Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes the practices of Avian Data Inc. ("Avian", "we", "our", or "us") with respect to personal information we collect when you access our website at avian.io, our API services, and related products (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please discontinue use of the Services.

2. Information We Collect

2.1 Information you provide

• Account information: Name, email address, and password when you create an account.
• Payment information: Billing details processed through our payment provider, Paddle. We do not directly store your credit card numbers.
• Communications: Information you provide when contacting us for support or other inquiries.

2.2 Information collected automatically

• Usage data: API request metadata such as timestamps, model selected, and token counts.
• Device and log data: IP address, browser type, operating system, and referring URLs.
• Cookies: We use cookies and similar technologies to maintain sessions and improve the Services. See Section 8 for details.

2.3 Information we do not collect

• Prompts and completions: We do not log, store, or retain the content of your API requests (prompts) or API responses (completions). Your input and output data passes through our infrastructure for processing and is not persisted after the response is delivered.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services.
• Process transactions and send related billing information.
• Respond to your requests, comments, or questions.
• Monitor usage patterns and API request metadata (not content) to maintain service quality, prevent abuse, and improve performance.
• Send you service-related notices and updates.
• Comply with legal obligations.

4. AI-Specific Data Practices

No model training on your data. We do not use your prompts, completions, training data, or any API inputs or outputs to train, fine-tune, or improve any AI or machine learning models.

Zero data retention. Prompt and completion data is processed in memory and not written to persistent storage. We do not retain, log, or cache the content of your API requests or responses after delivery.

Request metadata only. We log only request metadata—such as timestamps, the model used, and token counts—for billing, rate limiting, and service monitoring purposes. This metadata does not include the content of your prompts or completions.

5. How We Share Your Information

We do not sell your personal data. We may share information in the following limited circumstances:

• Service providers: We work with third-party vendors who assist in operating our Services, such as payment processing (Paddle), hosting, and analytics. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
• With your consent: We may share information for any other purpose with your explicit consent.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

API request metadata is retained for billing and service monitoring purposes and is periodically purged in accordance with our data management practices.

As stated in Section 4, prompt and completion content is never retained.

7. Data Security

We implement commercially reasonable technical, administrative, and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, and regular security reviews.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication state.
• Remember your preferences.
• Analyze site traffic and usage patterns.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Services.

9. Your Rights

9.1 General rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data.
• Port your data to another service.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at privacy@avian.io.

9.2 European Economic Area, UK, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, we process your personal data on the following legal bases:

• Contract performance: To provide and operate the Services you have requested.
• Legitimate interests: To improve our Services, prevent fraud, and ensure security.
• Consent: Where you have given explicit consent, such as for marketing communications.
• Legal obligation: To comply with applicable laws and regulations.

You have the right to lodge a complaint with your local data protection authority. For privacy inquiries, contact us at privacy@avian.io.

9.3 California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion of your personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share your personal information as defined by the CCPA.
• Non-discrimination for exercising your privacy rights.

To submit a request, email privacy@avian.io. We will respond within 45 days.

10. International Data Transfers

Our servers are located in the United States. If you access the Services from outside the US, your information may be transferred to, stored, and processed in the US. We use appropriate safeguards, including Standard Contractual Clauses where applicable, to ensure your data is protected in accordance with this Policy.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from someone under 18, we will promptly delete it. If you believe a child has provided us with personal data, please contact us at privacy@avian.io.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective" date at the top of this page and, where appropriate, notify you by email or through the Services.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@avian.io
• Company: Avian Data Inc., a Delaware corporation