Privacy Policy

1. Who we are

This Privacy Policy applies to AVIRO.ONE (operated by [Your registered company name]), our website at https://aviro.one, and our software products including SubNect and TechnicalDept (together, the “Services”).

Registered address: [Registered business address]. For privacy questions, contact privacy@aviro.one.

2. Information we collect

We collect information you provide directly, information generated through use of the Services, and limited information from cookies and similar technologies.

• Account & contact data — name, email, phone, organization name, and similar details when you create an account, start a trial, or contact us.
• Business & product data — customer, invoice, payment, agent, and collection records you enter into SubNect; and repository metadata, classification results, debt flags, and votes you create in TechnicalDept.
• Usage & device data — IP address, browser type, pages viewed, approximate location, and diagnostic logs needed to keep the Services secure and reliable.
• Communications — messages you send us by email or form, and support conversations.
• Git metadata (TechnicalDept) — commit messages, authors, timestamps, PR metadata, and file paths from connected GitHub/GitLab repositories. We do not read file contents and do not require push access.

3. How we use information

We use personal information only as needed to provide and improve the Services, communicate with you, and meet legal obligations.

• Provide, host, and maintain SubNect, TechnicalDept, and related platform features.
• Authenticate users, enforce tenant isolation, and prevent abuse or fraud.
• Process trials, subscriptions, invoices, and SaaS fee calculations.
• Respond to support requests and send transactional notices (billing, security, product changes).
• Improve product performance, reliability, and documentation.
• Comply with applicable law, accounting, and dispute-resolution requirements.

4. Legal bases (where applicable)

Where data-protection laws require a legal basis, we typically rely on: performance of a contract (providing the Services you requested); legitimate interests (security, product improvement, and business operations that do not override your rights); consent (for optional cookies/marketing where required); and legal obligation (tax, accounting, or regulatory duties).

5. Sharing of information

We do not sell your personal information. We may share it with trusted processors who help us run the Services, or when required by law.

• Infrastructure & tooling providers (hosting, email, analytics, error monitoring) under contractual confidentiality and data-processing terms.
• Payment or billing partners when you purchase or renew a plan.
• Professional advisors (legal, accounting) under confidentiality obligations.
• Authorities when we believe disclosure is required to comply with law, enforce our terms, or protect rights, safety, or security.
• A successor entity in connection with a merger, acquisition, or asset sale, subject to this Policy or equivalent protection.

6. Customer data in SubNect

When you use SubNect, you control customer and operational data you upload for your organization. We process that data to provide the Service on your instructions and apply organization-level isolation so one tenant cannot access another’s records.

You are responsible for having a lawful basis to collect and process your end customers’ and agents’ data before entering it into SubNect.

7. Retention

We retain personal information for as long as your account is active, as needed to provide the Services, and for a reasonable period afterward for backups, dispute resolution, security, and legal compliance. You may request deletion of account data subject to legal retention requirements.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information, including access controls and tenant isolation. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. International transfers

Your information may be processed in countries other than where you live, including where our hosting or subprocessors operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal information; object to or restrict certain processing; and withdraw consent where processing is consent-based. To exercise these rights, email privacy@aviro.one. We may need to verify your identity before responding.

11. Children

The Services are not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes

We may update this Privacy Policy from time to time. We will revise the “Last updated” date and, for material changes, provide additional notice (for example on the website or by email) where appropriate.

13. Contact

Questions about this Policy: privacy@aviro.one. General inquiries: hello@aviro.one.

Mailing address: [Registered business address].