Data Processing Terms

Last updated: 16 October 2026 · Public beta

These terms are part of our Terms of Service. They apply when you use Aurevin for your business and enter personal data about other people, such as your staff or the contact people at your suppliers. For that data you decide why and how it is used (you are the controller) and we process it for you (we are the processor). They are written to meet the requirements of Article 28 of the GDPR.

What we process

Subject and purpose: storing and showing the data you enter, so that you can run Aurevin. Types of data: names, phone numbers, email addresses and notes of suppliers and staff that you type in, plus your account email. People concerned: your staff and the contacts at your suppliers. Duration: for as long as your account exists.

What we promise

We process this data only to provide Aurevin to you and on your instructions. Using the app, and the settings and tools in it, are your instructions. We do not use it for our own purposes, and we do not look at your content except where needed to give you support you asked for, to keep the service secure, or where the law requires it.

The people at Aurevin who can reach the data are bound to keep it confidential.

We keep it secure. Today that includes: each account can reach only its own data (enforced in the database itself), encrypted connections, limited administrator access, and a written plan for handling a data breach.

If we become aware of a breach affecting your data, we will tell you without undue delay so you can meet your own duties.

We will help you answer requests from people about their data (for example by giving you the tools to export and delete it), and help with your security and privacy duties, as far as is reasonable.

You can download all your data in Settings at any time. When you delete your account, we delete your data straight away; copies in backups are removed after a short period, unless the law requires us to keep something.

On reasonable request we will give you the information needed to show that we meet these terms, and allow reasonable checks.

Other companies we use

You allow us to use the providers listed in our Privacy Policy to help run Aurevin. They are bound by terms that protect the data in the same way. If we add or replace one, we will tell you in advance by email or notice in the app, and if you object you can close your account. Where data goes outside the European Economic Area we rely on the protections described in the Privacy Policy.

What we ask of you

You must have a lawful reason to enter other people's details, and your instructions must be lawful.

Questions

Write to aurevin@proton.me.