Privacy policy.

Andria is an AI-powered creative asset library for ecommerce teams. You can reach us at info@tryandria.com with any privacy question or request.

• Account data — your email address and authentication identifiers. If you sign in with Google, we receive your email address and basic profile information.
• Content you upload — images, videos, file names, file sizes, and any collection or workspace names you create.
• Imported files — files you explicitly choose to import from connected services such as Google Drive.
• Derived metadata — AI-generated descriptions and tags produced when your assets are analyzed.
• Operational logs — basic request and error logs used to keep the service running.

When you connect Google Drive, Andria requests the drive.readonly scope only. That scope allows Andria to list and download files you select so they can be copied into your private Andria storage.

• Andria cannot edit, move, delete, or share anything in your Google Drive — the read-only scope makes those operations impossible at the API level.
• We only download the specific files you choose to import.
• Access tokens are stored encrypted and are used solely to perform imports you initiate.
• You can disconnect Google Drive at any time from within Andria, or revoke access at Google Account permissions.

Andria's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Google Drive is never sold, never used for advertising, and never used to train generalized AI models.

• To operate your library: storing, listing, and serving your assets.
• To generate descriptions and tags so assets are searchable, and to answer your conversational search queries.
• To authenticate you and secure your account.
• To provide support and communicate about the service.

We do not sell your data and we do not use your uploaded content for advertising.

To generate tags and descriptions, asset content and metadata are sent to our AI model provider through a short-lived, access- limited link. Providers process this content to return a result for you. We do not use your assets to train our own models.

• Files are stored in a private object-storage bucket. Buckets are not publicly listable, and files are served through short-lived signed links.
• Data is encrypted in transit (TLS) and at rest by our hosting provider.
• Access rules scope every row of data to the account that owns it, so other customers cannot read your assets, collections, or workspaces.
• Connection tokens for third-party services are encrypted before being stored.

No system is perfectly secure. We do not guarantee that a breach can never occur, and we will notify affected users promptly if a breach affecting personal data is confirmed.

We rely on a small number of providers to run Andria: cloud hosting and database/storage infrastructure, an authentication provider, and an AI model gateway. Each processes data only to deliver the service to you.

Assets stay in your library until you delete them. Deleting an asset removes both the stored file and its metadata. If you close your account, contact info@tryandria.com and we will delete your account data and stored files.

• Access, export, or delete your assets from inside the app.
• Disconnect Google Drive at any time.
• Request a copy or deletion of your personal data by emailing us.

Andria uses only the storage necessary to keep you signed in and to remember interface preferences such as your selected workspace. We do not run advertising trackers.

Andria is a business tool and is not intended for children under 16.

We may update this policy as Andria evolves. Material changes will be reflected in the "last updated" date above.

Privacy or security questions: info@tryandria.com.