Privacy notice

Last updated 28 October 2026

Who we are

This notice covers the Aveas.ai website, run by Aveas ("we", "us"). It explains what we collect through this website and what we do with it. It doesn't cover the Aveas testing service, which has its own terms agreed with each customer.

What we collect

What you send us through the Request an invite form: your name, work email, company, role, what you'd like tested, your timeline and any message you add. A hashed copy of your IP address is recorded with it. We don't ask for, and you shouldn't send, passwords, credentials or details of vulnerabilities through the form.

Why we use it

To read and reply to your request, and to arrange a scoping call if Aveas is a good fit. Our legal basis is our legitimate interest in responding to a request you made, or steps you ask us to take before entering a contract.

What we don't do

We don't sell your data, use it for advertising, or add you to a marketing list without asking.

Who processes it

The site is hosted on VeraGen, the platform it's built with. VeraGen stores form submissions for us, with a scrambled (hashed) copy of your IP address to help stop abuse, emails them to our team so we can reply, and can start an automated follow-up from us. Your details aren't added to a marketing list, and we don't share them with anyone else except where the law requires it. See our cookie notice.

How long we keep it

We keep your request only as long as we need it to reply and follow up. You can ask us to delete it at any time, and we will.

Your rights

You can ask to see the data we hold about you, correct it, or have it deleted, and you can object to how we use it. To do so, send a request through the Request an invite form, choose "Just exploring", and say it's a privacy request. If you're in the UK or EU, you can also complain to your data protection authority.

Changes

If this notice changes, we'll update the date at the top.