Privacy Policy and Data Protection
Version 1.0 | March 2026
Scope
This Policy applies to all individuals and legal entities that maintain any legal, commercial or institutional relationship with Averionn, including clients, leads, website users, partners and suppliers.
Personally identifiable data (PII) is NEVER sent for AI processing. Only anonymised data is sent to Groq.
1. Data Controller
Company
- •Company Name: Averionn
- •Headquarters: Brasil
- •Website: www.averionn.com
- •Privacy Email: [email protected]
- •DPO: [email protected]
2. Data Collected
Averionn collects the following personal data:
Identification Data
- •Full name
- •Email address
- •Phone number
- •Company name
- •Business sector
- •Country of origin
Technical Data
- •IP address
- •Source channel
- •Policy version accepted
- •Consent date and time
3. Purpose of Processing
Data is processed for the following purposes:
- •Provision of contracted services
- •Sales process automation
- •Commercial communications with consent
- •Continuous service improvement
- •Compliance with legal obligations
- •Analysis of anonymised business metrics
4. Legal Basis
Brasil — LGPD (Lei 13.709/2018)
- •Consent of the data subject (Art. 7, I)
- •Performance of a contract (Art. 7, V)
- •Compliance with a legal obligation (Art. 7, II)
- •Legitimate interests (Art. 7, IX)
European Union / Portugal — GDPR (Regulation 2016/679)
- •Consent of the data subject (Art. 6(1)(a))
- •Performance of a contract (Art. 6(1)(b))
- •Compliance with a legal obligation (Art. 6(1)(c))
- •Legitimate interests (Art. 6(1)(f))
United States — CCPA
- •Right to know what personal information is collected
- •Right to delete personal information
- •Right to opt-out of sale of personal information
- •Right to non-discrimination for exercising CCPA rights
5. International Transfers
Averionn uses the following sub-processors:
| Provider | Service | Safeguard |
|---|---|---|
| Google LLC (USA) | Google Sheets, Gmail, Google Drive | Standard Contractual Clauses (SCC) — GDPR | Adequate agreement — LGPD |
| Groq Inc. (USA) | AI Processing | Anonymised data only — NO PII |
| n8n GmbH (Germany) | Automation orchestration | Local processing |
6. Data Subject Rights
Data subjects have the following rights:
- •Right of access
- •Right to rectification
- •Right to erasure (right to be forgotten)
- •Right to data portability
- •Right to object
- •Right to restriction of processing
- •Right to withdraw consent at any time
- •Right to lodge a complaint with supervisory authority
7. Data Retention
| Lead data | 24 months after last contact |
| Active client data | Contract duration + 5 years |
| Consent records | 10 years (legal obligation) |
| System logs | 12 months |
| Billing data | 10 years (tax obligation) |
8. Security
Averionn implements the following security measures:
- •Encryption of data in transit and at rest
- •Anonymisation of data before AI processing
- •Access control with secure credentials
- •Access audit logs
- •Regular backups
- •Data segregation by tenant
9. Cookies and Tracking
Averionn's website uses the following types of cookies:
- •Essential cookies: Required for website operation
- •Analytics cookies: Anonymous usage analysis (with consent)
- •Marketing cookies: Only with explicit consent
10. Opt-Out and Unsubscribe
The data subject can unsubscribe from communications at any time:
- •Clicking the unsubscribe link in any email
- •Sending email to [email protected]
- •Unsubscribe will be processed within 48 hours
- •After unsubscribe, no marketing communications will be sent
11. Supervisory Authorities
12. Updates
This policy may be updated periodically. In case of significant changes, data subjects will be notified by email with 30 days notice. Averionn does not sell personal data unless explicitly stated, ensuring opt-out rights.
Data Protection Officer (DPO)
AVERIONN © 2026 | [email protected] | www.averionn.com Version 1.0 | March 2026 | Registered in Brasil | LGPD | GDPR | CCPA Compliant