1. Introduction
This Privacy Policy describes how Avorelo collects, uses, and protects information when you use our service. Avorelo is designed as a local-first product: core workflow data, proof, and evidence stay on your machine by default. This policy covers the information we do collect through our hosted services, website, and account systems.
2. Information We Collect
Account and contact information
When you create an account, we collect your name, email address, and authentication credentials. If you sign up on behalf of an organization, we may also collect organization name and team details.
Subscription and billing status
When you subscribe to a paid plan, billing information is collected and processed by Lemon Squeezy, our Merchant of Record. We receive subscription status, plan type, and billing period from Lemon Squeezy. We do not directly store your payment card details.
Product usage events
We collect aggregated product usage events to understand how features are used, improve reliability, and support product development. These events include feature activations, error counts, and general usage patterns.
Workflow and evidence signals
When you use Avorelo's workflow features, the service may process metadata about tasks, scope signals, validation results, and workflow status. Avorelo is designed to minimize collection of sensitive source code and secrets in these signals.
Support requests and diagnostics
If you contact support or submit diagnostic bundles, those may include technical metadata such as configuration details, error logs, and environment information. We recommend minimizing and redacting sensitive content before submitting support data.
Technical logs
Our servers automatically collect technical information including IP addresses, browser type, operating system, and request timestamps for security and operational purposes.
Website analytics
We may use website analytics services such as Google Analytics 4 (GA4) to understand visitor behavior, page views, and traffic sources. When enabled, see the Cookies section below for details. Analytics may not be active on all deployments.
3. What We Minimize
Avorelo is designed to minimize collection of sensitive source code and secrets. Core workflow data, proof, and evidence are processed locally on your machine by default. Diagnostic and support data should be redacted where possible before submission.
We do not sell your personal data.
We do not use private customer code to train AI models.
4. How We Use Your Information
We use the information we collect to:
- Operate and maintain the Avorelo service
- Manage subscriptions, entitlements, and account access
- Provide customer support
- Detect and prevent security incidents, fraud, and abuse
- Improve product reliability and develop new features
- Communicate important service updates
- Analyze aggregated usage patterns to improve the product
5. Legal Bases for Processing (EEA/GDPR)
If you are in the European Economic Area, we process your data based on:
- Contract performance: to provide the service you signed up for
- Legitimate interest: to improve our product, prevent fraud, and ensure security
- Consent: where you have given explicit consent, such as for marketing communications
- Legal obligation: where required by applicable law
We do not claim full GDPR compliance at this time, but we aim to follow GDPR principles as a baseline for how we handle personal data.
6. Sharing and Subprocessors
We may share information with the following categories of service providers:
- Lemon Squeezy: Merchant of Record for payments, taxes, invoices, subscription management, and refunds
- Hosting provider: infrastructure for running the Avorelo service
- Google Analytics: website analytics (GA4), when enabled
We do not sell personal data to third parties. We may disclose information if required by law, legal process, or to protect the rights, safety, or property of Avorelo or others.
7. Cookies and Tracking
When analytics is enabled, our website may use cookies set by Google Analytics 4 (GA4) to measure page views, traffic sources, and visitor behavior. These cookies help us understand how visitors use our website and improve the experience.
GA4 cookies include _ga and _ga_* identifiers. You can control cookies through your browser settings. Disabling cookies may affect website functionality. Analytics cookies may not be present on all deployments.
Our application does not use tracking cookies beyond what is necessary for authentication and session management.
8. Data Retention
We retain account and subscription data for as long as your account is active. After account deletion, we may retain certain data as required by law or for legitimate business purposes such as fraud prevention, for a reasonable period.
Technical logs are retained for a limited period for security and operational purposes.
9. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), access controls, and secure infrastructure practices. No system is perfectly secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to certain processing activities
- Unsubscribe from marketing communications
To exercise these rights, contact us at support@avorelo.com.
11. Children
Avorelo is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will take steps to delete it promptly.
12. International Transfers
If you access Avorelo from outside the country where our servers are located, your information may be transferred internationally. We take reasonable steps to ensure your data is treated securely and in accordance with this policy.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and may notify you through the service or by email. Continued use of Avorelo after changes constitutes acceptance of the updated policy.
14. Contact
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at support@avorelo.com.