Privacy Policy

Google User Data Policy

Our application integrates with Google services to provide enhanced functionality. This section describes how we access, use, store, and protect data from your Google account.

Google OAuth Scopes We Request and Why

When you connect your Google account to Avi AI, we request access to the following OAuth scopes:

• openid, https://www.googleapis.com/auth/userinfo.profile
  Used to authenticate you with your Google account and display your name and profile picture in Avi AI.
• https://www.googleapis.com/auth/userinfo.email
  Used to read your primary Google Account email address so we can create and manage your Avi AI account, send account-related notifications, and contact you about service changes.
• https://www.googleapis.com/auth/youtube.download
  Used to download copies of your own YouTube videos that you explicitly select inside Avi AI, so we can provide editing, repurposing, or optimization features.

How We Use Google User Data

We use the data accessed from your Google account strictly for the following purposes:

• Authentication & Identity: We use your Google account as an alternative to email/password authentication to provide secure access to our platform
• Account Management: Your email address is stored and used for account management, platform communications, and service-related notifications (you can opt out of marketing emails at any time)
• YouTube Content Features: We access metadata about your YouTube videos (titles, descriptions, thumbnails) to help you repurpose and optimize your content for social media platforms
• User Identification: Your profile information helps us personalize your experience and identify you within our platform

Limited Use Disclosure

Avi AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• No AI/ML Training: We do not use Google user data to train, retrain, or improve generalized AI or machine learning models
• No Advertising: We do not sell Google user data or use it for targeted advertising
• Human Access Restrictions: We do not allow humans to read Google user data, except when required for security, fraud prevention, debugging, or where you explicitly request human support
• Limited Transfers: Google user data is only transferred to service providers who assist in providing our services, and only as necessary to provide the functionality you request
• Minimum Scopes: We only request the minimum scopes necessary to provide our services and do not use Google user data for purposes outside of providing user-facing features

Storage & Protection of Google User Data

We take the security of your Google user data seriously:

• Token Storage: Google OAuth access tokens and refresh tokens are stored securely on our servers, encrypted at rest using industry-standard encryption (AES-256), and are only used to perform API actions that you explicitly request
• Secure Storage: Email addresses and profile information are stored in secure, encrypted databases hosted on Amazon Web Services (AWS)
• Infrastructure Security: Our infrastructure is hosted on AWS, which maintains SOC 2, ISO 27001, and other security certifications
• Access Controls: Access to Google user data is restricted to authorized personnel only and is protected by role-based access controls
• Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption
• Service Providers: We use third-party service providers (such as AWS for hosting and Stripe for payments) that act as our processors. They process data only on our behalf and under our instructions, and do not use Google user data for their own purposes

Sharing of Google User Data

We maintain strict policies regarding the sharing of your Google user data:

• No Selling: We never sell, rent, or trade your Google user data to third parties
• No Independent Use by Third Parties: We do not share your Google user data with third parties for their independent use
• Service Providers Only: Google user data may only be shared with service providers who process it on our behalf (such as AWS for infrastructure), and they are contractually prohibited from using it for any other purpose
• No Advertising: Google user data is never used for advertising purposes or shared with advertising networks
• Aggregated Analytics: We may use aggregated, anonymized analytics data (that does not include any personally identifiable Google user data) with analytics platforms to improve our services
• Legal Requirements: We may disclose your data if required by law, court order, or government agency request

Data Retention & Deletion

Retention Policy:

• Your Google user data (email address, profile information, and OAuth tokens) is retained for as long as your Avi AI account remains active
• Data is retained to provide continuous service, send platform updates, and enable the features you've authorized
• If you disconnect your Google account from Avi AI or revoke access through your Google Account settings, we will delete your OAuth tokens immediately and remove the association

Data Deletion:

• You have the right to request deletion of your data at any time
• To request deletion of your account and associated Google user data, please email us at: nick@avi.ai
• Upon receiving your deletion request, we will remove your Google user data from our systems within 30 days
• Some data may be retained in encrypted backup systems for up to 90 days for disaster recovery purposes, after which it will be permanently deleted
• Certain information may be retained as required by law or for legitimate business purposes (such as fraud prevention or legal compliance)
• You can also revoke Avi AI's access to your Google account at any time through your Google Account Permissions page

Your Rights & Controls

You have the following rights regarding your Google user data:

• Access: You can request a copy of the Google user data we have collected from your account
• Correction: You can request correction of inaccurate data
• Deletion: You can request deletion of your data by emailing nick@avi.ai
• Revoke Access: You can revoke Avi AI's access to your Google account at any time through your Google Account settings at https://myaccount.google.com/permissions
• Opt-Out: You can opt out of marketing communications at any time using the unsubscribe link in our emails
• Data Portability: You can request your data in a machine-readable format

---

General Application Data (Non-Google)

The following sections describe additional data collected by Avi AI outside of Google user data. None of this information is obtained from Google APIs.

What kind of data is processed?

We collect several different types of information for various purposes to provide and improve our service to you.

Personal Data

While using our service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Cookies and Usage Data

We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

Usage Data

We collect information how the service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking Cookies Data

We use cookies and similar tracking technologies to track the activity on our service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

For what purpose is the data collected?

Avi AI uses the collected data for various purposes:

• To provide and maintain our service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our service when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or inquired about unless you have opted not to receive such information

Duration of Processing

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Avi AI will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

How do we protect your information?

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. We are committed to protecting your personal information against unauthorized use or disclosure.

Disclosure to Third Parties

We use a select number of trusted external service providers for certain technical data analysis, processing and/or storage offerings. These service providers are carefully selected and meet high data protection and security standards. We only share information with them that is required for the services.

If Avi AI is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Under certain circumstances, Avi AI may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Avi AI may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of Avi AI
• To prevent or investigate possible wrongdoing in avi.ai with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

Your Rights

You have a right to be informed of Personal Data processed by Avi AI, a right to rectification/correction, erasure and restriction of processing. You also have the right to receive a structured, common and machine-readable format of Personal Data you provided to us.

We can only identify you via your email address and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly and/or you using our site and/or service. We cannot provide, rectify or delete any data that we store on behalf of our users or customers.

To exercise any of the rights mentioned in this Privacy Policy and/or in the event of questions or comments relating to the use of Personal Data you may contact our support team: nick@avi.ai

You have the right to withdraw consent at any time, without affecting the lawfulness of the processing that was carried out prior to withdrawing it. Whenever you withdraw consent, you acknowledge and accept that this may have a negative influence on the quality of the site and/or services. You further agree that Avi AI shall not be held liable with respect to any loss and/or damage to your Personal Data if you choose to withdraw consent.

In addition, you have the right to lodge a complaint with the data protection authority in your jurisdiction.

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: nick@avi.ai
For Data Deletion Requests: nick@avi.ai