Privacy Policy

Who we are

AVUNARO is an AI automation platform for businesses ("AVUNARO", "we", "us").

Questions about this policy or your data: support@avunaro.com.

Our role

For people who create an AVUNARO account (business owners and their team members) and for people who contact us through our website, we decide how their personal data is used. In data protection terms, we are the controller of that data.

For the customers of those businesses who write to them through connected channels (Facebook Messenger, Instagram, WhatsApp, Telegram), we process data on behalf of the business. The business is the controller of that data, and we act as its processor.

What we collect

• Account data: your name and email address, the name, email address, profile picture and account ID we receive when you sign in with Google or Facebook, your Telegram account if you sign in with Telegram, your role and the businesses you have access to.
• Business data you add: company profile, catalog, prices, files, knowledge base and instructions for AI agents.
• Channel data: messages, voice messages, photos and other media sent to a connected business account, comments on the business's Instagram posts, the sender's name, username, account ID or phone number, and the replies sent.
• Data AI agents save for the business: orders and bookings, including recipient, delivery and appointment details; notes about customers; important dates such as birthdays; and conversation summaries.
• Integration credentials: access tokens for connected accounts. They are stored encrypted and are never shown in the browser.
• Billing data: the balance of each business, top-up requests and invoices.
• Technical data: IP address, logs, and the usage and cost metrics we need to run and secure the service.
• Website requests: the details you enter in our project request and beta application forms (see the next section).

Requests sent through our website

When you send a project request, we collect what you enter in the form: your name, email address, phone number or messenger username, company name, website or social profile, role, industry, country and city, company size, how many customer requests you get a day, what you want to improve first, the process you want to automate and the tools you use now.

The beta application also asks what your business does, for links or information about it, where you work with customers, how many people handle this work, when you could start, how much time you can give the test each week, what the system should handle first, what you have automated before and with what results, and your budget. With both forms, we also record which page you came from and the language of the site.

We use these details only to review your request, reply to you and, if you join the beta, set up your access. They are stored in our database and sent as a notification to our team's Telegram chat through a Telegram bot. Your IP address is used only for a short time to limit repeated submissions and is not saved with your request.

How we use data

We do not sell personal data and do not use it for our own advertising. Follow-up messages about a customer's own order or request, such as a reminder about an unconfirmed order or an offer to hold an option they asked about, are sent on behalf of the business. Marketing messages, such as reminders about important dates, are sent only to customers who agreed to receive them.

• To provide the service: show conversations, prepare and send replies, and keep orders and tasks.
• To run the AI agents a business sets up: messages, photos, voice message transcripts and business data are sent to AI model providers to prepare drafts and replies.
• To transcribe voice messages so that AI agents can read them.
• To handle billing and top-up requests.
• To reply to requests sent through our website.
• To keep the service secure, prevent abuse and fix errors.

Why we are allowed to process it

We process account and billing data to provide the service under our agreement with you; website requests to take the steps you asked for before a possible agreement; technical data because we have a legitimate interest in keeping the service secure; and the data of businesses' customers on the instructions of the business.

Data from Meta platforms

When a business connects Facebook Messenger, Instagram or WhatsApp, we receive messages, comments on the business's Instagram posts, and the sender's name, username, account ID or phone number through the official Meta APIs. When you sign in with Facebook, we receive your name, email address, profile picture and Facebook user ID.

We use this data only to provide AVUNARO to you and to that business: to show conversations, prepare and send replies, and keep orders. We do not sell it, do not use it for advertising and do not transfer it to data brokers. You can ask us to delete it at any time, as described on the Data Deletion Request page.

Service providers

We use the following providers and categories of providers to run AVUNARO. Hosting, database and AI model providers process data on our behalf, only to provide the service. Meta, Telegram and Google process data under their own privacy policies when you or a business use their services with AVUNARO.

Some of these providers are based outside the European Union, for example in the United States, or process data there.

• Supabase (database and sign-in, EU, Frankfurt): storing account, business and request data.
• Contabo (servers): running the application, processing messages, storing catalog photos and storing nightly backups.
• Vercel: hosting the website and dashboard and receiving website forms.
• Third-party AI model providers: processing messages, voice messages, photos and business data on our behalf to prepare drafts and replies and to transcribe voice messages. We send them only what is needed for the task.
• Hosting and infrastructure providers: keeping technical logs of requests to our website and servers, such as the IP address, the time, the requested address and the browser's user agent. They keep these logs on our behalf for a limited time to run and secure the service.
• Meta (Facebook, Instagram, WhatsApp): delivering messages and comments for businesses that connect these channels, and sign-in with Facebook.
• Telegram: delivering messages for businesses that connect Telegram, sign-in with Telegram, sending a business's team notifications through our Telegram bot (conversations handed to a person, with their recent messages; customer messages while a team member handles the conversation; new orders and bookings; and a daily plan of orders), and notifying our team about requests sent through the website and the dashboard.
• Google: sign-in with Google, and the web fonts used on our dashboard and legal pages. Your browser loads these fonts from Google's servers, which receive your IP address.
• Cloudflare: forwarding email sent to our @avunaro.com addresses.

Cookies and local storage

We use only the cookies and browser storage the site needs to work: cookies that keep you signed in, short-lived cookies that protect sign-in with Google, Facebook and Telegram, and local storage for your theme, interface language, demo settings and dashboard views. We do not set analytics or advertising cookies of our own.

When a business owner opens a dashboard screen for connecting Instagram or WhatsApp, we load Meta's JavaScript SDK. Meta may set its own cookies and automatically log usage events under Meta's policies.

The Telegram sign-in button on our "Pilot store sign-in" page is loaded from Telegram and may set Telegram's own cookies.

How long we keep data

Customer conversations, customer profiles and the notes saved by AI agents are kept while the business uses AVUNARO. We do not delete them automatically after a fixed period; the business or the customer can ask us to delete them at any time.

Account and business data are kept while the account is active. When you ask us to close your account or delete a business, we delete its data within 30 days, except records we must keep by law, such as invoices and accounting records, and the log of actions our team took in internal tools, which identifies accounts and businesses by internal ID and does not store conversations.

Deleting a business in the dashboard hides it and turns off its channels, but keeps its data so that it can be restored. To have it erased, send a request as described on the Data Deletion Request page.

Requests sent through our website, including their copies in our team's Telegram chat, are kept for 6 months after we receive them and are then deleted. If you become a customer, the details you need for your account are kept as account data. You can ask us to delete a request sooner at any time.

Our backups are kept for about two weeks and are then deleted automatically.

Isolation between businesses

Each business on AVUNARO has its own data, files, connections and AI agents. Data of one business is not available to another business, even when both belong to the same owner.

Our team can access business data through internal tools. We do so only to provide support, fix problems or when the law requires it.

Your rights

You can ask us for access to your personal data or a copy of it, and ask us to correct or delete it, or to restrict or stop its processing. Email support@avunaro.com; we reply within 30 days.

If you are a customer of a business that uses AVUNARO, you can also contact that business directly. The Data Deletion Request page explains how deletion works.

You can also complain to the data protection authority in your country.

Changes to this policy

When we change this policy, we will publish the new version on this page with the date it takes effect.