Avida / Aria
Privacy Policy
How Avida handles personal information in Aria — what we collect, why, who else sees it, and how long we keep it.
Last updated 24 August 2026
Who we are
Aria is operated by Automotive Retail Intelligent Agents Inc.(“Avida”, “we”, “us”), 77 City Centre Drive, Suite 501, Mississauga, ON, L5B 1M5, Canada.
We are accountable for personal information under our control. Our Privacy Officer is David Reale, reachable at avida.ariaai@gmail.com.
Two kinds of people, two different roles
This distinction decides who you should ask about your information, so it comes first rather than buried in a later section.
Dealership staff. If you hold an Aria account, we deal with your information directly. This policy governs it and you can exercise every right below with us.
Customers of a dealership. If a dealership entered your details while arranging a vehicle purchase, that dealership decides what is collected and why. We hold and process it on their behalf, under their instructions, as their service provider. Ask them first — they can correct or delete your record directly. If you contact us instead we will help, but we may need to refer you to the dealership, and we will tell you if we do.
What we collect
From dealership staff: name, email address, the dealership you belong to, your role, and a record of what you did in the product. If you sign in with Google we receive your name, email address and profile picture from Google — nothing else, and never your Google password.
From dealerships about their customers: name, contact details, address, vehicle and deal information, and — where the dealership uses it — credit assessment information. Where a customer speaks with Aria during a deal, a transcript of that conversation.
Automatically: standard technical records such as IP address, browser and timestamps, kept to operate the service and keep it secure.
Why we use it
To provide Aria: arranging and presenting vehicle deals, generating the presentations and videos a dealership shows its customers, sending transactional email, supporting our users, keeping the service secure, and meeting our legal obligations. We do not sell personal information, and we do not use it to build advertising profiles.
Artificial intelligence, and what it is shown
Ariauses third-party AI services to generate text, speech and video. Stating plainly what that means: when a member of dealership staff asks our in-product assistant about a customer, the information the assistant retrieves — which can include a customer’s name, email address and phone number — is sent to Google as part of the request, and is stored in the conversation record.
Two limits we hold ourselves to. Credit scores are never sent to the assistant, in any circumstance. And platform administrators at Avida can read dealership records only to provide technical support; that access is read-only and enforced by the database, not by policy alone.
AI output can be wrong. Nothing Aria generates is financial, legal or insurance advice, and a dealership remains responsible for what it presents to its customers.
Who else processes it
We use the service providers below. Several operate outside Canada, mainly in the United States, which means your information may be stored or processed there and can be subject to lawful access requests by foreign courts and authorities.
| Provider | What it does | Personal information involved |
|---|---|---|
| Supabase | Database, authentication, file storage | All of the above |
| Google (Gemini) | AI text generation | Whatever the assistant retrieves, including customer contact details |
| Google (Maps) | Address autocomplete | Addresses entered by staff |
| Google (Sign-In) | Optional staff sign-in | Name, email address, profile picture |
| HeyGen | Presenter video generation | Script text, which may include a customer name |
| ElevenLabs | Speech synthesis | Script text, as above |
| Resend | Transactional email | Recipient name and email address |
| Vercel | Hosting, scheduled tasks, media storage | Technical records, generated media |
How long we keep it
| Information | Retention |
|---|---|
| Assistant conversations | Deleted automatically 90 days after the last message in the conversation. Messages are deleted with it. |
| Notifications | Deleted at their expiry date, or 30 days after you dismiss them. |
| Deal and customer records | Kept for as long as the dealership maintains its account with us, then deleted on request or on account closure. |
| Deal conversation transcripts | Kept for as long as the associated deal record is kept. |
| Account records | Deleted within 90 days of an account being closed, except where we must keep something to meet a legal obligation. |
How we protect it
Access is restricted by role and enforced in the database itself, so a dealership sees only its own records. Information is encrypted in transit. Administrative access for support is read-only and logged. Where an administrator needs to view the product as another user, that session is time-limited and recorded.
No system is perfectly secure. If a breach creates a real risk of significant harm we will notify affected individuals and the Office of the Privacy Commissioner of Canada, as PIPEDA requires.
Your rights
You may ask us for access to the personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, or withdraw your consent to our using it — subject to legal and contractual limits, which we will explain if any apply. We respond within 30 days.
Write to David Reale at avida.ariaai@gmail.com, or by post at 77 City Centre Drive, Suite 501, Mississauga, ON, L5B 1M5, Canada.
If you are not satisfied with our response you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca. Residents of Quebec, and of provinces with their own privacy legislation, may also have recourse to their provincial regulator.
Cookies
We use cookies that are necessary to run the service — keeping you signed in, and keeping your session secure. We do not use advertising or cross-site tracking cookies.
Children
Aria is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 18.
Changes
If we change this policy we will update the date at the top, and where a change is significant we will tell account holders directly rather than relying on you to notice.