Global Compliance
Engineered for international standards including DPDP (India), GDPR (UK), Privacy Act (Australia) and US State laws.
Legal
Privacy Policy
Aurevia is a global B2B technology provider. We respect your privacy and are committed to protecting the personal data of our visitors, customers, and users worldwide.
Key Privacy Points
A high-level overview of our data practices.
Privacy Roles
We act as a Controller for our business operations and a Processor for Customer Workspace data.
Data Minimisation
We collect only what is necessary to deliver secure ERP, CRM, AI and automation services.
International Transfers
Data may be processed globally through vetted infrastructure with appropriate safeguards.
AI Transparency
AI processing is used to provide requested features like summaries and forecasting, following strict data rules.
Your Rights
Access, correction, deletion and objection rights available worldwide, with specific regional protections.
1. Our Privacy Roles
Depending on the context of your interaction with Aurevia, we may act as either a "Controller" (the entity that determines the purpose and means of processing) or a "Processor" (the entity that processes data on behalf of a customer).
Aurevia-controlled Data
We act as a **Controller** (or Data Fiduciary) for personal data related to website visitors, demo enquiries, account registration, billing contacts, and marketing subscribers.
Customer-controlled Data
We act as a **Processor** for data stored or processed by our business customers through their workspaces (ERP, CRM, HR & Payroll, etc.). Our customers are the Controllers of this data.
2. Data Categories We Process
We process the following categories of information where actually required for our services or operations:
- Identity & Contact (Name, Email, Phone)
- Professional & Business Information
- Account & Authentication Data
- Billing & Transactional Records
- HR & Payroll data (where used by customers)
- AI Prompts & Integration/API Data
- Device & Browser information (IP, usage)
- Support Communications & Marketing Prefs
- Audit Logs & Security metadata
3. Purposes & Legal Bases
| Purpose | Legal Basis / Justification |
|---|---|
| Providing Contracted Services | Performance of a contract |
| Platform Security & Fraud Prevention | Legitimate interest / Compliance |
| Billing & Financial Administration | Contractual & Statutory obligation |
| Marketing Communications | Consent (where required) / Legitimate interest |
| Product Improvement & AI Dev | Legitimate operational interest |
4. AI & Automation
Aurevia integrates AI-enabled functionality to provide features such as assistants, document analysis, and forecasting.
AI Processing Transparency
- • Data submitted to AI tools is processed to provide the requested automation or insight.
- • We do not use Customer Workspace data to train models that would disclose your proprietary information to third parties.
- • Automated decision-making with legal effects only occurs where explicitly disclosed and subject to human review.
5. International Data Transfers
Aurevia operates globally through cloud infrastructure and service providers located in various countries, including India, the United States, and Australia. We use appropriate transfer mechanisms, such as Standard Contractual Clauses or verified adequacy frameworks, where legally required to protect your data during transfer.
6. Data Retention
We retain personal data only as long as necessary for the following criteria:
Active customer relationship duration
Contractual and legal record-keeping needs
Accounting, tax, and audit requirements
Dispute resolution and security monitoring
7. Security Safeguards
Aurevia employs enterprise-grade security controls to protect your data. While no system is 100% secure, we implement:
EncryptionAt rest & in transit
RBACRole-based access
MonitoringLogs & Audit trails
8. Job Applicants & Recruitment
When you apply for a position at Aurevia, we process your identity, contact information, work history, and communications for recruitment purposes. We retain this data for the duration of the hiring process and a reasonable period thereafter for potential future opportunities, unless you request deletion.
9. Regional Rights & Compliance
We recognize specific rights based on your jurisdiction. Select your region below for applicable disclosures:
India — DPDP Framework
To the extent applicable and in force under India's Digital Personal Data Protection framework, you have the right to notice, consent withdrawal, access, correction, and erasure. Our Grievance Mechanism is available through our contact page.
10. Submit a Privacy Request
To exercise your rights, please submit a request through one of the following methods. We will verify your identity before processing the request.
Aurevia Legal Entity Information
Business Name: [OWNER INPUT REQUIRED — Legal Entity Name]
Trading Name: Aurevia / Aurevia Flow
Registered Address: [OWNER INPUT REQUIRED — Registered Business Address]
Privacy Contact: Use our Contact Form
Enterprise Ready
Adopt the operating layer for connected enterprise.
Connect your systems, intelligence and workflows around one business context. Begin with phased implementation or a complete operating environment.
Start with one capability
Keep existing systems
Phased implementation