In short: you decide, we follow your instructions. We use your data only to run Avokaido for you, keep it safe, tell you about every outside service, and delete it when you leave.
1. Who is who
You, the customer, decide what personal data goes into Avokaido and why. Avokaido handles it for you, only as this agreement says.
A workspace admin accepts this agreement in the app, together with the terms. We record who accepted which version and when. Enterprise customers can also get a signed copy through Avokaido Sign.
2. What we handle for you
| Data | Whose | Why |
|---|---|---|
| Your code and excerpts from it | Anyone named in the code, such as your staff or customers | To run Avo Monitor and Avo Builder |
| Suggestion box messages, screenshots, names and emails | Visitors to your website | To turn suggestions into requests for your team, and to let your admins read the chats, also ones never sent, with a short AI summary and notes on where a chat and what was built differ |
| Questions asked in the suggestion box, if you turn questions on | Visitors to your website | To answer simple questions about your website from the guide you keep, and to show your admins what was asked (30 days) |
| An outline of the page a visitor is on in your website or app (headings, labels, button and link text, and form values except password, payment, one-time-code and hidden fields and anything you mark private; emails and phone numbers replaced) | Visitors to your website or app, and anyone named on the page they see | To help them on that page: answer how-to questions and carry out the steps they ask for, asking first before anything that submits or deletes. Sent to Anthropic for each answer and not stored; only each step’s label is kept, with the suggestion box chat |
| An outline of a part of the page a visitor clicks to ask about (at most 2,000 characters, by the same rules as the page outline) | Visitors to your website or app, and anyone named in that part | To answer their question about that part. Sent to Anthropic with the question and not stored |
| App facts: the result of a read-only lookup your app registers in its own code, such as a connection’s state (JSON, at most 4,000 characters, emails and phone numbers replaced) | Visitors to your website or app, and anyone your lookup’s result names | To answer a visitor’s “why” question. Called only for such a question, sent to Anthropic with it, not stored and never logged. You decide which lookups exist and what they return |
| Files your apps save to Google Drive, OneDrive or SharePoint, and for each connected account: Google or Microsoft, its email address, which app user connected it, an encrypted sign-in key, and when it was connected and last used | Your apps’ users, and anyone named in the files | To save each file into the account your app’s user connected. The file and its name go straight on to Google or Microsoft and are not stored or logged. A connection is kept until it is disconnected or cancelled, the app or workspace is deleted, or it goes 12 months unused |
| Agreements your apps send for signature through Avokaido Sign: the document, its parties’ names and emails, who sent it, each signature and filled-in field, the signer’s IP address and browser, the audit trail, and your admins’ emails | Your apps’ users, the parties to each agreement, and your workspace’s admins | To send each agreement for signature, keep its signed copy and audit trail, and let your admins manage them in Avokaido Sign, our own signing service in Belgium. Kept until the agreement or your organisation in Sign is deleted, or the workspace is deleted |
| Test builds of your apps and what a developer does on a streamed device | Your staff | To try a change before it ships |
| Requests to your own services and their logs | Your staff and your apps’ users (in log lines) | To let your developers test and watch your services |
| Error messages, request paths and shortened session ids from your apps’ logs | Users of your apps | To find and fix errors in your apps, when you switch on the logs investigator |
| Email addresses your admins choose for the logs investigator | Your team, or anyone your admins name | To send them what the logs investigator found |
| Error reports from your apps: the user’s id, the screen, the error (scrubbed), the version and the browser | Your apps’ users | To let your admins find and fix an error from the reference the app shows (30 days, in the app’s own project) |
| Issues sent to Linear or Jira | Your team | To file requests where your team works |
3. Only on your instructions
We use the data only to deliver Avokaido to you. Never for our own purposes, never sold, never used to train AI models.
4. Who can see it
Only Avokaido staff who need to, bound to keep it confidential.
5. Security
The measures are listed in Annex 2. They match section 13 of our privacy policy.
6. Outside services
The services that help us are on our list of outside services. We tell you at least 30 days before we add a new one, and you can object.
7. Outside the EU
Where a service is outside the EU, we use the EU’s standard contract clauses or the EU–US Data Privacy Framework.
8. Helping you
We help you answer people who ask to see or delete their data, and with any privacy assessment you need to make.
9. If something goes wrong
If personal data we handle for you leaks or is lost, we tell you within 48 hours of finding out, with what we know, so you can meet your own 72-hour deadline.
Report a suspected leak to security@avokaido.com. It reaches the people who handle it, day and night.
10. When the agreement ends
When you delete your workspace, we delete the data we handle for you within 30 days, except what the law makes us keep.
11. Checks
We give you the information you need to check that we keep to this agreement.
Annex 1: The details
Kinds of people, kinds of data, purposes and how long, as in section 2 and our privacy policy.
Annex 2: Security measures
Encryption on the way and at rest, a container per build, data kept apart per workspace, roles, secrets blanked in findings, one-hour access keys, sign-in links into the project wizard that only lead back to Avokaido, staff access only when needed.