Who controls your data
Avo AI is controlled by SecureFlowGroup. SecureFlowGroup is the controller for account, website and direct customer-support data, except where it processes information solely on a business customer’s documented instructions.
Data we collect
- Account information such as name, email address and authentication records.
- Prompts, conversations, files, projects and feedback you choose to submit.
- Plan, credit, transaction and billing records supplied by payment providers.
- Device, browser, IP, session, diagnostic and security information.
- Support enquiries and communications.
- Cookie and preference choices.
How we use data
We use personal data to provide accounts and AI features, save work where enabled, process payments, manage credits, answer support requests, prevent misuse, maintain security, comply with law and improve the service.
The lawful basis may be contract, legitimate interests, consent or legal obligation depending on the purpose and location.
AI processing
Prompts, relevant conversation context and uploaded content may be sent to contracted AI or infrastructure providers to generate a response. Do not submit passwords, private keys or unnecessary sensitive personal data.
We should publish the final provider list and explain whether customer content is used for model training before launch. Confirm provider settings
Retention
We keep data only for as long as needed for the stated purpose, legal obligations, disputes, security and service operation. Account content should be deleted or anonymised after the account and applicable retention period end, subject to backups and legal requirements.
| Record | Baseline approach |
|---|---|
| Account records | Account term plus a limited legal and dispute period |
| Conversations, files and projects | Until deleted by the user or the account retention period ends |
| Billing records | As required by tax and accounting law |
| Security logs | A proportionate rolling period |
| Support messages | Until resolved plus a limited service-history period |
Your rights
Depending on the law that applies, you may have rights to access, correct, erase, restrict or object to processing, receive portable data and withdraw consent. Requests can be sent to support@avoai.co.uk. We may need to verify identity.
Contact and complaints
Contact us first so we can investigate. UK individuals may also complain to the Information Commissioner’s Office, and EEA individuals may contact their local supervisory authority.
Privacy requests
Use the account email address and clearly describe the request.