Privacy Policy

1. Information We Collect

We collect information you provide to us directly when you fill out our onboarding form, create an account, purchase a subscription, or communicate with us via email or other channels. This information may include:

• Personal identification: Your name, email address, phone number, business name, city, and state.
• Payment information: All payments are processed securely via Stripe. We never store your credit card numbers, CVV, or full card details on our servers. Stripe's own privacy policy governs how your payment data is handled.
• Business information: Details about your services, pricing structure, booking link, service area, and any other information needed to build and configure your automation system.
• Usage data: Information about how you interact with our website, including pages visited, time spent on site, referral source, browser type, IP address, and device information.
• Cookies and tracking technologies: We use cookies, web beacons, and similar technologies to personalize your experience and analyze site usage. See Section 7 for full details.

We do not knowingly collect sensitive personal information such as government identification numbers, health information, or precise geolocation data beyond what you voluntarily provide for service area configuration.

2. How We Use Your Information

We use the information we collect solely to operate and improve our services. Specifically, we use your information to:

• Provide, configure, and maintain your automated customer acquisition system.
• Process payments and send billing-related communications such as receipts and renewal notices.
• Send onboarding instructions, setup confirmations, and service-related communications necessary for you to use the platform.
• Generate your custom automation workflows, including personalized AI text response scripts, lead scoring rules, and quote templates based on your business data.
• Send weekly performance reports summarizing your leads, bookings, and revenue generated through the system.
• Respond to your support requests, questions, and feedback.
• Analyze aggregate usage patterns to improve the reliability, performance, and features of our service.
• Comply with legal obligations and enforce our Terms of Service.

We do not use your information for advertising purposes or to build user profiles for third-party marketing. We will not contact you with unsolicited promotional communications beyond your initial onboarding sequence unless you have opted in to receive such communications.

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only as strictly necessary to provide our services, with the following trusted infrastructure providers:

• Stripe — Payment processing. Your payment information is transmitted directly to Stripe and governed by their Privacy Policy.
• Supabase — Database infrastructure. Your business data and account information are stored in Supabase's secure managed database environment.
• Resend — Transactional email delivery. We use Resend to deliver onboarding emails, weekly reports, and other service communications.
• N8N — Automation workflow infrastructure. Your business configuration data is used within N8N workflows to operate your automation system.

All service providers listed above are contractually bound by data processing agreements that restrict their use of your data to the specific purpose of providing services to us on your behalf. We do not permit them to use your data for their own marketing or commercial purposes.

We may also disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Retention

We retain your personal information and business data for as long as your account remains active and for a reasonable period thereafter to allow for reactivation, account recovery, and dispute resolution. After you cancel your subscription, we retain your data for 90 days before initiating permanent deletion.

If you would like your data deleted before the 90-day period expires, you may submit a deletion request to [REPLACE: privacy@your-domain.com] and we will process your request within 30 days. Please note that we may be required to retain certain transactional records for legal, tax, or accounting compliance purposes even after account deletion.

Aggregated, anonymized data that cannot reasonably be used to identify you may be retained indefinitely for analytics and service improvement purposes.

5. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to our legal retention obligations.
• Right to Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to certain types of processing, including direct marketing.

To exercise any of these rights, please email us at [REPLACE: privacy@your-domain.com]. We will respond to your request within 30 days. We may need to verify your identity before processing your request to protect your account security.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). If you are located in the European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR). Please contact us to exercise these rights.

6. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored in your browser that allow us to recognize your browser, remember your preferences, and analyze how our website is used.

We use two categories of cookies: essential cookies, which are required for basic site functionality such as session management and security, and analytics cookies, which collect anonymized data about how visitors use our site (pages viewed, time on site, traffic sources). Analytics data is used solely to improve our website and is not linked to your personal identity.

You can disable cookies in your browser settings at any time. Please note that disabling essential cookies may affect the functionality of certain parts of our website. Most browsers provide instructions for managing cookies in the Help or Settings menu.

7. Security

We take the security of your personal information seriously and implement industry-standard administrative, technical, and physical safeguards to protect it. These measures include SSL/TLS encryption for all data transmitted between your browser and our servers, encrypted storage for sensitive account data, role-based access controls limiting data access to authorized personnel only, and regular security reviews of our infrastructure and third-party providers.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your Avo account and to notify us immediately at [REPLACE: privacy@your-domain.com] if you suspect any unauthorized access to your account.

8. Children's Privacy

Our services are designed for and directed to business owners and adults operating professional service businesses. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete that information promptly.

If you believe we have collected information from a minor, please contact us at [REPLACE: privacy@your-domain.com] so we can investigate and remediate the situation.

9. Third-Party Links

Our website and communications may contain links to third-party websites, including our infrastructure providers and partner platforms. This Privacy Policy does not apply to those third-party sites, and we are not responsible for the privacy practices of websites we do not operate. We encourage you to review the privacy policies of any third-party sites you visit.

Links to third-party services like Stripe's checkout page, Google Calendar, or other tools used in your automation workflows are governed by those services' own terms and privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page.

For material changes that significantly affect how we use your personal information, we will notify you via email to the address associated with your account at least 14 days before the changes take effect. Your continued use of our services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Company: [REPLACE: Avo Systems LLC]
• Address: [REPLACE: 123 Main St, Orlando, FL 32801]
• Email: [REPLACE: privacy@your-domain.com]

We are committed to working with you to resolve any concerns about your privacy. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.