Privacy Policy

Who this notice covers

Avana Digital Solutions LLC (“we,” “us,” or “our”) provides this notice for https://www.avanadigital.com, its website features, and the inquiries and transactions described below. Contact avanadigitalsolutions@gmail.com for privacy questions. Other linked businesses and services have their own notices. The business identified in your quote, invoice, or service agreement is responsible for that transaction.

Information collected and its sources

Contact and business information you submit, including name, email, business name, website, industry, goals, current tools, budgets, timing, preferences, booking requests, referrals you are authorized to provide, and support messages. Ava conversations include your messages, generated responses, recommendations, and the business profile inferred from your answers. If you use available sign-in or paid features, we also receive identity-provider account information, account identifiers, membership status, billing references, and payment status.

Hosting and security systems process technical information such as IP address, browser/device information, requested pages, request times, referring information when available, and error/security logs. Information comes from you, your browser, service providers involved in your request, and, when relevant, business information you direct us to review. We do not need sensitive personal information to answer an ordinary inquiry.

How information is used

Provide AI-assisted audits and recommendations; qualify inquiries; prepare quotes; arrange discovery calls; deliver websites, software setup, and support; manage accounts and subscriptions; and follow up on your requested services.

We also use relevant information to operate and improve services, understand demand and service performance, develop offerings, communicate lawful promotions, protect systems, resolve disputes, and comply with legal, tax, and accounting obligations. Marketing must respect applicable consent and opt-out requirements. We may use aggregated or de-identified information for business analysis where individuals cannot reasonably be identified; we do not authorize re-identification.

Ava sends conversation context and the business profile to an AI service through the configured Base44 integration or OpenAI API. Human Avana staff can review submitted information to prepare recommendations and provide service. Do not submit passwords, full payment-card numbers, health information, government identifiers, or private customer records in chat. AI output may be inaccurate; ask an advisor to review important recommendations.

Recipients and methods of disclosure

OpenAI Sites and Cloudflare provide hosting and database infrastructure. The configured AI integration uses Base44 or OpenAI to process conversation content. Google processes sign-in when enabled and receives technical requests for web fonts. Resend handles configured email notifications. Stripe processes payments and subscriptions when enabled, receiving billing/contact and purchase details through its hosted checkout. Full card numbers are entered with the payment provider, not in Ava.

Disclosures occur through website/browser requests, secured service APIs, hosted checkout or sign-in redirects, email/telephone communications, and business systems accessed by authorized personnel. Providers receive information relevant to their functions; some providers, such as payment and identity services, also process information under their own notices. We may disclose relevant records to professional advisers, authorities where legally required, or a potential successor in a business transaction subject to applicable safeguards. We may share project details with an affiliated business when needed for a service you request; affiliation alone does not authorize unrelated advertising use.

Cookies, tracking, and advertising

Ava uses a first-party, HttpOnly cookie to resume a requested conversation. Saved conversations expire after 180 days of inactivity; the chat includes a clear-saved-conversation control. When available, Google sign-in provides account identity and the site uses an authenticated session cookie. Clearing browser cookies does not itself delete server records.

As of the effective date, this website does not embed Meta Pixel, Google Analytics, advertising identifiers, session-replay recording, or cross-site behavioral advertising scripts. Visiting this website does not authorize unrestricted collection, sale, or sharing of your personal information. If advertising tracking or another materially different use is introduced, we must provide the applicable disclosures and choices and obtain consent where required before that processing. This notice does not override an existing opt-out.

The present website does not use technical visitor information for cross-context behavioral advertising, so there is no advertising tracker to disable in response to Global Privacy Control (GPC). Necessary operation and security processing continues. Older Do Not Track signals do not change those essential functions. For a sale/sharing or targeted-advertising opt-out request concerning information you supplied to the business, use the privacy-request contact below.

Retention

Saved Ava conversations expire after 180 days of inactivity. Clearing a conversation removes its saved conversational record; separate booking, account, payment, support, and legally required records may remain. Other information is retained according to the purpose for which it was collected, the duration of the customer relationship, applicable accounting or legal obligations, fraud prevention, and the need to resolve disputes. There is no permission here to keep all data indefinitely. Contact us about deletion or the retention applicable to your records; legal holds, transaction obligations, and necessary security records can limit deletion.

Security

The site uses HTTPS, HttpOnly session cookies, hashed session identifiers, server-side account and administrator authorization, request validation, and abuse-rate controls. Payment collection, when enabled, occurs on Stripe-hosted checkout; payment events are verified server-side.

No website, transmission method, or service provider can guarantee absolute security. Please keep access credentials private and report suspected unauthorized access through Customer support. Do not send passwords, card numbers, or order-access codes in a public message. These controls do not imply that every communication channel or third-party service has identical safeguards.

Your privacy choices and requests

Email avanadigitalsolutions@gmail.com with “Privacy request” and the relevant business name, or use Customer support. You may ask for access, a copy, correction, deletion, withdrawal of consent, restriction or objection to processing, or opt-out of sale/sharing or targeted advertising where applicable. You may unsubscribe from promotional emails or ask us to stop marketing; necessary order, safety, or account messages may continue.

Depending on your location and the law applicable to our business, rights may include data portability, limits on sensitive-data use, an authorized agent, appeal of a denied request, and non-discrimination for exercising rights. We may proportionately verify identity for access or deletion; do not send a government ID unless a necessary, secure method is arranged. An opt-out does not require creating an account. We respond within applicable legal deadlines; if we decline a request, you may reply with “Privacy appeal.” You may also contact your state privacy authority, attorney general, or relevant data-protection authority.

International visitors and legal grounds

We operate from the United States; our providers may process information in the United States and other countries. Where EU, EEA, UK, or another applicable law requires a legal basis, processing must rest on a requested contract or pre-contract steps, a legal obligation, legitimate interests such as service delivery and security balanced against your rights, or consent for activities requiring it. Consent can be withdrawn without affecting earlier lawful processing. Required safeguards for restricted international transfers must be in place; acceptance of this notice is not a waiver of transfer protections. Contact us for information about processing relevant to your request.

The rights and mandatory protections that apply where you live are preserved. This notice does not claim that all privacy laws apply to every transaction, or that a general policy replaces legally required consent.

Children

Our offerings are intended for adults and business customers, not directed to children under 13. We do not knowingly seek children’s personal information. If a child has submitted information, contact us so we can assess and delete it as required. A person must be legally able to enter the applicable transaction or act with authorized adult involvement.

Changes and contact

Effective September 20, 2026. We will post updates here with a revised date and provide additional notice or obtain consent when required for a material change. New wording does not retroactively authorize an incompatible use. Privacy and support contact: avanadigitalsolutions@gmail.com.