Privacy Policy
The short version
- Our website uses no tracking, no analytics and no advertising cookies.
- We only use the data you give us (or that is publicly listed for your business) to talk to you and to run your social media.
- We never sell personal data.
- You can ask us to see, fix or delete your data anytime: [email protected].
1. Who we are
Averio Social is a brand of Averio LLC, a Wyoming limited liability company, 30 N Gould St, Ste R, Sheridan, WY 82801, USA ("we", "us"). We are responsible (the "controller") for the personal data described in this policy.
Contact for anything privacy related: [email protected].
2. What data we collect and why
a) When you visit our website
Our website is hosted by Cloudflare. When you open a page, your browser automatically sends technical data such as your IP address, browser type and the page requested. Cloudflare processes this to deliver the page and protect it against attacks. We do not use this data to identify you. Our fonts and images are served from our own website, so no data goes to Google Fonts or other third parties when you visit.
Legal basis (GDPR): our legitimate interest in running a secure website (Art. 6(1)(f)).
b) When you email or message us
If you contact us (email, Instagram, Facebook), we receive your name, contact details, your business name and whatever you write. We use it to answer you, for example to send the free Instagram review you asked for.
Legal basis: steps before a contract at your request (Art. 6(1)(b)) or our legitimate interest in answering inquiries (Art. 6(1)(f)).
c) When we reach out to your business first
We look for local businesses that could use help with social media. For this we use information the business has made public itself: business name, address, website, public business email and phone, public Instagram/Facebook profile and public reviews (for example via the Google Places API and Instagram's official API). We may send one short, personal message about our services. Every message is reviewed by a person before it is sent, and we never use automated direct messages.
If you don't want to hear from us, reply "no thanks" or "stop" and we will remove you and not contact you again.
Legal basis: our legitimate interest in offering our services to businesses (Art. 6(1)(f)). You can object at any time.
d) When you are our client
To provide the service we process:
- Contact and billing data: names, emails, phone, business details, plan and invoices.
- Content you send us: photos, videos, notes and approval feedback, uploaded through our client portal or sent by message. Photos may show your staff, guests or products. Please only send photos you are allowed to share.
- Account access: the posting access you give us to your Instagram/Facebook through Meta's official tools. We never ask for your social media passwords.
- Portal login data: your email and a one-time login link. The portal uses a single, strictly necessary session cookie to keep you logged in.
We use this to create, edit, schedule and publish posts, send you drafts to approve, report results and bill you.
Legal basis: performance of our contract with you (Art. 6(1)(b)) and legal obligations such as tax records (Art. 6(1)(c)).
e) AI tools
We use AI (Anthropic's Claude) to help edit photos, suggest captions and organize work. Your photos and notes are sent to the AI provider only to produce your content. Under its commercial terms the provider does not use this data to train its models. A person on our team reviews the content, and you approve it, before anything is published.
3. Who we share data with
We only share data with service providers that help us run the business, and only as much as they need:
| Provider | What for |
|---|---|
| Cloudflare, Inc. (USA) | Website hosting, domain, security, email forwarding |
| Anthropic, PBC (USA) | AI assistance for captions and content |
| Meta Platforms (Instagram, Facebook) | Publishing posts you approved; reading public business profiles |
| Google LLC (USA) | Business listings lookup (Google Maps Platform / Places API); email. Google's use of data is covered by the Google Privacy Policy. |
| Telegram | Internal notifications so our team can review drafts |
| Stripe, Inc. (USA) | Payments. Stripe receives your card details directly; we never see or store them. |
| Our server provider | Running our client portal and content system |
We may also disclose data if the law requires it. We do not sell or rent personal data and we don't share it for advertising.
4. International transfers
We are a US company and several providers are in the US. If you are in the EU/EEA, UK or Switzerland, your data may be transferred to the US. Where required, these transfers rely on the EU-US Data Privacy Framework (where the provider is certified) or the European Commission's Standard Contractual Clauses.
5. How long we keep data
- Inquiries: up to 24 months after our last contact.
- Outreach leads: up to 12 months if you don't reply, or removed right away if you ask us to stop. We keep a minimal "do not contact" note so we don't contact you again.
- Client content and data: during our work together, then deleted within 90 days after the contract ends, unless you ask us to delete it sooner. Posts already published stay on your own accounts, under your control.
- Invoices and billing records: as long as tax law requires (usually up to 7–10 years).
- Website technical logs: handled by Cloudflare for a short period for security.
6. Your rights
Depending on where you live (for example under the GDPR or US state privacy laws), you have the right to:
- access the personal data we hold about you and get a copy,
- correct inaccurate data,
- have your data deleted,
- restrict or object to our use of it, including any marketing or outreach,
- receive your data in a portable format,
- withdraw consent where we rely on it,
- complain to a data protection authority, for example the one in the EU country where you live or work.
To use any of these rights, email [email protected]. We reply within 30 days and won't treat you differently for asking.
7. Cookies
Our public website sets no cookies. Our client portal uses one strictly necessary cookie to keep you logged in securely. It is not used for tracking and does not need consent. If we ever add analytics or other optional cookies, we will ask for your consent first and update this policy.
8. Security
We use encrypted connections (HTTPS), single-use login links that expire, limited access for our team and API access instead of passwords. No system is 100% secure, but we work to protect your data and will tell you without undue delay if a breach affects you.
9. Children
Our services are for businesses. We don't knowingly collect data from children under 16.
10. Automated decisions
We use simple automated scoring to decide which businesses might benefit from our services (for example, whether a business has an active Instagram). This only decides whether a person on our team looks at a business. We make no automated decisions with legal or similarly significant effects on anyone.
11. Links to other sites
Our website links to other sites, such as our Instagram. Those sites have their own privacy policies, and we are not responsible for how they handle data.
12. Changes
If we change this policy, we update the date at the top. If a change matters for clients, we tell them by email beforehand.