Privacy Policy

This Privacy Policy applies to anyone who interacts with AVTDB: technicians who sign up for an account, visitors to public technician profiles at https://avtdb.com/t/<slug>, people who contact a technician through a public profile contact form, and visitors to our marketing pages.

AVTDB LLC (referred to as “we”, “us”, or “AVTDB”) is the controller of your personal information for the purposes of this policy.

We collect the information you give us, information we generate from your use of the service, and a small amount of technical information that any web service receives automatically.

Information you provide:

• First name, last name, email address, and phone number (at signup)
• Mailing address (street, city, state, ZIP) and optional latitude/longitude
• Profile photo and signed onboarding documents (W-9, IC agreement, etc.)
• Job, shift, invoice, expense, and document records you create in the app
• Messages you send through public technician profile contact forms
• Payment information (handled directly by our payment processor — we do not see or store full card numbers)

Information generated by the service:

• Account identifiers, subscription tier and status, billing dates
• One-time passwords (OTP) issued for signup or login (deleted after use)
• Conversations you have with the Avie AI assistant
• Audit logs of significant account events

Technical information:

• IP address (used for rate limiting and abuse detection)
• Browser type, device type, and approximate locale
• Strictly-necessary cookies (see our Cookie Policy)

• Operate the service — create your account, store your records, surface them when you sign in
• Authenticate you and issue OTP codes
• Process subscription payments and send billing receipts
• Answer your questions when you contact the Avie AI assistant
• Send transactional notifications (account, billing, security) — see our SMS Terms
• Detect, prevent, and respond to fraud, abuse, or violations of our Terms
• Comply with legal obligations

We do not sell or rent your personal information, and we do not use it to train third-party AI models. The AI providers we use (OpenAI, Anthropic) operate under API terms that prohibit using customer data to train their models.

Where the GDPR applies, we rely on the following legal bases:

• Contract — to provide the service you signed up for
• Consent — for optional features (e.g., SMS notifications, optional analytics if enabled)
• Legitimate interest — to keep the service secure, prevent abuse, and improve product reliability
• Legal obligation — to respond to lawful requests and meet tax/accounting obligations

We share data only with vendors who help us run the service, and only to the extent they need it to do their job. Each vendor is bound by contract to handle data in line with this policy.

The full list of subprocessors is published on our DPA & Subprocessors page. High-level summary: payment processing (Stripe), SMS (Telnyx), email (Brevo), database hosting (Neon), AI inference (OpenAI, Anthropic), object storage (Wasabi), CDN (Bunny.net), maps and geocoding (Google, Geoapify), and application hosting (Vercel).

We may also disclose information when required by law, to enforce our Terms, to protect the rights and safety of users and the public, or in connection with a corporate transaction (merger, acquisition, or asset sale) — in which case we will notify you in advance.

AVTDB is operated from the United States. Some of our subprocessors are located in the European Union (Brevo, Geoapify) or operate globally. When personal data of EU/UK residents is transferred outside the EEA/UK, we rely on the European Commission’s Standard Contractual Clauses, incorporated into our agreements with those subprocessors.

• Active account data — kept while your account is open
• After account deletion — purged from active systems within 30 days; database backups roll off within 35 days
• OTP codes — deleted as soon as they are used or after expiry (typically minutes)
• Billing records — retained for the period required by tax and accounting law (typically 7 years in the US)
• Audit logs — up to 24 months for security and fraud-prevention purposes

Depending on where you live, you may have the following rights over your personal information:

• Access — get a copy of what we hold about you
• Correction — fix anything that is inaccurate
• Deletion — ask us to delete your account and data
• Portability — receive your data in a portable, machine-readable format
• Restriction or objection — limit how we process your data
• Withdraw consent — where processing relies on consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email privacy@avtdb.com. We honor Global Privacy Control (GPC) signals as a valid opt-out where applicable.

California residents have specific rights under the California Consumer Privacy Act (as amended by the CPRA), including the rights to know, delete, correct, and limit the use of sensitive personal information.

We do not sell or share your personal information as those terms are defined under California law, and we do not use sensitive personal information for any purpose beyond providing the service you signed up for. We have not sold or shared personal information in the prior 12 months.

California residents may exercise their rights by emailing privacy@avtdb.com. You may also designate an authorized agent to make a request on your behalf; we will require reasonable verification of your identity and the agent’s authority.

AVTDB is intended for working professionals aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, email privacy@avtdb.com and we will delete it.

We use encryption in transit (TLS 1.2+) and at rest, strict access controls, and routine review of our subprocessors. For more detail, see our Security page.

No system is perfectly secure. If we ever detect a breach of personal data that creates a risk to your rights, we will notify affected users and the relevant authorities within the timeframes required by law.

See our dedicated Cookie Policy for details on what we use and how to control it.

We may update this policy from time to time. The “Last updated” date at the top of this page always reflects the current version. For material changes we will notify account holders by email at least 30 days before the change takes effect.

For any privacy question or request, email privacy@avtdb.com.

AVTDB LLC
1000 Heritage Center Cir. , · #374 · Round Rock, TX 78664 · United States