Know what Avernic collects—and what it never needs from you.
What you may provide
Structured answers, contact details for a request, and optional context shown on the relevant form.
What Avernic never needs
Passwords, recovery codes, government IDs, payment-card data, or account access on public forms.
What is stored
Only the submitted fields, required consent and version records, status, and bounded operational metadata.
How long information is kept
The detailed schedule below applies where approved; unapproved new request periods are not invented.
Deletion or correction
Contact Avernic through the verified request process described below.
Identity Exposure access requests
The public private-pilot request stores first name, normalized email, state of residence, optional reason for interest, optional timing, the required self-only adult confirmation, separate optional marketing consent, contract versions, timestamps, status, and bounded email-delivery metadata. It does not collect addresses, phone numbers, usernames, identification documents, account information, incident evidence, research findings, or payment information. A final retention period for this new request class will be published only after the operating policy is approved.
What a completed Checkup stores
A completed submission may include email; eligibility and consent records; questionnaire, rules, and eligibility versions; structured answers and optional free text; marketing and future-paid-report interest; source and basic UTM referral information; timestamps and status; and the structured preview/result generated by the deterministic rules. An optional comparison request may also store its contract or version, one to three comparison-category codes, optional user-supplied ‘Other’ category text, the separate comparison-notification choice (including an explicit false choice), and the trusted request timestamp.
What not to submit
Do not submit passwords, recovery codes, Social Security or other government identifiers, identity documents, full account numbers, payment-card data, exact home addresses, device serial numbers, employer names, account IDs, or other authentication secrets. Avernic does not need account or device access.
Structured processing
The free preview is generated from structured answers and deterministic application rules. Avernic does not currently send assessment answers to an AI provider or use assessment content to train an AI model. If this changes, notices will be updated before that use begins.
Limited human QA
An Avernic operator may review a submitted Checkup and add a limited internal note or review status to identify mapping errors, contradictory outputs, or edge cases. This does not change the participant-facing result into professional advice.
Referral and campaign attribution
Avernic may store basic referral or campaign information, such as UTM source, medium, and campaign, to understand how participants reached the Checkup and to evaluate the pilot. Attribution does not affect recommendations, priority, ranking, or a privacy score and is not used for behavioral advertising.
Optional comparison requests
Avernic may use an optional comparison request to understand which privacy-tool categories participants want compared or explained and to prioritize research and future comparison material in aggregate. Avernic may notify a participant about the specifically requested comparison only when the participant separately opts in. Choosing categories is not notification consent, comparison-notification consent is not broader marketing consent, and broader marketing remains separately optional. Category interest and commercial availability do not affect recommendation eligibility, ranking, confidence, priority, or order. A comparison request does not make the free Checkup a continuous monitoring service.
Providers and tracking
Avernic uses providers for hosting, database storage, transactional email, business email, security, and site operations. The application does not currently use third-party marketing analytics, advertising pixels, or session-replay tools. Error operations may receive an error and affected route, but Checkup answers are not intentionally attached.
Payment and paid delivery
No public checkout is active and no payment is currently accepted. The Complete Privacy Assessment is in development. Public accounts, hosted report downloads, server-generated PDFs, and automated paid-report delivery are not currently available.
Local browser print or save
The free Checkup may be printed or saved locally through the participant’s browser. Avernic does not generate, receive, host, or retain that local PDF or printed copy. The underlying submitted information is retained under the schedule below.
Retention schedule
Completed Checkup submissions are generally retained for up to 12 months unless deleted earlier. Comparison-request fields are part of that submission and follow the same period; category codes and ‘Other’ free text are deleted with the submission. An explicit false comparison-notification choice is part of the submission record and does not become marketing consent. QA notes are deleted with the Checkup or after 12 months, whichever comes first. Early-access requests are kept for 12 months after the last meaningful interaction; closed contact/support requests for 24 months; marketing consent until withdrawal plus a minimal suppression record where needed; and routine application/security logs generally up to 90 days.
Deletion and correction
Avernic aims to acknowledge verified requests within 7 business days and complete them within 30 days when reasonably possible. Verification ordinarily uses control of the original email; a submission reference may be requested. Identity documents are not required for ordinary Checkup requests. Historical answers are not edited in place: request deletion and complete a new Checkup.
Residual and minimal records
Live-system deletion is operator-managed and completed as soon as reasonably practicable. Residual copies may temporarily remain through provider backup cycles. A minimal deletion-completion record may be retained up to 3 years, and minimal legal-consent evidence up to 3 years after the submission is deleted. When needed under that rule, only minimal comparison-notification consent evidence may be retained for up to 3 years. Retained minimal evidence excludes category codes, ‘Other’ text, assessment answers, report content, and QA notes. Legal, security, abuse, fraud, or recordkeeping holds may delay deletion.
Notice version: free_pilot_assessment_data_v0_2. Effective: 2026-07-15. Last updated: 2026-07-15. Contact hello@avernicprivacy.com for a privacy request.
