Privacy Policy
1. Who we are
alva (meetalva.com) operates the professional matchmaking platform at meetalva.com. Contact: hello@meetalva.com.
2. What data we collect
Data you provide directly:
- Phone number (your primary identifier on our platform)
- Email address
- Full name
- LinkedIn profile URL
- Business information you share in conversations (what you offer, what you are looking for, your industry sectors, geographic focus)
Data we collect from third-party sources:
- Public profile information (job title, company, summary, profile photo)
- Publicly available business information from web sources
Data we generate about you:
- AI-extracted business profile summary
- Multi-layer semantic analysis of your professional profile, including structured representations of your capabilities, demands, industry signals, inferred professional context, and audience relevance. This analysis may incidentally reflect affiliations or interests that are sensitive in nature, though we do not intentionally collect sensitive personal data
- Mathematical representations (embeddings) of your profile used for matching
- Match scores between you and other participants
- Conversation history with our assistant
3. How we use your data
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Provide matchmaking and community services | Profile data, business info, phone number | Contract performance (Art. 6(1)(b)) |
| Match you with relevant professionals | Business profiles, embeddings, preferences | Contract performance (Art. 6(1)(b)) |
| Communicate via messaging channels, email, and phone | Phone number, email, message content | Contract performance (Art. 6(1)(b)) |
| Enrich your profile from public sources | LinkedIn URL, name, company | Legitimate interest (Art. 6(1)(f)) |
| AI-powered conversation and profile extraction | Conversation content, profile data | Contract performance (Art. 6(1)(b)) |
| Multi-layer semantic profiling for matching | Business profile, conversation data | Contract performance (Art. 6(1)(b)) |
| Improve our matching algorithms | Anonymised and aggregated usage patterns | Legitimate interest (Art. 6(1)(f)) |
| Website analytics | Browsing data, IP address | Consent (Art. 6(1)(a)) |
Note for Thai residents: Where you are a Thai national or your data is processed in Thailand, we rely on your explicit consent for profile enrichment and algorithm improvement rather than legitimate interest. You will be asked to provide this consent at registration.
Note for EU residents: Where GDPR applies, you have additional rights as set out in Section 9.
4. Automated profiling and matching
Our platform uses automated processing to match you with other participants. This includes:
- AI-powered profile extraction: We use large language models to analyse the business information you share and extract structured data including your capabilities, needs, industry, and geographic focus.
- Multi-layer semantic analysis: We perform a deeper analysis of your professional profile to identify signals, inferred professional context, and audience relevance. This is used solely to improve match quality.
- Semantic matching: We create mathematical representations (embeddings) of your business profile and compare them with other participants to find the most relevant connections.
- Match scoring: We calculate compatibility scores based on capabilities, needs, role, company, geography, and other relevant signals.
You have the right to object to this automated profiling (see Section 9). However, since profiling is core to providing our matchmaking service, objecting may limit our ability to serve you.
5. Who we share your data with
Service providers (data processors):
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Anthropic | AI-powered conversation and profile extraction | Conversation history, business profile data | United States |
| OpenAI | Profile analysis and semantic embeddings | Business profile text, LinkedIn data | United States |
| WhatsApp (Meta) and Line | Message delivery | Phone number, message content | United States / EU |
| Resend | Email delivery | Email address, name, event information | United States |
| Cloud hosting provider | Platform infrastructure | All platform data (encrypted at rest) | United States |
We may add AI or infrastructure providers as the platform grows. We will update this policy if providers materially change. A full list of current sub-processors is available on request at hello@meetalva.com.
Website analytics: We use third-party analytics tools on our website. A full list of analytics providers is available on request at hello@meetalva.com.
Event and community organisers: Your name, business profile summary, and contact details may be shared with organisers of events or communities you participate in. Organisers do not receive your full conversation history or individual match decisions.
Other participants: Your name, business summary, and profile photo may be visible to other participants at the same event or within the same community. Contact details are only shared after mutual opt-in.
We do not sell your personal data to third parties.
6. Data ownership
Data you provide directly (name, email, phone, company) remains yours. Organisers who import your contact data may export it. AI-generated content (profile summaries, embeddings, semantic analysis, match scores) is owned by alva. Organisers receive readable summaries but not the underlying intelligence layer.
7. Cross-event and community profile reuse
Your profile persists across events and communities until you explicitly request deletion. When you join a new alva-supported event or community, we will ask whether you want to reuse your existing profile. You can update your profile at any time by messaging our assistant.
8. How long we keep your data
| Data type | Retention period |
|---|---|
| Profile and matching data | Retained until explicit deletion request, then deleted within a reasonable timeframe |
| Conversation records | 3 years |
| Marketing data | Until opt-out, then deleted within 30 days |
| AI processing logs | 90 days |
| Error and diagnostic logs | 90 days |
| Website analytics data | As per each provider's retention policy |
After these periods, data is either deleted or irreversibly anonymised.
9. Your rights
You have the right to:
- Access - Request a copy of all personal data we hold about you
- Rectification - Ask us to correct inaccurate data
- Erasure (“right to be forgotten”) - Ask us to delete your personal data across all our systems, including your profile, messages, matches, embeddings, and enrichment data
- Restriction - Ask us to temporarily stop processing your data while we resolve a concern
- Data portability - Receive your data in a structured, machine-readable format (JSON)
- Object to profiling - Object to our automated matching and profiling. Note that this may prevent us from providing the matchmaking service
- Withdraw consent - Where processing is based on consent, you can withdraw at any time
- Opt out of communications- Reply “stop” on WhatsApp or Line at any time to opt out of all messages
To exercise any of these rights, contact us at hello@meetalva.com. We will respond within 30 days.
10. Consent withdrawal
You may withdraw your consent at any time:
- Marketing communications:Use the unsubscribe link in any email or reply “stop” to any WhatsApp or Line message
- Profile matching: Contact hello@meetalva.com to remove your profile from the matching pool
- All processing: Request full account deletion via hello@meetalva.com. Your data will be deleted within a reasonable timeframe following your request
Withdrawal of consent does not affect the lawfulness of any processing that took place before withdrawal.
11. Data breach notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in high risk to you personally, we will notify you directly without undue delay, including the nature of the breach, its likely consequences, and measures we are taking to address it.
12. International transfers
Some of our service providers are based in the United States. We protect these transfers using:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with each provider
- Additional technical safeguards (encryption in transit and at rest)
13. Children
Our Service is intended for business professionals aged 18 and over. We do not knowingly collect data from minors.
14. Changes to this policy
We may update this Privacy Policy from time to time. Any material changes will be communicated via email or WhatsApp at least 14 days before they take effect. For changes affecting data processing under GDPR, we may require renewed consent where legally required. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
15. Contact
For any privacy-related questions, to exercise your rights, or to withdraw consent, please contact us at hello@meetalva.com. We aim to respond to all requests within 30 days.