What you may provide
Structured answers, contact details for a request, and optional context shown on the relevant form.
What Avernic never needs
Passwords, recovery codes, government IDs, payment-card data, or account access on public forms.
What is stored
Submitted fields, required consent and version records, status, and the order, delivery, access, or support evidence needed for the service you request.
How long information is kept
See the detailed schedule below. If a period is not yet listed, Avernic has not finalized it.
Deletion or correction
Contact Avernic through the verified request process described below.
Identity Exposure access requests
The public private pilot request stores first name, email, state of residence, optional reason for interest, optional timing, the required self-only adult confirmation, separate optional marketing consent, request and consent records, dates, status, and whether required emails were sent. It does not collect addresses, phone numbers, usernames, identification documents, account information, incident evidence, research findings, or payment information. A final retention period for this new request class will be published only after the operating policy is approved.
What a completed Checkup stores
A completed submission may include email; eligibility and consent records; questionnaire and service versions; structured answers and optional free text; marketing and future paid report interest; source and basic UTM referral information; dates and status; and the structured result prepared from those answers. An optional comparison request may also store its version, one to three comparison categories, optional user-supplied ‘Other’ text, the separate comparison-notification choice, and the request date and time.
What not to submit
Do not submit passwords, recovery codes, Social Security or other government identifiers, identity documents, full account numbers, payment-card data, exact home addresses, device serial numbers, employer names, account IDs, or other authentication secrets. Avernic does not need account or device access.
What the Baseline Plan may store
The Baseline Plan may store eligibility attestations, a safety-screen disposition without incident details, a Free Checkup handoff identity when used, Direct Entry foundational setup, selected platforms and providers, contextual answers, intake and product versions, order and policy identities, price and currency, payment-provider references and status, policy-acceptance timestamps, generated report material and its version identities and hash, delivery and private-access records, transactional email status, and support or refund requests. It does not need account passwords, recovery codes, full card numbers, or card security codes.
Structured processing
Avernic prepares the Free Privacy Checkup result and Personalized Privacy Baseline Plan from the answers you submit using structured processing. Avernic does not currently send assessment answers or report content to an external AI provider or use that content to train an AI model. If this changes, notices will be updated before that use begins.
Limited human QA
An Avernic operator may review a submitted Checkup and add a limited internal note or review status to identify mapping errors, contradictory outputs, or edge cases. This does not change the participant-facing result into professional advice.
Referral and campaign attribution
Avernic may store basic referral or campaign information, such as UTM source, medium, and campaign, to understand how participants reached the Checkup and evaluate service acquisition and performance. Attribution does not affect recommendations, priority, ranking, or a privacy score and is not used for behavioral advertising.
Optional comparison requests
Avernic may use an optional comparison request to understand which privacy-tool categories participants want compared or explained and to prioritize research and future comparison material in aggregate. Avernic may notify a participant about the specifically requested comparison only when the participant separately opts in. Choosing categories is not notification consent, comparison-notification consent is not broader marketing consent, and broader marketing remains separately optional. Category interest and commercial availability do not affect recommendation eligibility, ranking, confidence, priority, or order. A comparison request does not make the free Checkup a continuous monitoring service.
Providers and tracking
Avernic uses providers for hosting, database storage, Stripe-hosted payment processing and automatic tax calculation, transactional email, business email, security, and site operations. The application does not currently use third-party marketing analytics, advertising pixels, or session-replay tools. Error operations may receive an error and affected route, but assessment answers and report content are not intentionally attached.
Payment and paid delivery
When a customer chooses a paid Avernic product, Stripe-hosted Checkout processes the eligible payment method, billing and tax-location information, applicable tax, payment, and refund details. Avernic receives bounded transaction and reconciliation records, including order, product, price, currency, tax, payment-provider, refund, and status information, but does not receive or store full payment-card numbers or card security codes. Questionnaire answers and report content are not placed in Stripe metadata, URLs, analytics, or routine logs. Raw Stripe webhook bodies are used for signature verification and are not retained as ordinary application records.
Local browser print or save
The Free Privacy Checkup result and a delivered personalized plan may be printed or saved locally through the participant’s browser. Avernic does not generate, receive, host, or retain that local PDF or printed copy. The underlying submitted information and hosted report follow the applicable retention rules below.
Retention schedule
Completed Checkup submissions are generally retained for up to 12 months unless deleted earlier. Comparison-request fields follow that same period; category choices and ‘Other’ free text are deleted with the submission. A recorded no for comparison notifications is part of the submission record and does not become marketing consent. Finalized Baseline source material, purchase snapshots, generated reports, order, payment, tax, refund, private-access, delivery, purchase-consent, support, and related audit records are retained while reasonably necessary to provide and secure the purchased product, maintain access, fulfill delivery and support obligations, administer refunds and chargebacks, prevent fraud, resolve disputes, and meet legal, tax, accounting, insurance, and recordkeeping duties. Closed contact and support requests may be kept for up to 24 months; marketing consent until withdrawal plus a minimal suppression record where needed; and routine application and security logs generally up to 90 days.
Deletion and correction
Avernic aims to acknowledge verified requests within 7 business days and complete them within 30 days when reasonably possible. Verification ordinarily uses control of the original email; a submission reference may be requested. Identity documents are not required for ordinary Checkup requests. Historical Checkup answers are not edited in place: request deletion and complete a new Checkup. Finalized Baseline source material, purchase snapshots, and generated reports are also not edited in place; correcting intake information does not regenerate or replace a purchased report.
Residual and minimal records
When a record is eligible and approved for deletion, deletion from active systems is completed as soon as reasonably practicable. Residual copies may temporarily remain through provider backup cycles. Minimal deletion-completion records and legal-consent evidence may be retained for up to 3 years. When needed under that rule, only minimal comparison-notification consent evidence may be retained; it excludes category choices, ‘Other’ text, assessment answers, report content, and QA notes. Minimal order, payment, refund, accounting, tax, and purchase-consent evidence may be retained for up to seven years when reasonably necessary for those obligations. That minimal record excludes questionnaire answers, foundational provider and platform answers, report content, private-access tokens, and private report URLs. Legal, security, abuse, fraud, chargeback, tax, accounting, insurance, or recordkeeping obligations may delay or limit deletion.
Contact hello@avernicprivacy.com for a privacy request.
Last updated August 10, 2026.