Welcome to Aveno Software Solutions (trading as Aveno Systems). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy describes how we collect, use, process, and disclose your information, including personal data, in conjunction with your access to and use of our managed digital operating systems, integrations (including Meta APIs), and website.

This policy applies to all information collected through our website (avenosystems.com), our services, and any related applications or APIs.

For the purposes of applicable data protection legislation, the data controller is:

• Legal Name: Aveno Software Solutions
• Trading Name: Aveno Systems
• Address: Downtown Cairo, Egypt
• Jurisdiction: Arab Republic of Egypt

If you have any questions or concerns about this privacy policy, or our practices with regards to your personal information, please contact us at [email protected].

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and services, or when you contact us.

• Contact Information: Names, email addresses, phone numbers, and other similar contact data.
• Business Information: Company name, job title, industry, and business requirements.
• Client System Data: Information processed on your behalf through our managed digital operating systems (e.g., structured databases, operational reports).
• API Credentials: Access tokens, API keys, and configuration data required to integrate platforms (e.g., Meta APIs, WhatsApp Cloud API).
• Technical/Usage Data: IP addresses, browser types, and log data generated by using our services.
• Cookies: Essential cookies strictly necessary for the operation of our website and services.

We use personal information collected via our Website and Services for a variety of business purposes described below:

• Service Provision: To build, deploy, and manage your digital operating systems and communication channels.
• Customer Support: To respond to your inquiries and solve any potential issues you might have with the use of our Services.
• System Improvement: To analyze usage patterns and improve the functionality and security of our services.
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our agreements.

We process your personal information only when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, including:

• Contractual Necessity: Processing is necessary to fulfill our terms of service or a contract with you.
• Legitimate Interest: Processing is necessary for our legitimate business interests, which do not override your fundamental rights.
• Consent: You have given us clear consent to process your personal information for a specific purpose.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

We share information with third parties only when necessary to provide our services and operate our business, strictly limited to operational tools:

• Infrastructure Providers: Secure hosting environments for PostgreSQL databases and n8n workflows.
• Platform Partners: Such as Meta Business Suite, to facilitate API integrations.

We only share the minimum necessary data required for these tools to function. We do not sell your personal data to any third parties.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process:

• Encryption in Transit: All data transmissions are secured using TLS 1.3 / HTTPS encryption.
• Data Isolation: Client data is stored in isolated PostgreSQL tenant schemas to prevent cross-contamination.
• Credential Protection: All API credentials, tokens, and keys are encrypted at rest using industry-standard algorithms.
• Access Control: Strict role-based access control (RBAC) and principle of least privilege apply to all our internal staff.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law.

• Retention: Active client data is retained for the duration of the service contract.
• Export: Upon contract termination, data can be exported and provided to the client within 14 business days upon request.
• Deletion: All client system data, API keys, and personal information are permanently securely deleted within 30 days of contract termination.

To request immediate data deletion, please contact [email protected].

In alignment with global data privacy standards (including GDPR principles), you possess the following rights regarding your personal data:

• Access: The right to request copies of your personal data.
• Rectification: The right to request that we correct any information you believe is inaccurate.
• Erasure: The right to request that we erase your personal data, under certain conditions.
• Data Portability: The right to request that we transfer the data that we have collected to another organization, or directly to you.
• Withdraw Consent: The right to withdraw consent where we are relying on your consent to process your personal information.
• Lodge a Complaint: The right to lodge a complaint with a supervisory authority about our processing of your personal data.

Our services are strictly Business-to-Business (B2B). We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

We are headquartered in the Arab Republic of Egypt, and your information is processed here. Whenever we transfer your personal data internationally, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards required by applicable data protection laws.

Our website or services may contain links to third-party websites. We are not responsible for the privacy practices or the content of those third-party sites. We encourage users to read the privacy policies of any website they visit.

We may update this privacy policy from time to time in order to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this website and, where appropriate, via email.

If you have questions or comments about this policy, or wish to exercise your data rights, please contact our team: