Privacy Policy

This policy is for Avaga, the operator of avaga.io and app.avaga.io (together, Avaga Workspace). We provide a workspace where your team and AI employees share numbers, a shared inbox, recordings, Assist Pro, and CRM notes.

Sales and privacy questions: hello@avaga.io and +1 415 723 8585. A person on the Avaga team answers. You get a written reply you can keep.

It covers personal data on the marketing site (avaga.io), contact and partner forms, and personal data processed when you or your company use Avaga Workspace.

It does not replace a signed order, a Business Associate Agreement, or a data processing agreement. If those papers exist, they win for the data they name. This page is not legal advice. If a control is load-bearing for your review, confirm it with us before you buy.

When you browse avaga.io we process the technical data any site needs to render a page: IP address, browser, device, referring URL, and the pages you open. We store cookie preferences in this browser when you use Cookie Preferences.

When you submit Talk to sales, Partners, or Compliance forms we collect work email, the fields on that form, the page you sent them from, and a Cloudflare Turnstile token that proves the submit was human. Amazon SES delivers that lead to hello@avaga.io. A WhatsApp button on the marketing site opens a chat with a starting message on wa.me.

• Work email and the questions you type
• Partnership type, compliance need, or similar form fields
• Page URL and a sent or error flag after submit
• Cookie preference choices stored locally in this browser

A workspace is the floor you bought. Your company is usually the controller of customer, caller, and employee records on that floor. Avaga processes those records to run the product.

What lands on the floor depends on what you turn on: numbers, seats, AI employees, ads extensions, messaging channels, and website forms.

• Account: owner and agent seats, roles, Google Sign-in, 2FA, availability, working hours
• Billing: plan (Lite, Growth, Business, or Enterprise quote), seats, numbers, included pools, Auto-Recharge
• Calling: DIDs, IVR, queues, recordings, call history, caller ID, forwarding, barging, whisper, monitoring
• Inbox: SMS, MMS, WhatsApp Business, Facebook Messenger, Instagram DMs, and related attachments
• AI records: transcripts, summaries, sentiment, Assist Pro suggestions, CRM logging, voicemail transcription
• Leads: Meta extension, Google Ads lead forms, LinkedIn forms, and avaga-forms.js website submissions
• Integrations: CRM connectors, API access, webhooks, messaging API, and data export you trigger

We use marketing-site data to answer you, run demos, and operate avaga.io. We use workspace data to provide the floor: routing, recording, transcription, AI employees, Assist Pro, billing, and support.

We use trust and security data to keep roles, 2FA, and archive playback working. We use usage data to bill included pools and Usage-based Auto-Recharge at published rates.

• Provide, maintain, and support Avaga Workspace
• Route voice and messages, and keep one contact across channels
• Generate transcripts, summaries, and CRM notes you asked the product to write
• Bill plans, extras, numbers, and Auto-Recharge
• Detect abuse under Acceptable Use
• Answer sales, partner, and compliance requests you send us

Call recording with pause and resume is in the calling core. Transcripts, voicemail transcription, summaries, and Assist Pro notes are still records. If you would not file the audio, do not file the text.

Who can play archives is a role, not a courtesy. Pause before a card number or identity document. Resume after. AI employees after hours follow the same pause rule as your team. A perfect transcript of a card is a perfect incident.

If you connect Meta, Google Ads, LinkedIn forms, Messenger, Instagram, or WhatsApp Business, those platforms send data into the workspace you configured. Their policies still apply to the click, the lead form, and the message thread on their side.

When a workspace connects Meta, Avaga processes Platform Data from those products only to run that workspace. A workspace owner signs in with Meta so Avaga can receive Page, Messenger, Instagram, WhatsApp Business, or Lead Ads data for the accounts they connect. We do not use that data to advertise Avaga. We do not sell it. We do not use it to build our own advertising audiences.

Website forms: paste avaga-forms.js with your workspace key. There is no field mapping step. Every submission you point at Avaga lands on the floor. Rotate the key if it leaked in a public repo.

• Facebook Page and Messenger: Page identity, people who message the Page, conversation text, attachments, and delivery metadata needed to keep the thread in the inbox
• Instagram: professional account direct messages, media in those threads, and account identifiers needed to assign the contact
• WhatsApp Business: phone numbers, message text, media, and template status for conversations the workspace connected
• Lead Ads: the form answers Meta sends when someone submits a lead form tied to that workspace, such as name, email, phone, and the questions on the form

We share data with the carriers and infrastructure needed to complete a call, SMS, or WhatsApp session. Footer copy is the commercial rule: what we pay carriers is what you pay, plus the plan fee for the workspace.

Marketing-site contact forms use Cloudflare Turnstile to check bots and Amazon SES to send the lead email. We do not sell your workspace recordings as a marketing list. We do not sell Meta Platform Data. We may share data with professional advisors, to meet law enforcement demands we believe are valid, or with a buyer if Avaga is sold. Confirm the current subprocessors list with sales if you need it for a DPA.

Marketing form leads are kept long enough to answer you and keep a record of the request. Workspace recordings, transcripts, inbox threads, and CRM logs follow the retention you configure in product and any signed order.

Data export is available as an extra on every plan. Custom reports are on Business. If you close a workspace, ask support what is deleted, what is billed archives, and what invoices we must keep.

You can refuse non-essential cookies on Cookie Preferences. You can stop submitting marketing forms. Workspace admins control seats, roles, 2FA, and who plays recordings.

Anyone can ask us to delete personal data we hold. That right is not limited to GDPR or CCPA. See How to request deletion of your data. If GDPR, CCPA, or a similar law applies to you, you may also have rights to access, correct, or export personal data, or to object to certain processing. Send those requests to hello@avaga.io from a work mailbox we can match to a workspace or a form lead. We may need to route caller or patient requests to your company, because you control that floor.

Email hello@avaga.io with the subject Data deletion. A person on the Avaga team answers, and you get a written reply you can keep. We aim to confirm what we deleted, what we must keep, and what we passed to a workspace owner, within 30 days.

Tell us who you are, the email or phone we should match, and whether you are a workspace customer or a person who contacted a business that uses Avaga. If you messaged on Messenger, Instagram, or WhatsApp, include the Page, account, or number if you know it.

• Workspace customers: we delete or anonymize account and inbox data we control, except billing, fraud, and legal records we must keep
• People who contacted a business on Messenger, Instagram, WhatsApp, or a Lead Ad: that business usually controls the thread. We delete copies Avaga still holds where we can, and we pass the request to the workspace owner for the rest
• Marketing-site leads: we delete the form email we sent to hello@avaga.io, except a minimal record that a deletion request was made
• Closing a Meta connection in Facebook Apps and Websites stops new Platform Data from that login. It does not empty a business inbox by itself. Write us as well

Avaga Workspace is operated from avaga.io and app.avaga.io. Traffic, recordings, inbox threads, and backups may be processed where we, our carriers, or our infrastructure providers operate, including the United States.

Unlimited US and Canada calling is for ordinary business use, with terms of use. Additional international bundles exist. MMS is only available for US, Canadian, and Australian numbers. If you need a documented transfer tool (such as a DPA with standard contractual clauses), that is a sales paperwork conversation. See DPA / GDPR.

Avaga Workspace is for businesses. The marketing site and the product are not directed at children. If you believe we collected data about a child, email hello@avaga.io.

We will change this policy when the product, the forms, or the law requires it. The date at the top of this page is the current version. Material changes to a paid workspace should also show up in product or in an email to the owner.

Privacy, sales, deletion requests, and general: hello@avaga.io, +1 415 723 8585. Security review, BAA, and DPA requests can start on Compliance & BAA or Talk to sales.