Aiovel Privacy Notice
Learn what personal data Aiovel handles, why it is used, which service providers receive it and how to control optional analytics.
Who is responsible
Aiovel is operated by Alina Khay. This notice applies to aiovel.com and its account, subscription and research features. For a privacy request, use the public contact route on alinakhay.com and identify the Aiovel account or page concerned.
Data Aiovel handles
Public use. Hosting infrastructure may process IP address, device and request data to deliver the site, prevent abuse and diagnose failures. Aiovel stores an appearance preference and, when you answer the analytics prompt, that choice in your browser.
Accounts. Clerk processes sign-in identifiers, verified email status, session data and account-security signals. Aiovel receives the stable account identifier needed to authorise protected content.
Subscriptions. Stripe processes checkout, payment methods, invoices and billing. Aiovel stores the minimum customer, subscription, entitlement and webhook status needed to grant access. Aiovel does not receive or store complete card numbers.
Optional analytics. Google Analytics loads only after you choose “Allow analytics.” If you decline or have not chosen, Aiovel does not load the Google Analytics script. You can review or change that choice.
Why it is used
Site delivery, security and fault diagnosis are necessary to provide the service and protect it. Account and entitlement data are used to perform the access agreement you request. Billing records are used to perform subscriptions and meet accounting, fraud-prevention and legal obligations. Optional audience measurement is based on your consent, which you can withdraw for future collection at any time.
Service providers and transfers
Aiovel uses Vercel for hosting and serverless delivery, Clerk for identity, Stripe for billing, Neon for the entitlement database, Google Fonts for presentation assets and—only with analytics consent—Google Analytics. Provider requests may include network and device metadata. Those providers process data under their own infrastructure and may transfer it internationally using their applicable safeguards. Links to market sources and other websites are governed by those sites when you visit them.
Retention and security
Account and entitlement records are kept while needed to provide access, resolve disputes and meet security, tax or accounting duties. Provider-controlled identity, billing and infrastructure records follow the provider’s retention settings and legal duties. Browser preferences remain until you clear them or change the setting. Aiovel uses access controls, server-side secrets and signed payment events, but no internet service can guarantee absolute security.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, or complain to a data-protection authority. UK users may complain to the Information Commissioner’s Office. Requests may require identity verification, and some records may be retained where law requires.
Changes
This notice is effective 2026-09-19. Material changes will be dated here.