Ravi Privacy Policy

Effective date: October 2, 2026
Last updated: October 2, 2026

This Privacy Policy describes how Ravi Inc (“Ravi,” “we,” “us”) collects, uses, and shares information when you use ravi.id and related services (the “Service”), including agent identities (email inbox, phone numbers for SMS/OTP, encrypted vault, contacts, and APIs).

Sites: https://ravi.id · Docs: https://docs.ravi.id
Related terms: https://ravi.id/terms

Ravi Inc is a Delaware corporation. Principal address: 2261 Market Street, Suite 87658, San Francisco, CA 94114.

Privacy or data requests: legal@ravi.app
Product support: rid-support@ravi.app

1. Plain-English summary

Ravi gives AI agents their own identity so they can sign up for services, receive verification codes, and store credentials — without using your personal Gmail or phone.

To do that, we process: (a) information about you (the human or team operator), and (b) information that flows through each agent identity (email, SMS/OTP, vault secrets, contacts).

We do not sell your personal information. We do not use vault secrets, agent email content, or SMS/OTP content to train machine-learning models.

2. Who this policy covers

Operators / account holders who create and manage agent identities.
End users of third-party services only to the extent their data appears in an agent’s inbox, SMS, or vault because an agent interacted with that service — we process that content to provide the Service to you.

This policy covers ravi.id, docs.ravi.id (as linked), and the APIs and dashboards that operate agent identities. It does not cover Ravioli / Jino (a separate Ravi Inc product) unless we link a separate policy for that product.

3. Information we process

3.1 Operator account information

When you create or manage an account, we may process:

Name, email address, and authentication details
Organization or team name, role, and billing contact if you provide them
API keys and access tokens you create for agent runtimes or management
Support messages you send us
Payment and billing details if you purchase a paid plan (processed by our payment provider; we do not store full payment-card numbers on Ravi systems)

3.2 Agent identity and communications

For each agent identity you provision, we may process:

Email: addresses we assign, messages sent and received, headers, attachments, and delivery metadata
Phone / SMS: numbers we assign, SMS content (including one-time codes), and delivery metadata
Vault: credentials and secrets you or the agent store, access logs, and scoped permissions
Contacts: a per-identity directory built from messages and your configuration
Policies: rules you set about which agents may communicate with which others

OTP and magic-link content is processed so the agent (and you) can complete sign-up and login flows. Treat vault contents as highly sensitive.

3.3 Website, docs, and logs

When you visit our sites or use the API, we may process:

IP address, browser or client type, device/OS hints, referring URL, and timestamps
Approximate location derived from IP
Diagnostic and security logs (errors, rate limits, abuse signals)

We may use cookies or similar technologies on ravi.id for session, security, and basic analytics. You can control cookies through your browser.

3.4 Information we do not seek out

We do not require government ID to use the free tier described on the site. We do not intentionally collect sensitive categories (such as health or precise geolocation) except if you or an agent place that content into email, SMS, or the vault.

4. How we use information

We use the information above to:

Provide, operate, secure, and improve the Service
Create and revoke agent identities; deliver email and SMS; store and retrieve vault items under your access rules
Authenticate operators and agents; prevent fraud, spam, and abuse
Bill and collect fees if you use a paid plan
Provide support and respond to legal requests where required
Communicate service notices (outages, security, material policy changes)

Model training. We do not use vault secrets, agent email content, or SMS/OTP content to train or fine-tune machine-learning models. If that ever changes, we will update this policy before doing so.

We share information only as needed to run the Service:

Service providers who process data on our behalf under contracts that limit their use of the data. Categories include cloud hosting and infrastructure; email delivery; SMS and telephony; payment processing (if you buy a paid plan); customer support tooling; and security or abuse monitoring. For a current list of provider categories or named vendors we use for your account, email legal@ravi.app.
Other agents or parties you configure — if you grant an agent access or set communication policies, content flows according to those rules
Third-party services an agent contacts — when an agent signs up or logs into another product, that product’s privacy policy governs what they do with data the agent sends them
Legal / safety — if required by law, valid legal process, or to protect Ravi, our users, or others from harm, fraud, or abuse
Business transfers — in connection with a merger, acquisition, or asset sale, subject to customary protections

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are commonly used under US state privacy laws.

6. Retention

We keep operator account data and agent identity data for as long as your account is active and as needed to provide the Service.

After you delete an agent identity or we complete account closure at your request:

We delete or de-identify the associated primary data (including email content, SMS content, vault items, contacts, and identity configuration for that identity or account) within 30 days.
We may retain limited records needed for security, abuse prevention, dispute resolution, accounting, or legal compliance for up to 90 days after deletion or closure (or longer if a law, legal hold, or active investigation requires it).
System backups that may still contain deleted data are purged or overwritten within 35 days after the primary deletion.

Active accounts keep data until you delete it or close the account, subject to the limits above once deletion starts.

7. Security

We use administrative, technical, and organizational measures appropriate to the sensitivity of the data, including access controls and encryption for vault storage in transit and at rest where the Service architecture supports it. No method of transmission or storage is 100% secure. Protect your operator credentials and API keys; rotate them if exposed.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing.

To delete an agent identity or request account closure: rid-support@ravi.app
Privacy rights / this policy: legal@ravi.app

We will verify requests as required by law. You may appeal a denied request by replying to our decision email.

You can stop using the Service at any time. Revoking an agent identity stops new use of that email/phone/vault for that identity.

9. Children

The Service is for operators 18 years of age or older. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, contact legal@ravi.app and we will delete it.

10. International transfers

We are based in the United States. If you access the Service from elsewhere, your information may be processed in the US and other countries where we or our service providers operate. Those countries may have different data-protection laws than your own.

11. Changes

We may update this policy. We will post the new version at https://ravi.id/privacy and change the effective date. For material changes, we will provide additional notice when required (for example email or an in-product notice).

12. Contact

Ravi Inc
2261 Market Street, Suite 87658
San Francisco, CA 94114

Privacy: legal@ravi.app
Support: rid-support@ravi.app