Privacy Policy

Information We Collect

• Account email address and authentication credentials
• Uploaded files and documents (receipts, invoices, payslips, contracts, etc.)
• Structured data extracted from those documents
• Usage activity — reports generated, dashboards accessed, tools used
• Payment and billing information (processed by Creem — we do not store card details)

We collect only what is necessary to deliver the service. We do not manually review your documents.

How We Use Your Data

• To classify, structure, and store your uploaded documents
• To generate financial reports and power dashboard visualizations
• To manage your account, subscription, and access level
• To operate, secure, and support the service

We do not sell your personal data. We do not use your documents for advertising.

AI Processing

Document classification and data extraction are performed by automated AI systems powered by OpenAI, Anthropic (Claude), and Google Gemini. Processing is programmatic — no human reviews your documents. AVIntelligence is an independent product and is not affiliated with or endorsed by these providers.

To provide document processing, structured records, reports, and dashboard views, we may retain uploaded files, extracted fields, and AI-enriched outputs while they remain part of your workspace.

Infrastructure & Security

Your files and structured data are protected at every layer:

• Database & Storage (SOC 2 Type II) — row-level security enforced. Only your account can access your data.
• Hosting (SOC 2 Type II · ISO 27001) — global edge network with DDoS protection and TLS encryption in transit.
• OpenAI, Anthropic, Google — enterprise SOC 2 certified AI providers. Document processing is fully automated.
• Payments (PCI-DSS compliant) — no card or banking data is stored on our systems.
• Sensitive API keys are never exposed to the client. All document processing runs server-side in isolated edge environments.

Payments

Billing is handled by PCI-DSS compliant third-party payment processors. We receive confirmation of payment but do not store credit card or banking information on our systems. Their respective privacy policies govern how payment data is handled.

Data Retention

Documents, extracted fields, AI-enriched outputs, and related workspace records remain stored while you keep them in AVIntelligence so the service can provide storage, processing, reports, and dashboard views. You may delete individual files at any time from Smart Storage.

When a file is deleted, the file and its related primary records are removed from our active application systems. When an account is deleted, all documents, extracted fields, dashboards, reports, and identifying information (email, user ID) are removed from our production database and storage in a single atomic operation.

Payment records are retained in anonymized form. After account deletion, your subscription history is stripped of identifying fields — email and user ID are nulled — and the remaining non-identifying finance data (plan, tier, dates, provider transaction identifiers) is kept for chargeback, refund, and tax compliance purposes. These records cannot be used to re-identify you from our systems alone.

Short-window traces persist outside our active database and cycle out automatically:

• Database backups (disaster recovery only) — up to 7 days
• Application and function logs — up to 30 days, rolling
• AI processing records held by OpenAI, Anthropic, and Google under their own retention policies — typically 30 days for standard API usage
• Payment records held by Creem — retained under their terms and applicable payment industry regulations

Your Rights

• Access and download your data
• Delete individual documents or your entire account
• Update your account email or password
• Request clarification on how your data is used

Contact

For privacy-related questions or data requests, contact us at support@avintph.com

AVINTPH INFORMATION TECHNOLOGY SOLUTIONS · Philippines