Privacy Policy

Last updated: January 25, 2026

1. Introduction

Aevia WS (“we”, “our” or “us”) operates a customer messaging platform that integrates with Instagram, Facebook Messenger and WhatsApp. This Privacy Policy explains how we collect, use and protect your information when you use our services.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address, name and authentication credentials
• Message Data: Messages sent and received through connected channels (Instagram, Facebook, WhatsApp)
• Connection Data: OAuth tokens for connected social media accounts
• Usage Data: Analytics and activity logs to improve our service

3. How We Use Your Information

We use your information to:

• Provide and maintain our messaging platform services
• Authenticate and authorize access to connected channels
• Process and route messages between you and your customers
• Analyze usage patterns to improve our service
• Send service-related notifications and updates

4. Data Sharing

We do not sell or rent your personal information. We share data only with:

• Service Providers: Meta (Facebook/Instagram) and WhatsApp (messaging), Twilio (SMS, voice, WhatsApp numbers), Stripe (payments), Anthropic, Groq and OpenAI (AI message processing, audio transcription), Google (Gemini voice agent), Deepgram and Microsoft Azure (voice synthesis), Vercel, Railway, Neon and Upstash (hosting and infrastructure), Sentry (error monitoring)
• Legal Compliance: When required by law or to protect our rights
• With Your Consent: When you have given us explicit permission
• Audience measurement: Google Ireland Ltd (Google Analytics 4), only if you accept measurement cookies

Transfers outside the European Union

Your data is hosted in the European Union (database in Frankfurt, Germany). Some processing does, however, require sending content to providers established in the United States:

• Anthropic, Groq and OpenAI: generating the agent’s replies, transcribing voice messages and indexing your knowledge base
• Google: the Gemini voice agent, which processes live call audio
• Deepgram: speech synthesis
• Twilio: call and SMS routing

These transfers rely on the European Commission’s standard contractual clauses concluded with each of these providers. A copy is available on request at the contact address below. If you would rather your content were not processed by a conversational agent, the AI agent can be switched off on your account: receiving and manually sending messages keeps working, with no content transfer at all.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Password encryption with bcrypt
• Secure access tokens with JWT
• Regular security audits

6. Data Retention

We retain your data while your account is active. You can request data deletion at any time through your account settings or by contacting us directly.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Request data deletion
• Export your data (data portability)
• Withdraw consent for data processing

8. Cookies and Tracking

Two kinds of cookies. Essential cookies (authentication, session, security) are required for the service to work and are set without consent, as the regulation allows. Audience measurement uses Google Analytics 4: it loads only after you explicitly accept the banner, and declining takes nothing away from the service. You can change your mind at any time by clearing this site’s data in your browser.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or a prominent notice in our service.

10. Contact