Privacy Policy
This Privacy Policy describes how Avidato ("Avidato", "we", "us", or "our") collects, uses, discloses, and protects your information when you use our services. By accessing or using Avidato, you consent to the practices described in this policy.
1. Information We Collect
We may collect the following types of information:
- Personal Information:
- Name, email address, and contact details
- Account credentials (username, password)
- Profile information you provide
- Payment and billing information (if applicable)
- Usage Data:
- IP address and device identifiers
- Browser type, operating system, and device information
- Pages visited, features used, and actions taken within the service
- Referring URLs and exit pages
- Date and time of access
- Cookies and Tracking Technologies:
- Session cookies for authentication and security
- Preference cookies to remember your settings
- Analytics cookies to understand usage patterns
- Third-party cookies for integrations and social media
- Communications:
- Support requests and correspondence
- Feedback, survey responses, and testimonials
- Other Information:
- Information you voluntarily provide through forms or interactive features
- Information from third-party sources, such as integrations or partners, where permitted by law
2. How We Use Your Information
We may use your information for the following purposes:
- Service Delivery:
- To create and manage your account
- To provide, operate, and maintain our services
- To process transactions and send related information
- Personalization:
- To tailor content and features to your preferences
- To remember your settings and preferences
- Communication:
- To send administrative messages, updates, and security alerts
- To respond to your inquiries and provide support
- To send marketing and promotional communications (with your consent, where required by law)
- Analytics and Improvement:
- To monitor and analyze usage, trends, and activities
- To improve and develop new features and services
- Security and Compliance:
- To detect, prevent, and address technical issues and security risks
- To comply with legal obligations and enforce our terms and policies
3. Data Sharing and Disclosure
We do not sell your personal information. We may share your information as follows:
- With Service Providers:
- Cloud hosting, analytics, payment processing, and customer support providers
- Contractors and consultants who assist in service delivery
- For Legal and Safety Reasons:
- To comply with legal obligations, court orders, or government requests
- To protect the rights, property, or safety of Avidato, our users, or others
- To detect and prevent fraud, abuse, or security threats
- Business Transfers:
- In connection with a merger, acquisition, reorganization, or sale of assets
- You will be notified of any changes in ownership or use of your information
- With Your Consent:
- We may share information with third parties when you give us explicit permission
4. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements.
6. Cookie Policy
We use cookies and similar tracking technologies to enhance your experience and understand how you use our service. You can manage your cookie preferences through the cookie consent banner displayed on our site.
Types of Cookies We Use:
- Necessary Cookies (Always Enabled):
- Session Token: Maintains your authentication session. Essential for logging in and staying logged in. HttpOnly, Secure, expires after 30 days.
- CSRF Token: Protects against Cross-Site Request Forgery attacks. Essential for security when submitting forms. HttpOnly, Secure.
- Callback URL: Stores your intended destination after login for proper redirect. HttpOnly, Secure.
- Analytics Cookies (Opt-In):
- Tracks anonymous page views and user interactions to help us understand how you use our service
- Only enabled if you click "Mmm... Sweet!" on the cookie consent banner
- Expires after 24 hours
- No personal information is stored in analytics cookies
- Preference Cookies (Optional):
- Remember your settings such as theme preference, language selection, and other customizations
- Accessible to JavaScript for client-side functionality
- Expires after 1 year
Cookie Consent Management:
When you first visit Avidato, you will see a cookie consent banner with two options:
- "Accept all Cookies" - Accepts all cookies including analytics tracking
- "Only necessary cookies" - Disables analytics cookies while keeping necessary cookies for authentication and security
Closing the banner (X button): If you close the cookie banner without selecting an option, we will treat this as selecting "Only necessary cookies" to comply with privacy regulations. This means only essential authentication and security cookies will be enabled, while analytics cookies will be disabled.
Your preference is saved for 1 year. You can change your cookie preferences at any time by clearing your browser cookies and refreshing the page.
Cookie Security:
- HttpOnly Flag: Authentication cookies cannot be accessed by JavaScript, protecting against XSS (Cross-Site Scripting) attacks
- Secure Flag: Cookies are only transmitted over HTTPS connections in production
- SameSite Attribute: Prevents cookies from being sent in cross-site requests, protecting against CSRF attacks
- Encryption: Session tokens are encrypted JWT tokens validated on every request
Your Cookie Rights:
- You can accept or reject analytics cookies at any time using our consent banner
- You can delete cookies from your browser settings at any time
- You can configure your browser to refuse cookies (though this may limit functionality)
- Refusing cookies will not prevent necessary authentication cookies from being used
7. Your Rights and Choices
Depending on your location, you may have the right to access, correct, update, or delete your personal information. You may also object to or restrict certain processing of your data. To exercise these rights, please contact us at support@avidato.com.
8. Children's Privacy
Avidato is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. By using our services, you consent to the transfer of your information to the United States and other jurisdictions as necessary.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date. Your continued use of the service after such changes constitutes your acceptance of the new policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at support@avidato.com.