Privacy Policy

Introduction

At Avenir Tech, accessible from Adelaide, Australia, protecting your personal data is a top priority. We are committed to respecting your privacy and complying with applicable data protection laws, including the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) and international standards such as the GDPR.

You can browse our website without providing personal details. However, if you opt to use specific enterprise services, processing your personal data may become necessary. Where statutory grounds are absent, we will always ask for your explicit consent.

Data Controller & Contact

1. Key Definitions

Understanding how your information is categorized:

A. Personal Data

Any details that identify or could reasonably identify an individual ("Data Subject").

B. Data Controller

The entity (Avenir Tech) that determines why and how personal information is collected and processed.

C. Processing

Any operation performed on personal data—such as collection, storage, adaptation, or destruction.

D. Consent

Any freely given, specific, and informed agreement by you permitting us to process your information.

2. Information We Collect

A. Automated Technical Data

When accessing our digital platforms, system logs automatically record data such as IP addresses, system setups, browser details, visiting timestamps, and referring URLs to maintain network security and performance.

B. Direct Inputs

We collect personal records when you deliberately provide them via:

• Recruitment applications and CV submissions
• Platform account registration details
• Contact forms and support queries
• Newsletter subscription requests

3. How We Process Your Data

Your information helps us maintain, optimize, and secure our services. Specifically, we process data to:

• Deliver technical solutions and enterprise services
• Refine platform speed, infrastructure, and user experiences
• Address client inquiries and ongoing support tickets
• Distribute product announcements, updates, and marketing communications
• Comply with Australian federal statutory legal obligations

4. Cookie Technologies

Avenir Tech uses cookies and tracking technologies to optimize performance and tailor user experiences.

5. Your Statutory Rights

Depending on your location, you hold the following rights regarding your personal information:

• Right to request access to held personal information
• Right to request corrections or updates to inaccurate data
• Right to request erasure ("Right to be Forgotten")
• Right to object to automated data processing or profiling
• Right to withdraw consent at any given time

6. Usage of Google Data in frictionlabs

Google User Data Sharing, Transfers, and Disclosures

frictionlabs, a software platform operated by Avenir Tech, does not sell, rent, trade, or transfer any user data obtained through Google APIs to any third parties. Google user data specifically Google Analytics metrics and account access permissions is accessed strictly to render performance reporting, charts, and AI-driven SEO recommendations inside the frictionlabs application UI.

Avenir Tech and frictionlabs do not share your Google user data with external partners, third-party advertising networks, or data brokers. Data is shared or transferred only under the following strictly limited circumstances:

• With cloud infrastructure providers solely for hosting and securing our application operations.
• If explicitly required to comply with applicable laws, legal processes, or enforceable governmental requests.

Data Protection, Security, and Storage Mechanics

Avenir Tech implements industry-standard administrative, technical, and physical safeguards to protect all user data within frictionlabs against unauthorized access, disclosure, alteration, or destruction.

Specifically, regarding Google OAuth sensitive data:

• Authentication Credentials: All Google OAuth Refresh Tokens, Access Tokens, and API credentials are encrypted at rest using industry-standard authenticated symmetric encryption (AES-128 via Fernet) in our secure database architecture.
• In-Transit Security: All data transferred between our servers, Google APIs, and user web browsers is encrypted using secure HTTPS/TLS 1.2+ protocols.
• Access Controls: Access to user data and credentials is limited strictly to automated background tasks and authorized team members on a strict need-to-know basis.

Data Storage, Retention, and Deletion Policy

frictionlabs adheres to strict data minimization principles regarding Google Analytics data:

• Storage Location: All encrypted credentials, tokens, and cached analytics operational data are hosted on secure, restricted-access cloud infrastructure.
• Retention Period: OAuth access and refresh tokens are stored for as long as your workspace or site remains active in frictionlabs. Historical analytics metrics (e.g., traffic counts, search performance) are retained only for the duration required to generate performance charts and AI SEO recommendations.
• Data Deletion & Revocation: Users can remove their Google Analytics integration by deactivating or deleting their workspace or site from the frictionlabs application settings, or by revoking permissions directly through Google Account Security Settings. Upon workspace deactivation or site removal, stored access and refresh tokens are immediately invalidated, and all associated cached analytics metrics are scheduled for deletion and permanently purged from our databases within 30 days.

Contact Our Privacy Team