-processing agreement, approved retention/location settings and administrator controls before organisational data is processed.
Contact and support enquiries
We store the contact details, organisation, subject and message you submit, together with an enquiry reference, category, source page, timestamp and delivery status. If signed in, your verified user ID, account email and current plan may be included for context. We route the enquiry to the appropriate AIPA team and may send an acknowledgement through our configured email provider (currently Resend). Do not include unrelated private chat content, passwords or full payment-card details.
For technical support contact support@aipa.pk; for billing or refunds contact billing@aipa.pk; for legal, privacy, security, registration or account ownership matters contact admin@aipa.pk. Sales and Idara enquiries go to sales@aipa.pk.
Subscriptions, Cancellations & Refunds
Version: 2026-10-27.3 · Effective date: 27 October 2026 · Last updated: 27 October 2026
About this policy
AIPA PTY LTD operates AIPA. This section covers billing, cancellations and refunds for subscriptions and digital services purchased through aipa.pk.
Read this section together with our Terms & Conditions and the pricing and service details shown when you purchase.
Cancelling a subscription
You can request cancellation from the subscription section of your Profile, or email our billing team using the address below. Submit your request before your next renewal and keep a copy of the request.
A request acknowledgement confirms receipt; it does not by itself confirm that recurring payments have stopped. Check your account status and the cancellation confirmation for the effective date and any remaining access. Signing out or simply stopping use of AIPA does not cancel a subscription.
If a renewal is charged after you requested cancellation, contact us with the cancellation request and transaction details so we can investigate and correct any charge that should not have occurred.
Renewal, failed payments and plan changes
Check the price, billing period and renewal information at checkout and in Profile before purchasing. Safepay processes subscription payments; AIPA retains subscription status and payment references, not full card numbers or CVV codes.
A failed payment is not confirmation of cancellation. Check your subscription status and contact billing support if a payment fails or your access differs from the status shown.
Upgrades use the available checkout flow. A downgrade records a request for the current billing period end, where known; it does not immediately change your plan or confirm provider-side cancellation. Check the confirmation and your account for the effective change.
Any remaining paid access, refund or credit depends on the confirmed cancellation, service delivery, purchase terms and applicable law. No fixed refund period or automatic prorated refund is promised by this section.
Digital services and returns
AIPA provides digital subscriptions, AI tools and advertising services. We do not ship physical goods, so physical returns and exchanges do not apply. Cancellation and refund requests are handled under this policy.
Because AIPA provides digital subscription services rather than physical goods, product returns are not applicable.
When a refund may be available
Contact us promptly if you believe you were charged twice, charged incorrectly, charged without authorisation, or paid for a service that was not provided as agreed. We assess requests using payment records, service delivery, usage and applicable consumer law.
A change of mind, unused allowance or cancellation does not automatically create a right to a refund or a prorated credit, except where applicable law requires otherwise. This does not limit remedies for defective or misdescribed services or any other mandatory consumer right.
Advertising and separately purchased services
For advertising or other separately purchased services, we consider the work or delivery already provided and any undelivered portion when reviewing a cancellation or refund request. Advertising results such as sales, enquiries or clicks are not guaranteed unless expressly agreed in writing.
How to request a refund
Email our billing team with your account email, plan or service, payment date, amount, transaction or invoice reference and the reason for your request. We may ask for further information needed to verify the payment and will communicate the outcome by email.
Do not send passwords, full card numbers, CVV codes or API keys.
Approved refunds
Where a refund is approved, it is normally returned to the original payment method through the payment provider. The time before it appears in your account depends on the provider and your bank. We will tell you if a different lawful payment method is needed.
Your statutory rights
Nothing in this policy excludes, restricts or replaces any consumer guarantee, refund entitlement or other remedy that cannot lawfully be excluded. Where applicable law gives you stronger rights, those rights apply.
Billing and policy enquiries
Contact billing@aipa.pk for cancellation, payment or refund enquiries. Do not include full payment-card details.
Data & AI Usage
Version: 2026-10-27.3 · Effective date: 27 October 2026 · Last updated: 27 October 2026
Purposes and AI providers
We process information to answer requests, save and share content when you choose, provide subscriptions and integrations, support users, protect the service and understand performance.
Prompts, relevant conversation context, uploads and authorised connected-source excerpts may be processed by external AI providers as needed for your requested feature. Model routing and fallback can use different providers. Their processing terms and our service configuration apply; provider policies are not necessarily identical.
AIPA-operated model infrastructure is in development. It is not currently used for production chat; any activation will require a separate release and review of the associated data handling.
Training and voluntary contribution
AIPA does not automatically use customer conversations, uploads or connected-app data to train AIPA models.
No voluntary customer training-data contribution programme is active. Introducing one would require explicit product/legal approval, a separately explained opt-in, review and de-identification where appropriate, and withdrawal/deletion mechanisms where legally applicable. Agreeing to ordinary service terms or connecting an app is not training opt-in.
Images, files and generated content
Image generation and file tools can process your prompts, uploads and relevant chat context through the provider used for that feature. Review generated content for accuracy and third-party rights before sharing it. A saved image, document or shared link remains subject to the available deletion and sharing controls.
Connected Apps / Third-Party Services
Version: 2026-10-27.2 · Effective date: 27 October 2026 · Last updated: 27 October 2026
Connect once, control what AIPA can read
Use Integrations to connect or manage an account, review permissions and status, or disconnect. AIPA uses the connected account’s access rights; a subscription does not grant access to data that account cannot read.
Available read-only capabilities
- Google Drive: search files and read supported text or Google-document exports. Unsupported binary files return clearly labelled file details.
- Gmail: find and read messages when requested. AIPA can draft text in chat but cannot send it or change mailbox state.
- Google Calendar: read events from the primary calendar and help prepare for meetings.
- OneDrive beta: search work/school files and read supported text; other formats return file details.
- Outlook beta: read mail and the default calendar using separate granted permissions. An Exchange Online mailbox may be required.
Plans and unfinished apps
Free includes Google Drive and Google Calendar read-only. Bunyad, Urooj and Humrah add Gmail and OneDrive basic reads. Tijarat and Idara also allow Outlook Mail and Calendar. Actual access requires a configured provider connection and your permission.
Microsoft Teams, SharePoint, WhatsApp Business, Facebook/Instagram, Shopify, WooCommerce, DigiKhata, JazzCash and Easypaisa are Coming soon. They do not currently retrieve data or perform actions. Organisation-wide knowledge, SSO and governance capabilities require future implementation and a separately agreed Idara deployment.
What is saved and shared
Authorised source excerpts can be processed by the AI provider answering your request. Responses and source references may be saved in chat history; explicit imports create Library notes. Provider citations are returned links or references, never invented links.
Connection metadata includes the provider/account, granted scopes, status, connection date and last successful use. Tokens are not exposed in the browser. Basic usage and audit records do not include source bodies.
Disconnect and remove access
Disconnect clears AIPA’s stored credentials. Delete saved chats, files or imported notes separately if you no longer want them retained. Google revocation is attempted where supported. For Microsoft, remove AIPA’s consent grant through My Apps or ask your organisation administrator; AIPA does not revoke all your Microsoft sessions.
Your provider’s rules still apply
Provider terms, API availability, tenant policies, revoked access and outages can affect a connection. Google API user-data and Microsoft privacy rules apply; this is not a claim of certification or guaranteed availability.
Security
Version: 2026-10-27.3 · Effective date: 27 October 2026 · Last updated: 27 October 2026
Security, changes and contact
We use safeguards designed to protect information but cannot guarantee absolute security. Avoid submitting unnecessary sensitive information. Do not send passwords, API keys or payment-card details to support.
Policy versions and dates are shown on each document. Material changes to data use or training contribution require an appropriate review and notice/consent process. For policy, privacy or security enquiries, contact admin@aipa.pk. For technical help, contact support@aipa.pk.
Cookies & Analytics
Version: 2026-10-27.3 · Effective date: 27 October 2026 · Last updated: 27 October 2026
Analytics and diagnostics
We use Google Analytics and, when configured, PostHog for general page visits and feature use. Page-view events omit URL query parameters, conversation IDs and shared-response tokens; we do not add chat content, file contents, form values, emails or card details to these events. PostHog autocapture and session recording are disabled. Browser analytics are limited to the production domain and respect Do Not Track. Configured Sentry error filtering removes request bodies, headers, user details, breadcrumbs and raw error messages. These controls are not a claim that every possible diagnostic is anonymous.
Cookies and interface preferences
Authentication cookies help keep you signed in. Stored interface preferences remember choices such as language and theme. Configured analytics may use browser storage or identifiers to measure site and feature use. Browser controls can limit cookies or storage, but blocking required authentication storage can affect sign-in. Analytics respect Do Not Track; this is not a separate cookie-consent management tool.