Updated: 24.06.2026

Privacy Policy

1. Information We Collect

Avernox collects information necessary to provide, maintain, and improve the Platform. The categories of information we collect are:

Account information: When you register, we collect your name, email address, company name, job title, and billing details. This information is required to create and manage your account and subscription.

Operational data: As you use the Platform, we process order data, return records, inventory states, shipping events, and customer interaction data that you input or connect through integrations. This data belongs to you — Avernox processes it solely to deliver the Platform's services.

Usage and technical data: We automatically collect information about how you interact with the Platform, including log data, device type, IP addresses, browser version, and feature usage patterns. This helps us diagnose issues, maintain security, and improve the Platform experience.

2. How We Use Your Data

Avernox uses the information we collect to: create and manage your account; deliver and operate the Platform's core functionality; process transactions and send related communications including invoices and receipts; provide customer support and respond to enquiries; send product updates, maintenance notices, and service announcements; and conduct internal analytics to improve Platform performance, reliability, and features.

We do not use your operational data — including order data, customer records, or inventory information — for any purpose outside of delivering the services you have subscribed to. We do not sell data, build advertising profiles, or share operational data with third parties for commercial gain.

2.1 Operational Use

Operational data you submit to the Platform — including customer records, order histories, return events, and inventory states — is processed exclusively to power the workflows and modules you have activated. Avernox does not analyse, aggregate, or repurpose this data for product development, benchmarking, or any commercial purpose without your explicit consent.

Where you connect third-party integrations (such as Shopify, ShipBob, or Zendesk), data flows between systems are governed by the permissions you have configured and the privacy terms of those third-party providers. Avernox is not responsible for the data practices of third-party services you connect to the Platform.

2.2 Communications

Avernox may send transactional communications (account confirmations, security alerts, invoices) and operational communications (maintenance windows, platform updates, integration notices) without requiring separate consent, as these are necessary for your subscription.

With your consent, we may also send marketing communications about new features, case studies, and platform improvements. You may opt out of marketing communications at any time using the unsubscribe link in any email or by updating your notification preferences within the Platform.

3. Data Sharing & Third Parties

Avernox does not sell, rent, or trade your personal data or operational data to any third party. We share information only in the following limited circumstances:

Service providers: We work with trusted vendors who support delivery of the Platform — including cloud infrastructure providers, payment processors, and security services. These providers are contractually bound to process data only on Avernox's instructions and in accordance with this Privacy Policy.

Business transfers: In the event of a merger, acquisition, or sale of Avernox's business, your data may be transferred to the successor entity. We will notify you of any such transfer and your options regarding your data prior to any change taking effect.

Legal requirements: Avernox may disclose information where required by applicable law, regulation, court order, or governmental authority. We will notify you of any such disclosure where legally permissible to do so.

4. Data Retention & Security

Avernox retains your account and operational data for as long as your subscription is active and for up to 24 months following termination, unless you request earlier deletion or a longer retention period is required by applicable law. After the retention period, data is securely deleted from all production and backup systems.

You may request a full export of your operational data at any time from within the Platform, or by contacting support@avernox.com. Upon account termination, export requests must be submitted within 30 days. After this window, data deletion may begin automatically.

Avernox protects your data using industry-standard technical and organisational measures, including: TLS 1.2+ encryption for all data in transit; AES-256 encryption for all data at rest; role-based access controls and least-privilege access policies; multi-factor authentication for internal systems; regular independent penetration testing; and SOC 2 Type II compliance for applicable infrastructure.

5. Your Rights & Contact

Depending on your location and applicable privacy regulations — including GDPR, CCPA, and equivalent legislation — you may have the following rights in relation to your personal data: the right to access a copy of the personal data we hold about you; the right to correct inaccurate or incomplete information; the right to request deletion of your data ("right to be forgotten"); the right to restrict or object to certain processing; the right to data portability in a structured, machine-readable format; and the right to withdraw consent where processing is based on consent.

To exercise any of these rights, contact privacy@avernox.com. We will respond within 30 days of receiving a verified request.

5.1 Data Subject Rights

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with comprehensive data protection laws, you have the right to lodge a complaint with your local supervisory authority if you believe your rights have not been respected.

Avernox's Data Protection Officer can be reached at dpo@avernox.com. We take all privacy complaints seriously and will investigate and respond to each one promptly. Where a complaint cannot be resolved directly, we will provide guidance on the appropriate escalation route.

5.2 Cookies & Tracking

Avernox uses cookies and similar tracking technologies to operate and improve the Platform. Essential cookies are required for the Platform to function and cannot be disabled. Analytics cookies help us understand how users interact with features — these are only set with your consent.

You may manage cookie preferences at any time from the Platform's settings panel or by configuring your browser. Disabling non-essential cookies will not affect your ability to use the Platform's core functionality. Avernox does not use cookies to track your activity across third-party websites or for advertising purposes.

5.3 Policy Updates & Contact

This Privacy Policy was last updated on 03 June 2026. Avernox reviews and updates this policy periodically to reflect changes in our practices, legal requirements, or Platform capabilities. When we make material changes, we will notify you via email and display a prominent notice in the Platform at least 14 days before changes take effect.

For all privacy-related enquiries:

Privacy team: privacy@avernox.com

Data Protection Officer: dpo@avernox.com

Legal matters: legal@avernox.com