Privacy notice

This notice explains how Aveli ("Aveli", "we") handles personal data. We are the data controller for the data described here. Contact support@getaveli.com for privacy questions or to exercise your rights.

Data we collect

Account data: your name, email address, and login credentials.

Business data you enter: workspace and business details, locations, teammates' email addresses, and any documents you upload as knowledge sources.

Customer and lead data you record: contact names, email addresses, phone numbers, enquiry content, notes, and follow-up dates.

Conversation data: assistant conversations and the messages your team exchanges with the assistant.

Usage and technical data: feature usage, usage counters, device and browser information, IP address, and log data.

Support data: messages you send us and related context.

Why we use it, and the legal basis

To create and secure your account and provide the features you use — performance of our contract with you.

To process enquiries, generate answers and reminders, and keep an audit trail of team actions — performance of the contract and our legitimate interest in operating a reliable, accountable product.

To prevent abuse, fraud, and misuse, and to debug incidents — legitimate interest in security.

To improve the product and measure usage in aggregate — legitimate interest.

To send product or marketing messages where you have asked for them — consent, which you can withdraw at any time.

To meet tax, accounting, and legal obligations — legal obligation.

AI processing

To generate assistant answers, we send your approved knowledge documents, relevant conversation context, and the customer message to a third-party large language model provider operated by OpenAI, accessed through our AI gateway. We do not sell personal data.

Who we share data with

Service providers and subprocessors that host the platform, store data, and deliver the features you use.

Our AI model provider, to generate assistant answers as described above.

Paddle.com, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, and invoicing.

Google (Google Ads), for advertising measurement: when you accept advertising cookies, page visits and purchase amounts on our website are shared with Google so we can measure whether our ads lead to sign-ups and purchases. See https://business.safety.google/privacy/ for how Google handles this data.

Professional advisers such as legal and accounting counsel.

Authorities, where we are required by law or to protect rights and safety.

Advertising measurement

We run ads through Google Ads and measure whether they lead to purchases on our website. This uses the Google tag, which records page visits and, when you buy a plan, the purchase amount and currency together with a transaction reference.

We also keep our own visit measurement on this website: an anonymous identifier stored in your browser, the public pages you viewed, the campaign that brought you here, and whether you started an account or checkout. From those signals we estimate how interested a visit appears (high, medium or low) so we can tell whether marketing traffic is turning into customers. We do not use your name, email address, IP address, or device characteristics for this, and we make no judgement about visitors who decline measurement.

In regions where the law requires it, this measurement only runs after you accept advertising cookies in our consent banner. Elsewhere it runs as part of our ordinary website operation, subject to applicable opt-outs.

With the same measurement preferences, we record which product demonstrations you view, video starts, quarter-progress milestones and completions, and demo links to plans. Playing a video does not create a purchase conversion. Hosted videos and thumbnails are requested from the chosen media host when you view or play them.

You can change your choice at any time under Cookie settings in the website footer. Withdrawing consent stops further advertising measurement immediately; it does not affect measurement already collected.

Retention

We keep account and workspace data while your account is open. Leads, conversations, and documents are kept while your workspace exists and are deleted with it. When data is no longer needed for the purposes above we delete it or de-identify it, except where retention is required by law (for example tax records).

Anonymous visit records are kept for up to 180 days and then removed automatically; older records are deleted on request.

Your rights

Depending on where you live, you may request access to your data, correction of inaccurate data, deletion, restriction of processing, a portable copy, and object to or withdraw consent for processing based on consent. You can also complain to your data protection authority.

Email support@getaveli.com to make a request. We respond within one month; we may need to verify your identity first.

International transfers

Our providers operate outside your country, so data may be transferred abroad. Where that happens for UK or EEA data we rely on recognised safeguards such as adequacy decisions or standard contractual clauses.

Security

We use transport encryption, hashed passwords, least-privilege access, and per-workspace data separation enforced in the database so that one business's data is not reachable by another. No system is perfectly secure; tell us promptly if you suspect a problem.

Cookies and local storage

We use essential storage (cookies and browser storage) to keep you signed in and remember session state. Where you accept, we also use Google advertising measurement cookies to see whether our ads lead to purchases. See /legal/cookies for details and how to manage them.

We also keep Aveli's own anonymous visit measurement in your browser: an anonymous identifier plus the public pages you viewed, so we can tell whether the website is helping owners find us. It is not linked to your name or email unless you sign in, and it is removed on the retention schedule below.

Children

Aveli is a business tool and is not directed at children under 16.

Changes to this notice

If we change this notice in a material way we will tell you in the product or by email.