Privacy Policy

1. Hosted service

Avello is a hosted service. The portal, authentication, usage metering, billing, and gateway process data in Avello systems and service providers to deliver the subscription.

2. Data We Store

We process the categories required to operate the subscription:

• Account and organization - name, email, user identifiers, organization, role, and subscription state
• Avello credentials - secret shown once; the service keeps an identifier, hash, scope, state, and usage dates
• Usage metadata - model, tokens, time, latency, result, and technical request identifiers
• Billing and support - product, plan, order, subscription events, and invitation or recovery delivery

3. Prompts, responses, and files

Prompts, responses, and files selected in the IDE are transmitted to the gateway and the inference service needed to answer. Customer keys are configured not to persist these bodies in application call logs; usage metadata remains recorded for metering, security, and support.

4. Third-Party AI Providers

When you make API calls through Avello, your requests are forwarded to the AI providers you have configured (for example: OpenAI, Anthropic, Google). These providers have their own privacy policies that govern how they handle your data. Please review:

• OpenAI Privacy Policy
• Anthropic Privacy Policy
• Google Privacy Policy

5. Essential service providers

We use Supabase for authentication and plan data, Cakto for purchase and subscription events, and Resend for transactional email. Inference services receive the content needed for the selected request.

6. Operational records

Subscription metering keeps metadata without needing to retain conversation content:

• model, token count, HTTP status, date, and request latency
• masked key identifier and organization responsible for usage
• prompt and response bodies are not written to customer-key call logs
• commercial and security records may be kept for operational and legal needs

7. Your Rights

You may request access, correction, or deletion through the contact shown on this page. Some records may be preserved where required for legal obligations, security, fraud prevention, or the defense of rights.