Privacy & Data Protection Policy

This Privacy & Data Protection Policy ("Policy") describes how Aventro Technologies, Inc.("Aventro," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our AI-driven investment due diligence platform.

This Policy applies to all users of our website, applications, and services. By using Aventro, you consent to the practices described in this Policy.

We are committed to compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant regulations.

We use your information for the following purposes:

• Provide and Improve Services: To operate the platform, process documents, generate AI analyses, and enhance features
• Account Management: To create and manage your account, authenticate access, and provide customer support
• Communication: To send service-related notifications, updates, and marketing communications (with your consent)
• AI Processing: To analyze documents, verify claims, calculate scores, and generate recommendations
• Security: To detect fraud, protect against unauthorized access, and ensure platform integrity
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Research and Development: To improve our AI models and develop new features (using anonymized data)

Under GDPR and similar regulations, we process your data based on:

• Contract Performance: Processing necessary to provide our services under our Terms of Service
• Consent: When you explicitly agree to specific processing activities
• Legitimate Interests: Processing that benefits our business while respecting your rights, such as fraud prevention and service improvement
• Legal Obligations: Processing required to comply with applicable laws

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations and resolve disputes
• Enforce our agreements and protect our rights

Specific retention periods:

• Account Data: Retained while your account is active, plus 3 years after deletion
• Deal and Evidence Data: Retained for 7 years after deal completion for compliance purposes
• Usage Logs: Retained for 2 years
• Marketing Preferences: Retained until you unsubscribe

You may request earlier deletion of your data, subject to our legal retention requirements.

Depending on your location, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Request limited processing of your data
• Objection: Object to certain processing activities
• Automated Decision-Making: Request human review of AI-based decisions

We implement robust security measures to protect your data:

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Infrastructure: Secure cloud hosting with SOC 2 Type II certified providers
• Monitoring: Continuous security monitoring and threat detection
• Employee Training: Regular security awareness training for staff
• Incident Response: Documented procedures for handling security incidents

Aventro is based in the United States. If you access our services from outside the US, your data may be transferred to and processed in the United States.

For transfers from the EU/EEA, we rely on:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with appropriate safeguards
• Providers certified under recognized frameworks

You may request a copy of our data transfer safeguards by contacting privacy@aventro.ai.

Aventro is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will promptly delete it.

If you believe a child has provided us with personal information, please contact us at privacy@aventro.ai.

We may update this Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting a notice on our website
• Sending an email to your registered address
• Displaying a notification in the platform

The "Last Updated" date at the top indicates when changes were last made. We encourage you to review this Policy periodically.

For questions about this Policy or to exercise your privacy rights:

If you are in the EU and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.