Privacy Policy

1. Who we are

This policy covers anavic.org, operated by Anavic LLC (“Anavic”). [Registered business address]

Questions about this policy can be sent to [email protected].

2. Information we collect

If you create a client account, we store:

• Your full name and email address.
• Your company name, if you add one.
• Your password, stored only in a scrambled (hashed) form by our sign-in provider. Anavic cannot see it.
• Your account role (client, staff or admin) and whether email notifications are on.
• When you agreed to the Terms of Service and which version you agreed to.
• Which client updates you have opened, so we can show unread markers.

If you send a message through the contact form or your dashboard, we store your name, email address, the division you chose, the product (if any), the subject and the message, plus its status (Received, In Progress or Resolved) and whether Anavic replied.

To limit spam, we also store a one-way scrambled version of the network (IP) address a message was sent from. It is only used to count recent messages from the same network and cannot be turned back into the original address.

3. How we use information

• To create and secure your account and keep you signed in.
• To show you updates Anavic posts for you and the status of your messages.
• To read and reply to your messages.
• To send the emails described below.
• To prevent spam and abuse.
• [Any other purposes]

4. Emails we send

• Account emails: confirming your email address and resetting your password.
• A confirmation when you send a message, and replies from Anavic to that message.
• Client updates, only if email notifications are on for your account.

You can turn email notifications off at any time in your account settings. Account and message emails are still sent because they are needed to use the service.

5. Cookies

When you sign in, the site stores cookies that keep you signed in. They are required for accounts to work and are removed when you sign out.

The contact form may use Cloudflare Turnstile to tell people from automated spam, which can process technical information about your browser. [Analytics or other cookies, if any are added later]

6. Service providers

We use these providers to run the website and accounts. They process information only to provide their service to Anavic.

• Supabase: sign-in and the database that stores accounts, updates and messages.
• Resend: sending email.
• Vercel: hosting the website.
• Cloudflare Turnstile: spam protection on the contact form.

[Where data is stored and how international transfers are handled]

7. Who can see your information

Clients can only see their own account, the updates meant for them and their own messages. Anavic staff and admins can see accounts and messages so they can respond and post updates. Only admins can change account roles. We do not sell your information. [Any other sharing, for example when required by law]

8. How long we keep information

Account information is kept while your account exists. Messages are kept for [retention period] so Anavic can follow up and keep records. [Retention details for backups and logs]

9. Deleting your account

You can delete your account yourself: sign in, open Account, and use Delete account at the bottom of the page. You can also ask us to delete it by emailing [email protected].

Deleting your account permanently removes your sign-in, your profile (name, email, company and settings) and your record of which updates you have read. Messages you sent stay with Anavic so they can be handled and kept for the period above, but they are no longer linked to an account. To ask for those messages to be deleted as well, email [email protected].

10. Your rights

[Rights available to users, such as access, correction, deletion and objection, and how to use them in your jurisdiction]

11. Children's privacy

[Minimum age for accounts and how information about younger users is handled]

12. Security

Access to information is limited by account role and enforced in the database itself. Passwords are never stored in a readable form. [Additional security measures]

13. Changes to this policy

When this policy changes, the date at the top of this page is updated. [How significant changes are announced]

14. Contact

Questions about this policy can be sent to [email protected].