Privacy Policy
1. What we collect
When you check an entity, AVA records the entity you submitted, the verdict produced, the signals cited, and timestamps. When you sign in, AVA records an identifier issued by your chosen provider (Google, GitHub, Microsoft, LinkedIn, Facebook, Apple), your provider-supplied email, and the time you last accepted these terms. When you use a messaging platform integration (Telegram, Discord, Slack, WhatsApp), AVA stores the platform identifier and the channels the bot is authorised to monitor.
2. What we don't collect
AVA does not collect payment card details. Payments are handled by Stripe or the equivalent platform provider. AVA does not read message content from connected platforms beyond what is required to check entities present in those messages.
3. How we use it
We use submitted entities and verdicts to operate the service, improve detection quality, and publish high-confidence verdicts to community intelligence channels. We do not sell individual customer data.
4. Retention
Check records are retained for a period appropriate to your plan. Operator logs for debugging and security incident response are retained for up to 90 days. Delete-on-request is available at any time by emailing [email protected].
5. Data residency
AVA's production environment runs in AWS ap-southeast-2 (Sydney). Some third-party services we consult during analysis operate in other regions; queries made to those services leave ap-southeast-2.
6. Your rights
You can request a copy of the data we hold about you, correct it, or have it deleted, by emailing [email protected]. We aim to respond within 30 days.