AVUNARO

Privacy Policy

Draft: company details are not filled in yet (LEGAL_ADDRESS, SUPPORT_EMAIL, GOVERNING_LAW, EFFECTIVE_DATE). Placeholders in double braces will be replaced with the registered details before launch.

This policy explains what personal data AVUNARO processes, why, and what choices you have.

Who we are

AVUNARO is a business management platform operated by Individual Entrepreneur Rafael Kuldashev, {{LEGAL_ADDRESS}}, registration number 324090951 ("we", "us"). Questions about this policy: {{SUPPORT_EMAIL}}.

Two roles we play

For people who create an AVUNARO account (business owners and their team members) we are the data controller.

For the customers of those businesses who write to them through connected channels (Facebook Messenger, Instagram, WhatsApp, Telegram) we process data on behalf of the business, which is the controller of that data.

What we collect

Account data: name, email or messenger identifier, role, the businesses you have access to.
Business data you add: company profile, catalog, prices, files and instructions for AI agents.
Channel data: messages, names, usernames or phone numbers of customers who write to a connected business account, and the replies sent.
Integration credentials: access tokens for connected accounts, stored encrypted and never shown in the browser.
Technical data: logs, usage and cost metrics needed to run and secure the service.

How we use it

To provide the service: show conversations, prepare and send replies, keep orders and tasks.
To run AI agents configured by the business: messages and business data are sent to an AI model provider to generate drafts and replies.
To keep the service secure, prevent abuse and fix errors.
We do not sell personal data and do not use customer conversations to advertise to them.

Data from Meta platforms

When a business connects Facebook Messenger, Instagram or WhatsApp, we receive messages and profile details through the official Meta APIs only to provide the service to that business. We do not use this data for any other purpose, do not transfer it to data brokers, and delete it on request as described on the Data Deletion page.

Service providers

We use these providers to run AVUNARO; each processes data only on our instructions:

Anthropic (AI model provider) — generating replies and drafts.
Supabase (database hosting, EU) — storing account and business data.
Hetzner (servers, EU) — running the application and message processing.
Vercel — hosting the website and dashboard.
Meta and Telegram — delivering messages through the channels a business connects.

Retention

Customer conversations are kept for 24 months and then deleted automatically. Account and business data are kept while the account is active and deleted after the account is closed, except where the law requires us to keep records longer.

Isolation between businesses

Each business on AVUNARO has its own data, files, connections and AI agents. Data of one business is not available to another business, even when both belong to the same owner, unless the owner explicitly chooses to share it.

Your rights

You can request access to, correction of or deletion of your personal data, and object to its processing, by writing to {{SUPPORT_EMAIL}}. If you are a customer of a business that uses AVUNARO, you can also contact that business directly. See the Data Deletion page for how deletion works.

Changes

We will publish any changes to this policy on this page and update the effective date.