1. Who we are
Aviato is operated by Codeforge AB (registration number 559510-6047), Sankt Göransgatan 100, 112 45 Stockholm, Sweden. Codeforge AB is the controller of the personal data described in this policy, which follows the EU General Data Protection Regulation (GDPR).
2. Data we collect
We collect the information you provide directly: account details (name, email, company), billing information and the configuration of your projects and connections. We also collect usage data automatically, including platform telemetry, the schema of the databases you connect (names and types, never values) and the audit events your connectors send.
3. How we use your data
We use your data to operate and improve the Service, process payments, provide customer support, send service-related communications and enforce our terms. We may use aggregated, anonymized data for analytics and benchmarking purposes.
4. Signing in with Google
If you choose to sign in with Google, Aviato requests only the basic scopes openid, email and profile. We receive your name, email address and profile picture from Google, and use them solely to create your Aviato account, sign you in and show who you are in your workspace and its audit trail. We do not access your Gmail, Drive, Calendar or any other Google data, we do not use Google user data for advertising, and we do not sell it or transfer it to third parties. Aviato’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Aviato’s access at any time from your Google account settings (myaccount.google.com/permissions) and ask us to delete your account at [email protected].
5. Data sharing
We do not sell your personal data. We share data only with service providers who help us operate the platform (cloud hosting, payment processing, analytics, live chat), when required by law, or with your explicit consent. All third-party providers are bound by data processing agreements.
6. Cookies and tracking
We use essential cookies required for authentication and security. We use analytics cookies to understand how the Service is used. Our live chat, provided by Crisp IM SAS in France, stores a cookie once you open the chatbox so your conversation survives a page change. You can manage cookie preferences through your browser settings. We do not use third-party advertising trackers.
7. Data retention
We retain your account data for the duration of your subscription and for 30 days after cancellation. Audit events are retained according to your plan: 30 days on Free, 90 days on Pro and 1 year on Enterprise. Billing records are retained as required by applicable tax and financial regulations.
8. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete or export your personal data. You may also object to certain processing activities. To exercise these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the data protection authority where you live.
9. International transfers
Some of our service providers operate outside the European Economic Area, for example in the United States. When your data leaves the EEA, we rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or on the Standard Contractual Clauses.
10. Children’s privacy
The Service is not intended for users under the age of 18. We do not knowingly collect personal data from children.
11. Contact
For privacy-related inquiries, contact us at [email protected].