Privacy Policy

Avernic is operated by Shield Analytics LLC, a Florida limited liability company.

In this Policy, “Avernic,” “we,” “us,” and “our” mean Shield Analytics LLC.

Contact us at hello@avernicprivacy.com.

This Policy applies to:

• visits to the Avernic site;
• the Free Privacy Checkup;
• optional comparison requests;
• Complete Privacy Assessment founding-access requests;
• Identity Exposure private-pilot access requests;
• contact and support requests;
• privacy, correction, and deletion requests;
• the Personalized Privacy Baseline Plan and other paid orders offered through the site;
• report delivery, private access, support, refunds, and payment reconciliation; and
• related security and site operations.

The consumer services described as publicly available are intended for people who:

• are at least 18 years old;
• are located in the United States; and
• use the service for personal or household purposes.

Avernic is operated from the United States.

Information may be processed in the United States and in other locations where Avernic’s service providers lawfully operate.

The public services are not intentionally offered to people outside the United States.

Depending on the interaction you choose, Avernic collects the categories described below.

Free Privacy Checkup

Avernic collects:

• email address;
• eligibility attestations;
• the legal-consent bundle version associated with the submission;
• questionnaire versions;
• service versions;
• structured answers;
• optional free text;
• marketing choice;
• interest in a future paid report;
• the planned price or offer presented at the time;
• source page;
• basic referral or campaign information, such as UTM source, medium, and campaign;
• submission reference;
• submission status;
• timestamps; and
• the structured result prepared from the submitted answers.

The legal-consent bundle identifies the Terms, Privacy Policy, and Assessment Data Notice presented for that submission.

Personalized Privacy Baseline Plan

When a customer chooses the Baseline Plan, Avernic may collect:

• a delivery email address;
• eligibility attestations and a safety-screen disposition without incident details;
• a Free Checkup handoff identity when used;
• Direct Entry foundational setup, selected platforms and providers, contextual answers, and finalized intake information;
• questionnaire, intake, product, report, renderer, recommendation, policy, and consent versions;
• purchase-review acknowledgments and timestamps;
• order, product, price, currency, tax, payment, refund, and payment-provider references and statuses;
• the immutable purchase snapshot and generated report material, including bounded identities and integrity hashes;
• private-access, delivery, transactional-email, support, dispute, and refund records; and
• bounded operational and audit evidence needed to secure, reconcile, and support the purchase.

Avernic does not need or intentionally collect account passwords, recovery codes, full payment-card numbers, or card security codes for the Baseline Plan.

Baseline browser and server draft continuity

During Baseline intake, Avernic may use first-party browser credentials for continuity and may keep a bounded server draft. Active server-draft authority expires within 24 hours; expired answer-bearing server drafts are cleared by scheduled cleanup. The same browser may also keep a bounded session draft containing the answers and context needed to recover from a refresh or interruption. Finalized source material, a purchase snapshot, and a generated report are separate records from an unfinished draft.

A delivered report may keep optional action completion and customer-entered tracker rows in that browser's local storage. That local progress is not needed to generate the report and is not transmitted merely because it is stored locally.

Optional comparison request

Avernic collects:

• the request version;
• one to three selected comparison categories;
• optional user-supplied “Other” category text;
• the separate comparison-notification choice, including a recorded “no”;
• the notice or consent version; and
• request date and time.

Complete Privacy Assessment founding access

Avernic collects:

• first name;
• email address;
• the decision the requested report should help with;
• eligibility confirmation;
• request status;
• timestamps; and
• a separate optional marketing choice.

A founding-access request does not constitute a purchase.

Identity Exposure private-pilot access

Avernic collects:

• first name;
• email address;
• state of residence;
• optional reason for interest;
• optional timing;
• confirmation that the request is for the applicant;
• confirmation that the applicant is an adult;
• request status;
• timestamps; and
• a separate optional marketing choice.

The public access request does not collect:

• exact addresses;
• identification documents;
• account details;
• research evidence; or
• payment information.

If an applicant is accepted into a private pilot that requires materially different information, Avernic will provide an additional notice before collecting it.

Contact and support

Avernic collects:

• name when provided;
• email address;
• selected category;
• message;
• related acknowledgments;
• support status; and
• timestamps.

Do not include passwords, authentication secrets, government identifiers, full account numbers, exact home addresses, identity documents, or other unnecessary sensitive information in a message.

Technical operations

Avernic and its service providers process routine hosting, application, database, email, security, access, and error information needed to operate and protect the site.

This information may include:

• IP address;
• browser or user-agent information;
• device or operating-system information made available through the request;
• requested route;
• date and time;
• email-delivery status;
• security events;
• error events; and
• diagnostic information.

Avernic configures application-level error reporting not to intentionally attach:

• Checkup answers or optional free text;
• report content;
• passwords or authentication secrets;
• access, report, delivery, or unsubscribe tokens;
• full request URLs or referrer values containing sensitive tokens; or
• raw sensitive query-string values.

Infrastructure, hosting, and security providers may still process routine request metadata, such as IP address, date and time, user-agent information, and requested route, as necessary to deliver and protect the service.

Browser state and unfinished Checkups

Before submission, unfinished Free Privacy Checkup answers remain temporarily in the open page’s application state and are not intentionally sent to Avernic.

Refreshing the page, closing the page, navigating away, or losing the browser session may erase unfinished answers and progress.

Avernic does not currently provide persistent draft storage or resume-after-closing for an unfinished Free Privacy Checkup.

Limited quality assurance

An authorized operator may add:

• a limited internal note;
• a quality-control result;
• a verification status; or
• a review status

associated with a submitted Checkup.

Internal notes should not be used to copy unnecessary sensitive information.

Optional public-funnel Analytics

When the Analytics category is on, Global Privacy Control is not active, and Avernic's server analytics gate is enabled, Avernic may send HeyCatch:

• a closed public-funnel event name;
• a purpose-separated HMAC-derived pseudonymous journey identifier;
• a non-sensitive public page or stage identifier;
• coarse device class, browser family, operating-system family, and viewport-size buckets;
• coarse acquisition, elapsed-time, and validation-reason buckets; and
• normalized and length-limited UTM source, medium, and campaign values when present.

Avernic does not send HeyCatch questionnaire answers or labels, form values, free text, DOM or click text, email, name, address, raw URLs or referrers, exact IP address as an event property, full user-agent string as an event property, database identifiers, Stripe objects, order or payment identifiers, report or plan references, access tokens, private-link fragments, support content, or operator content.

Ordinary network transport may expose routine request metadata, such as an IP address and the server transport's user-agent information, to the receiving infrastructure. HeyCatch code does not run in the browser, and this integration does not create a HeyCatch browser cookie, local-storage identifier, autocapture, or session replay.

Payment confirmation, report generation, delivery, private-plan access, and refund events are not currently sent.

Avernic uses information to:

• provide the Free Privacy Checkup result;
• respond to access requests;
• respond to contact and support requests;
• evaluate eligibility and prepare, generate, deliver, and provide private access to a requested Baseline Plan;
• create and reconcile an order, payment, applicable tax, refund, delivery, and access lifecycle;
• send requested transactional delivery and service messages;
• support a purchase, delivery, access, refund, dispute, or privacy request;
• respond to correction, deletion, and privacy requests;
• debug and troubleshoot;
• improve Checkup questions, results, instructions, and clarity;
• conduct limited operator quality assurance;
• produce aggregate service statistics;
• evaluate service completion and performance;
• secure and operate the site;
• detect and investigate fraud, abuse, unauthorized access, or security events;
• maintain records of notices and choices;
• comply with law;
• establish, exercise, or defend legal claims; and
• respond to a participant’s separately requested founding-access, private-pilot, comparison, or product-availability notice.

Marketing is sent only when separately authorized.

Referral and campaign information

Referral and campaign information helps Avernic understand how participants reached the Checkup and evaluate service acquisition and performance.

It does not affect:

• recommendations;
• report eligibility;
• ranking;
• confidence;
• priority;
• order; or
• a privacy score.

It is not used for behavioral advertising.

Optional comparison requests

Avernic uses an optional comparison request to:

• understand which privacy-tool categories participants want compared or explained;
• prioritize research and future comparison material in aggregate; and
• notify a participant about the specifically requested comparison only when the participant separately opts in.

Choosing categories is not notification consent.

Comparison-notification consent is not broader marketing consent.

Broader marketing remains separately optional.

Category interest, commercial availability, affiliate status, commission, or referral opportunity does not affect recommendation eligibility, ranking, confidence, priority, or order.

A comparison request does not create a continuous monitoring service.

Optional Analytics

Avernic uses consented optional Analytics only to understand a small set of public acquisition and funnel steps, such as whether an approved public page or questionnaire stage was reached or completed. Analytics does not affect product functionality, eligibility, recommendations, scores, confidence, priority, ranking, price, report content, or customer support decisions.

Avernic prepares the Free Privacy Checkup result and Personalized Privacy Baseline Plan from answers submitted by the participant using structured processing.

Avernic may use deterministic rules, templates, software-assisted processing, and limited human review.

Avernic does not currently:

• send assessment answers to an external AI-model provider;
• send report content to an external AI-model provider; or
• use assessment or report content to train an AI model.

The Free Privacy Checkup does not make decisions that produce legal or similarly significant effects concerning a participant.

These restrictions do not prevent Avernic from using synthetic test data that does not contain, reproduce, or derive from participant information.

If this practice changes, Avernic will update the applicable notice before beginning the materially different use and will obtain consent where required.

Avernic uses service providers for functions such as:

• hosting;
• database storage;
• transactional email;
• business email;
• security;
• error diagnosis;
• site operations; and
• Stripe-hosted payment processing and automatic tax calculation.

These providers may process information to provide their contracted services to Avernic and to meet their own applicable security, fraud-prevention, compliance, and legal obligations.

Depending on the function performed:

• hosting and database providers may process submitted content, contact identifiers, submission references, and operational metadata;
• transactional and business-email providers may process names, email addresses, message content, and delivery information;
• security and error-diagnosis providers may process technical, security, and diagnostic information;
• Stripe may process a delivery email address, payment method and billing information, tax-location information, payment and refund details, and bounded order and product identifiers through Stripe-hosted Checkout; Avernic does not receive or store full payment-card numbers or card security codes; and
• legal, accounting, insurance, and security advisers may receive only the information reasonably necessary for the professional service or matter.

Avernic may disclose information when reasonably necessary to:

• comply with law, legal process, court order, or a valid government request;
• protect the rights, safety, property, or security of Avernic, participants, service providers, or others;
• investigate fraud, abuse, unauthorized access, or a security incident;
• enforce applicable terms;
• obtain legal, accounting, insurance, security, or other professional advice; or
• establish, exercise, or defend a legal claim.

Business transfers

If Shield Analytics LLC or the Avernic business is involved in a merger, financing, reorganization, sale of assets, acquisition, insolvency, or similar transaction, relevant information may be disclosed or transferred as part of that transaction.

A successor receiving personal information will remain subject to the privacy commitments applicable to that information unless the individual receives legally sufficient notice of a change.

Optional Analytics providers

When optional Analytics is enabled and consented, Avernic uses HeyCatch, Inc. as an analytics service provider. The reviewed integration uses HeyCatch's server service, and HeyCatch identifies PostHog US Cloud as a subprocessor for SDK analytics processing. The consented event data described in this Policy is processed and stored in the United States under the reviewed provider configuration.

Avernic does not use this integration for advertising, cross-site behavioral tracking, customer enrichment, browser autocapture, or session replay.

Avernic may link to third-party products, official documentation, support pages, or vendors.

When you follow an external link, the destination provider may collect information under its own privacy policy.

If an affiliate or referral link is used, the destination provider or affiliate network may receive referral information needed to attribute the visit or transaction.

Avernic does not place affiliate-network tracking pixels or affiliate-network cookies on AvernicPrivacy.com and does not currently send server-to-server conversion postbacks. After you follow an affiliate link, the destination provider or affiliate network may use its own attribution technologies under its privacy practices.

Avernic will update this Policy, provide appropriate disclosure, and implement any notice, consent, opt-out, or legally recognized preference-signal handling required by applicable law before enabling materially different commercial tracking.

Avernic does not currently use:

• third-party advertising pixels;
• cross-site behavioral-marketing analytics; or
• session-replay tools.

Basic UTM attribution may be stored with a submitted Checkup.

Avernic and its service providers may use strictly necessary first-party cookies or similar technologies for security, private access, session continuity, submission integrity, purchase continuity, and requested browser-side functionality.

The unfinished Free Privacy Checkup does not currently use persistent browser storage. A completed Free result may automatically save a first-party private recovery credential when that capability is enabled and configured.

Baseline intake may use first-party continuity credentials, a bounded server draft, and a bounded browser session draft. A delivered Baseline report may use local browser storage for optional action progress and customer-entered tracker rows. Clearing or restricting these technologies may interrupt the journey, erase local progress, or make private access unavailable.

Some other site features may use local browser storage when the feature expressly provides local progress or preferences.

Avernic does not currently use advertising cookies or cross-site behavioral-advertising trackers.

Avernic does not currently:

• sell personal information;
• share personal information for cross-context behavioral advertising; or
• use personal information for targeted advertising.

Avernic does not respond to legacy browser “Do Not Track” signals through a separate technical mechanism because the site does not use cross-site behavioral-advertising trackers.

If Avernic later engages in a practice for which applicable law requires recognition of Global Privacy Control or another legally recognized opt-out preference signal, Avernic will honor valid signals as required and update this Policy before beginning that practice.

Browser settings may allow you to clear or restrict cookies and local storage. Restricting necessary browser technologies may prevent portions of the site from functioning properly or erase locally stored progress for a feature that expressly uses local storage.

Privacy choices and Global Privacy Control

Avernic stores one strictly necessary, first-party privacy-preference cookie to remember the Analytics choice for up to 180 days. The preference contains a format version, an Analytics choice, and, for an affirmative choice, the applicable legal-bundle version. It contains no customer, device, journey, session, or event identifier. Rejecting or withdrawing Analytics does not disable essential product functionality.

Analytics is off by default. Accept All turns it on only when the current analytics disclosure is effective and Global Privacy Control is not active. Reject Optional keeps it off. The Privacy choices control supports a separate Analytics switch, saving the choice, reopening the control, and withdrawal. Withdrawal immediately blocks future Analytics events.

Avernic honors Global Privacy Control for optional Analytics at both the browser and server boundaries. When the signal is active, no analytics event request is initiated by the browser and the server does not call the sender, even if a stored preference appears to grant Analytics. Accept All cannot override the signal.

HeyCatch does not create a browser cookie or local-storage identity in this server-only integration.

The Free Privacy Checkup and a delivered personalized plan may include a browser-based print or save function.

A participant may use their browser to print the result or save a PDF locally on their own device.

Avernic does not generate, receive, host, or retain that locally created file.

Avernic may retain the underlying submitted information as described in this Policy.

The participant is responsible for securing any local file created through the browser.

Avernic applies different retention periods based on the type of record and why it is needed.

Completed Free Privacy Checkup submissions

Completed Checkup submissions are retained for up to 12 months after submission unless deleted earlier.

Comparison-request information

Comparison-request information is part of the completed Checkup submission and follows the same period of up to 12 months.

Category choices and optional “Other” text are deleted with the submission.

A recorded “no” for comparison notifications remains part of the submission record during that period and does not become marketing consent.

Internal quality-assurance notes

Internal Checkup quality-assurance notes are deleted with the Checkup or after 12 months, whichever occurs first.

Complete Privacy Assessment founding-access requests

Founding-access requests are retained for up to 12 months after the later of the request date or the most recent substantive communication with the applicant, unless deleted earlier.

Personalized Privacy Baseline Plan records

Finalized Baseline source material, purchase snapshots, generated reports, order, payment, tax, refund, private-access, delivery, purchase-consent, support, and related audit records are retained while reasonably necessary to provide and secure the purchased product, maintain private access, fulfill delivery and support obligations, administer refunds and chargebacks, prevent fraud, resolve disputes, and meet legal, tax, accounting, insurance, and recordkeeping duties.

Finalized purchase snapshots and generated reports are immutable records. Avernic does not edit them in place. A correction or privacy request does not itself regenerate or replace a purchased report.

Minimal order, payment, refund, accounting, tax, and purchase-consent evidence may be retained for up to seven years when reasonably necessary for those obligations. That minimal evidence excludes questionnaire answers, foundational provider and platform answers, report content, private-access tokens, and private report URLs.

If a request converts into an active paid relationship, Avernic will provide the applicable paid-product notice before collecting materially different information.

Identity Exposure private-pilot access requests

Identity Exposure private-pilot access requests are retained for up to 12 months after the later of the request date or the most recent substantive communication with the applicant, unless deleted earlier.

If an applicant is accepted into a private pilot, additional information will be governed by the specific notice and approved operating policy presented before collection.

Contact and support requests

Contact and support requests are retained for up to 24 months after closure.

A record may be retained longer when reasonably necessary for an active dispute, legal hold, fraud investigation, or security matter.

Marketing consent

Marketing consent is retained until withdrawal.

After withdrawal, Avernic may retain a minimal suppression record for as long as reasonably necessary to honor the withdrawal and prevent accidental re-enrollment.

Routine application and security logs

Routine application and security logs are generally retained for up to 90 days.

A particular event may be retained longer when reasonably necessary for investigation, remediation, fraud prevention, legal compliance, or a legal hold.

Deletion-completion records

Minimal deletion-completion records may be retained for up to three years.

These records may contain only information such as:

• request type;
• received date;
• completion date;
• verification method;
• responsible operator; and
• hold status.

They do not contain:

• assessment answers;
• report content;
• optional free text; or
• ordinary quality-assurance notes.

Consent and notice evidence

Minimal evidence of legal consent, notice, or policy acceptance may be retained for up to three years after the underlying free submission is deleted. Paid purchase-consent evidence follows the paid-record rule above.

This may include:

• the consent choice;
• the notice or policy version;
• timestamp;
• submission reference; and
• verification information.

It does not include assessment answers or report content.

Minimal comparison-notification consent evidence may also be retained for up to three years when needed.

That minimal evidence excludes:

• category choices;
• optional “Other” text;
• assessment answers;
• report content; and
• quality-assurance notes.

Aggregate service statistics

Avernic may retain aggregate service statistics after the underlying submissions are deleted, but only when those statistics do not contain email addresses, optional free text, submission references, or other information reasonably linkable to an individual participant.

Avernic will not attempt to use aggregate statistics to identify or reidentify a participant.

Backups and exceptional retention

When a record is eligible and approved for deletion, deletion from active systems is completed as soon as reasonably practicable.

Residual copies may remain temporarily in backups until removed or overwritten through normal provider backup cycles.

Backups are not used for routine access. If restoration of a backup reintroduces information that was previously deleted, Avernic will reapply recorded deletion requests where reasonably practicable.

Information may be retained beyond an ordinary period when reasonably necessary for:

• an active legal hold;
• litigation or a threatened claim;
• fraud or abuse investigation;
• security investigation;
• tax or accounting obligation;
• chargeback or payment dispute;
• insurance requirement; or
• another applicable recordkeeping obligation.

When the exception ends, the information will return to the ordinary retention and deletion process.

Optional Analytics and preference retention

The first-party privacy-preference cookie expires no later than 180 days after it is set. Saving a later choice replaces the earlier preference.

HeyCatch's reviewed materials describe SDK analytics data retention for the active subscription plus two months after subscription end, followed by deletion or irreversible anonymization unless the subscription is reactivated or deletion occurs earlier. Avernic does not state a shorter provider retention period.

Withdrawing Analytics stops future collection but does not by itself delete event data already received by the provider. Send an access or deletion request to hello@avernicprivacy.com. Verification, legal exceptions, and whether eligible provider data can be located apply as described in this Policy. Avernic will route eligible provider requests through its vendor process.

Send privacy requests to hello@avernicprivacy.com.

Depending on applicable law and Avernic’s ability to verify the request, you may ask Avernic to:

• confirm whether it holds information associated with you;
• provide access to eligible information;
• provide a copy of eligible information;
• correct eligible information;
• delete eligible information; or
• process another privacy right provided by applicable law.

Avernic may also honor similar requests voluntarily when reasonably practicable.

Particular rights, exceptions, verification requirements, and response periods vary by state.

Avernic aims to acknowledge a request within seven business days and complete a verified request within 30 days when reasonably possible.

A different period may apply when required or permitted by law. Avernic will explain a material delay when reasonably possible.

Ordinary verification uses control of the original email address.

A submission reference may also be requested.

Avernic does not require identity documents for ordinary Free Privacy Checkup requests.

Additional verification will be requested only when reasonably necessary and proportionate to the risk of unauthorized disclosure or deletion.

Avernic does not edit historical Checkup answers in place.

To correct historical Checkup answers, request deletion of the earlier submission and complete a new Checkup.

Legal, security, abuse, fraud, tax, accounting, chargeback, or litigation holds may delay or limit deletion.

An authorized agent may submit a request where applicable law permits. Avernic may verify the agent’s authority and may contact the individual directly where permitted.

Eligible deletion requests remain subject to verification and applicable legal, security, fraud, tax, accounting, chargeback, dispute, and recordkeeping requirements.

Finalized Baseline source material, purchase snapshots, and generated reports are not edited in place, and correcting intake information does not regenerate or replace a previously purchased report.

If applicable law provides a right to appeal a denied request, reply to the response with the subject line “Privacy Appeal” and explain why the decision should be reconsidered.

Avernic will not discriminate against a person for exercising an applicable privacy right.

Requests concerning optional Analytics

Use the Privacy choices control to withdraw Analytics for future events. To request access to or deletion of eligible analytics data already collected, email hello@avernicprivacy.com. State that the request concerns optional Analytics and, when possible, submit it from the same browser used for the public journey. Avernic may request proportionate verification and may be unable to link pseudonymous provider data to a person when no verified linkage exists.

Depending on your state of residence, applicable law may provide rights concerning:

• access;
• correction;
• deletion;
• data portability;
• sale of personal information;
• targeted advertising;
• certain profiling;
• sensitive information;
• authorized agents; and
• appeal of a denied request.

These rights are subject to legal definitions, applicability thresholds, exceptions, and verification requirements.

Avernic does not currently:

• sell personal information;
• share personal information for cross-context behavioral advertising;
• use personal information for targeted advertising;
• provide a financial incentive in exchange for personal information; or
• use Checkup answers for behavioral advertising.

Avernic therefore does not currently provide a separate “Do Not Sell or Share” link.

Contact hello@avernicprivacy.com with a state-law privacy request.

Avernic uses administrative, technical, and organizational safeguards intended to protect information in light of its nature and the risks associated with processing it.

Avernic limits collection of prohibited sensitive information and restricts access to submitted information based on operational need.

No system, storage method, transmission method, or safeguard is guaranteed to be completely secure.

Do not send:

• passwords;
• recovery codes;
• authentication secrets;
• government identifiers;
• full account numbers;
• identity documents; or
• other prohibited sensitive information.

Contact hello@avernicprivacy.com if you believe information submitted to Avernic has been accessed or used without authorization.

Use the subject line “Security Report” when reporting a suspected security issue. Do not send live credentials, authentication secrets, or another person’s personal information as part of the report.

The Free Privacy Checkup, public access requests, and consumer products are restricted to adults who are at least 18 years old.

Avernic does not knowingly offer these public services to children or intentionally collect personal information directly from children through them.

Contact hello@avernicprivacy.com if you believe a minor submitted information.

Avernic will investigate and delete ineligible information where appropriate, subject to legal, security, and recordkeeping obligations.

Avernic may update this Policy as services, products, vendors, systems, or legal obligations change.

Material changes will be identified through a revised effective date.

When reasonably required, Avernic may provide additional notice through:

• the site;
• email;
• an intake flow;
• checkout; or
• another appropriate method.

A material change will apply prospectively unless law requires otherwise.

Information collected under an earlier notice will not be used in a materially incompatible way without additional notice or consent when required.

Questions and privacy requests may be sent to:

Shield Analytics LLC, a Florida limited liability company and operator of Avernic
hello@avernicprivacy.com