Privacy Policy

• Owner account data such as name, email, password hash and session data.
• Business profile data, public booking page copy, images and uploaded files.
• Service catalog data, prices, duration, staff assignments, working hours and booking rules.
• Customer contact data submitted through booking requests or public chat.
• Booking request details, status changes, notes and manage-booking token metadata.
• Client conversations, owner replies, AI draft suggestions and related notifications.
• Beta application data such as applicant contact details, business details, current booking method, biggest problem and optional message content.
• Email delivery records for account, booking and message notifications.
• Internal beta status records such as beta access state, contact email and founder notes where relevant.
• Technical logs, security events, anti-spam and rate-limit information.
• Essential cookies and local storage required for login sessions and public chat continuity.
• Optional analytics or marketing tag data only if the visitor grants the matching consent category in the cookie banner.

• To create and secure owner accounts.
• To create business booking pages and manage public service information.
• To receive, organize and manage booking requests.
• To support customer communication between clients and businesses.
• To prepare owner-approved AI draft suggestions when enabled.
• To protect public forms against spam, abuse and automated submissions.
• To send account verification, password reset, booking and message notifications.
• To review early access requests, contact beta applicants and plan guided onboarding.
• To operate the free beta and prepare future product improvements.
• To meet legal obligations where applicable.

For business owner accounts, beta applications and platform operation, the Avolura operator acts as controller. For customer data submitted to a business through a public booking page, the business is typically the controller and Avolura may act as processor by hosting the page, storing requests, organizing messages and sending notifications.

Business owners are responsible for providing any required privacy information to their own clients and for ensuring that their public booking page is used lawfully.

During the current free beta, Avolura does not collect setup fees, subscription fees, card details or in-app payments. Internal beta status records may be stored so the operator can manage access, support and future onboarding decisions.

If paid plans or payment processing are introduced later, this policy and related terms must be updated before payment data is processed.

Avolura can prepare draft replies for business owners. Drafts are suggestions only and are not sent to clients until the business sends a human-approved reply.

By default in local development and mock mode, AI draft generation does not send draft context to an external AI provider.

• Hosting provider used to run the application and store uploads.
• Email provider used for account, booking and message notifications when SMTP is configured.
• Database and cache infrastructure used to operate Avolura.
• Google Analytics / Google Tag Manager, only for optional analytics or marketing tags after consent.

Avolura retains account data, business data, customer requests, conversations, beta applications, uploads, logs and backups only for as long as needed for operation, security, legal obligations, dispute handling, abuse prevention or backup integrity. Exact retention periods depend on the configured production setup and legal operator.

Data deletion requests can be sent to privacy@avolura.com. Some data may remain in backups or logs for a limited period where technically or legally necessary.

Depending on applicable law, individuals may have rights to access, correct, delete, restrict or object to processing of their personal data, and to data portability. Requests can be sent to privacy@avolura.com.

If hosting, email delivery, support or AI providers process data outside the EU/EEA, the operator must use appropriate safeguards and review provider documentation before using those providers with real customer data.

Avolura uses essential session and security cookies for login and core product operation. Public chat may use local storage or a browser-held token to continue a conversation. Essential storage is required for the service and cannot be disabled through the cookie banner.

Optional categories are separated into analytics and marketing. Analytics can be used to understand page visits and product usage. Marketing can be used for future advertising or conversion tags. Optional Google tags are off by default and load only after the visitor grants the matching consent category.

Avolura uses Google Consent Mode with optional Google tags. The default consent state denies analytics and advertising storage before any decision is made. Visitors can accept all optional categories, reject optional categories, or save a custom choice. The choice is stored locally in the browser and can be changed through the privacy settings button.