1. Introduction
Avergo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
2. Information We Collect
2.1 Information You Provide
- Account registration details (name, email, organisation)
- Billing and payment information (processed via Stripe)
- Campaign and media planning data you enter into the platform
- Communications you send to us (support requests, feedback)
2.2 Information Collected Automatically
- Usage data (pages visited, features used, session duration)
- Device information (browser type, operating system, IP address)
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send administrative notifications and updates
- Respond to your comments, questions, and support requests
- Monitor and analyse usage trends to improve user experience
- Detect, prevent, and address technical issues and security threats
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Service providers who assist in operating our platform (hosting, payment processing, analytics)
- Professional advisers (lawyers, auditors) as necessary
- Law enforcement or government authorities when required by law
- Acquirers in connection with any merger, acquisition, or sale of assets
5. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Multi-tenant data isolation with row-level security
- Regular security audits and penetration testing
- Access controls and authentication via WorkOS AuthKit
- Audit trails on all data mutations
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Upon account termination, we retain your data for 30 days to allow export, after which it is permanently deleted. Audit trail data may be retained longer as required by applicable law.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal obligations)
- Object to or restrict processing of your data
- Data portability (receive your data in a structured, machine-readable format)
- Withdraw consent at any time
8. Connected Advertising Platforms (including Meta/Facebook)
Avergo lets you connect advertising platforms — including Meta (Facebook and Instagram) — that you or the clients you manage own, so that campaign performance appears inside Avergo alongside your other channels.
- What we access: ad-account metadata (account name, currency, timezone, owning business), campaign / ad-set / ad structure, and aggregate performance metrics (impressions, clicks, spend, conversions). For sign-in we use your platform profile to identify your account. We do not access your personal social content or message inboxes through the advertising integration.
- How we use it: we display this data back to you in reporting, pacing, and budget dashboards, and to reconcile media plans against actual delivery. We do not sell it and do not use it to advertise to you.
- How it is stored: access tokens are encrypted at rest (AES-256-GCM), are never exposed to the browser, and are isolated per organisation. Performance data is retained only while the integration is connected.
- How to revoke and delete: you can (a) disconnect the integration in Avergo settings, which deletes the stored token; (b) revoke Avergo's access from your Meta account settings, which triggers our deauthorize handler; or (c) delete your Meta account, which triggers Meta's Data Deletion Request to Avergo and runs our full erasure of the associated data. The status of a data-deletion request is available at the confirmation URL returned to Meta.
This processing is carried out in accordance with the Meta Platform Terms and Developer Policies for the advertising data you choose to connect.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.
10. Cookies
We use cookies and similar technologies to enhance your experience, analyse usage, and deliver personalised content. You can control cookie preferences through your browser settings.
11. Compliance
Avergo supports jurisdiction-aware compliance including the Australian Privacy Act (including Tranche 2, effective December 2026), GDPR, and CCPA. Our platform includes built-in DSAR handling, consent management, and automated decision disclosure capabilities.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at avergo.io/contact.