Privacy Policy

Avenio Solutions (“Avenio,” “we,” “our,” or “us”), headquartered in Bengaluru, Karnataka, India, respects your privacy and is committed to protecting your personal and organizational data.

This Privacy Policy outlines how we collect, process, disclose, and safeguard information when you visit our website aveniosolutions.com (“Website”), procure our digital engineering and cybersecurity services, or utilize our proprietary enterprise AI product suite, including Avenio IQ™.

We adhere to applicable data protection legislations, including the Digital Personal Data Protection Act, 2023 (DPDPA) of India, the General Data Protection Regulation (GDPR) for European operations, and corresponding global privacy frameworks.

We collect information across three primary channels:

• Inquiry & Direct Communications: When you complete our contact or demo request forms, subscribe to updates, or correspond via email or phone, we collect your name, business email address, phone number, organization name, job title, and project details.
• Client Account & Billing Data: In executing client contracts, we process administrative contact credentials, corporate billing addresses, tax identifiers (such as GSTIN), and commercial transaction histories.
• Website Usage & Telemetry: We collect non-identifiable technical data including IP addresses, browser types, operating systems, referring URLs, pages viewed, and session durations via privacy-focused analytics cookies.

For organizations deploying or licensing our enterprise AI products—including Avenio IQ Vault, Avenio IQ Prism, Avenio IQ Assist, and Avenio IQ Pitch—we enforce stringent architectural safeguards:

• Tenant Data Isolation: Every enterprise client instance operates within logically segregated virtual private cloud (VPC) partitions. Customer documents ingested into Avenio IQ Vault are accessible solely by authenticated tokens issued to your organization.
• Vector Embeddings & Grounded RAG Security: When your documents are indexed for cognitive search, proprietary text is converted into mathematical vector embeddings stored in private, encrypted vector stores (AES-256). These indices remain dedicated to your account.
• Zero Data Retention (ZDR) on LLM Inferences: For document extraction (Prism) and conversational support (Assist/Pitch), calls made to enterprise underlying model APIs utilize commercial zero-data-retention endpoints that do not retain input logs or intermediate states on server nodes.
• Data Ownership: You retain complete, unrestricted ownership of all source files, raw data, prompts, and specific generated outputs. Avenio acts solely as a data processor regarding customer-provided content.

We process collected data exclusively for legitimate business purposes, including:

• Delivering, configuring, and supporting our engineering services and Avenio IQ products.
• Responding to your inquiries, scheduling discovery calls, and providing technical proposals.
• Processing invoices, verifying milestone completions, and managing commercial accounts.
• Preventing fraudulent access, mitigating cybersecurity threats, and enforcing our Terms of Service.
• Optimizing Website responsiveness, performance, and user interface ergonomics.
• Complying with statutory accounting, tax, and regulatory compliance mandates.

We do not sell, rent, or trade your personal or business data to advertisers or third-party data brokers. We may engage vetted sub-processors under strict Data Processing Agreements (DPAs) for:

• Enterprise Cloud Infrastructure: Tier-1 cloud providers (e.g., AWS, Microsoft Azure, Google Cloud) certified for SOC 2 Type II, ISO/IEC 27001, and HIPAA compliance.
• Enterprise Model API Gateways: Dedicated, zero-data-retention enterprise endpoints for natural language model inference.
• Communication & Invoicing: Secure email servers, CRM systems, and authorized payment processors.

As an organization specializing in defensive cybersecurity and secure software engineering, we implement multi-layered safeguards:

• Encryption: All data is encrypted in transit using Transport Layer Security (TLS 1.3) and at rest utilizing Advanced Encryption Standard (AES-256).
• Zero-Trust Access Controls: Role-Based Access Control (RBAC), multi-factor authentication (MFA), and least-privilege principles govern all internal systems.
• Vulnerability Audits: Continuous automated vulnerability scanning, periodic code audits, and penetration tests.

We retain personal and enterprise data only for as long as necessary to fulfill the purposes for which it was collected, satisfy contractual commitments, or comply with legal and accounting requirements.

Upon termination of an enterprise agreement or Avenio IQ subscription, clients may request a full export of their data. Customer records, uploaded documents, and tenant vector indices are permanently purged within thirty (30) days following account closure, unless legally mandated otherwise.

Depending on your jurisdiction, you possess specific statutory rights regarding your personal data:

• Right to Access: Request confirmation and copies of personal data processed by us.
• Right to Correction: Request correction or updating of inaccurate or incomplete personal records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal information where retention is no longer necessary.
• Right to Withdraw Consent: Revoke consent for processing at any time without affecting past lawful processing.
• Right to Grievance Redressal: Submit inquiries or complaints directly to our Data Protection Officer.