Privacy Policy

1. Who Is Responsible for Your Data

The party responsible for the processing of your personal data is Avimath LLC, a limited liability company organized under the laws of the State of Wyoming, United States, with Filing ID 2026-002022776 on file with the Wyoming Secretary of State.

• Registered address: 30 N Gould St, Ste N, Sheridan, WY 82801, USA (address of its registered agent in Wyoming; it is not an office open to the public).
• Privacy contact: privacy@avimath.com. This is the channel that handles all inquiries, requests (including the exercise of your rights), and complaints about your data.

In this policy, "Avimath," "we," or "us" refer to Avimath LLC, and the "Service" means the website https://avimath.com and its technical calculator service, operated by Avimath LLC. "You" means the person who uses the Service. This policy applies to all users, wherever they live; the rights we recognize in Section 9 are offered to everyone, regardless of the law that applies in your country.

---

2. Personal Data We Collect

We collect only the following categories of data:

• Account data: your email address and your password (which we store only after transforming it with a cryptographic function, never in readable text), your sign-up date, the IP address at sign-up, your plan, and the status of your free trial. We also use, transiently, the IP address at sign-in for anti-abuse counters (see "Technical and security data"). We also use the IP address at sign-up to limit the number of accounts that can be created from the same connection. If you sign in with Google, Google tells us the email address of your Google account and confirms that it is yours. We do not receive your Google password or any other data from that account, such as your name or photo.
• Record of your acceptance of our documents: when you create your account we store the date, the IP address, the language in which the documents were shown to you, the version and the cryptographic fingerprint (hash) of the Terms you accepted and of the current documents shown to you (the Refund Policy, which forms part of the Terms, and this Policy, which is informational), and the fingerprint (hash) of your email address.
• Free trial record: a cryptographic fingerprint (hash) of your normalized email address and the date of the trial, to prevent it from being repeated; it is kept even if you delete your account (see Section 8).
• Subscription and payment data: the customer and subscription identifiers assigned to us by our payment processor (Stripe, Inc.), the status of your payments and your plan, and the approximate country inferred from your IP address when you initiate a payment; and your name and billing address (and, if you provide it, your tax identification number), which our payment processor collects to charge you and to calculate taxes. We send our payment processor your internal user identifier, your language, and the approximate country, and it keeps a record that you accepted the renewal conditions when you paid. We do not receive or store your full card number: you enter it directly on the payment processor's page. From the processor we obtain only the last 4 digits of your card, to show them to you in your subscription confirmation email.
• Service usage data: request counters per minute and per hour, to apply technical limits (see "Technical and security data") and, during the free trial, a counter of the number of calculations you complete, to apply the trial's cap of 50 calculations (Terms, Section 5).
• Files (Premium plan and free trial): the XLSX files you save to your account, their basic details (name, size, and date), and the cells you mark as selected in the viewer. See Section 7.
• Support messages and correspondence: your email address and the subject and content of the messages you send us, whether from the Service or by email. This includes the contact details and content of any copyright (DMCA) notices and counter-notifications you send us.
• Withdrawal requests: if you use the online withdrawal form, your email address, the reason you choose to give (optional), the language, the date and time of the request and a fingerprint (hash) of your IP address. We use it to evidence that you exercised your right and to handle it, and we keep it for 12 months at most from the request, after which it is deleted automatically.
• Technical and security data: IP address, browser and device type, pages requested, and server logs; failed sign-in attempts associated with your email address (counter, date, and, where applicable, a temporary 24-hour lockout); request counters to prevent abuse; and a log of changes to your account and to your subscription.
• Error and performance diagnostic data: technical information about application failures (error message, browser, and the page on which the error occurred; and, for certain payment-related errors, the customer or subscription identifiers assigned to us by our payment processor) and, for a sample of visits, performance and page-to-page navigation data (traces) to measure the speed of the Service.
• Analytics data: see Section 6.

We obtain this data from you, when you provide it to us; automatically, when you use the Service; and from our payment processor, when you purchase or manage your subscription. We do not ask you for sensitive personal data (for example, data about health, ethnic origin, beliefs, or sexual orientation).

Do you have to give us this data? Account and payment data are necessary to create your account and provide the Service: if you do not provide them, we cannot provide the Service to you. We collect the rest automatically when you use the Service, or only if you write to us.

---

3. How We Use Your Data and on What Legal Basis

Accepting the Terms when you create your account is how the contract is entered into; it is not a data protection "consent," and we do not process your data on that basis.

Our legitimate interests, in brief:

• Security, anti-abuse, and single trial: keeping the Service secure and preventing fraud, attacks, and repeated use of the free trial.
• Record of acceptance: being able to show which terms you accepted if there is a claim.
• Error and performance diagnostics: detecting and fixing failures and slowness so the Service works well.
• Analytics: knowing how the site is used in order to improve it.
• Defense of rights: being able to bring or defend a claim.

Before relying on a legitimate interest, we weigh it against your rights and freedoms and conclude that yours do not override ours. You may object to these processing activities as explained in Section 9.1.

Automated decisions. We apply automatic anti-abuse blocks (request limits, temporary blocks after several failed sign-in attempts, a limit on accounts per connection, and a limit of one free trial per account and connection). We do not build profiles about you, and we do not make decisions based solely on automated processing that produce legal or similarly significant effects. If you believe a block affects you by mistake, write to privacy@avimath.com and a person will review it.

We do not use your data for advertising or to build profiles about you.

---

4. With Whom We Share Your Data

We share your data only with the following categories of recipients:

• Service providers that process data on our behalf and in accordance with our instructions: hosting of the application, database and file storage, payment processing, email (sending, receiving, and forwarding), error monitoring, and content delivery network (CDN). For purchases through Stripe Managed Payments, Stripe acts as an independent controller together with Link (see the next item in this list), not as our processor, and processes payment data for its own obligations (for example, fraud prevention), in accordance with its own privacy policy. Today they are: Supabase, Inc. (authentication, database, and file storage), Vercel Inc. (application hosting and content delivery network), Stripe, Inc. (payments), Resend (sending of the Service's emails), Functional Software, Inc. (Sentry, error and performance monitoring), and Cloudflare, Inc. (DNS and forwarding of incoming email), plus the provider of the mailbox in which we receive that email.
• The analytics service that we load from t.katsuvo.com (see Section 6), which we host on a server (VPS) rented in France from a hosting provider that acts as a processor.
• Sold through Link, LLC and Stripe, for purchases through Stripe Managed Payments. When you buy through Stripe Managed Payments, Sold through Link, LLC ("Link"), which acts as the merchant of record for the sale, and Stripe process, as independent controllers, your payment, billing, and tax data for the sale, taxes, fraud prevention, and receipts. If you ask us to delete your account, we cancel your subscription. Link and Stripe will keep the payment, billing, and tax data that the law or their own policies require; to exercise your rights against them, contact them directly. We will keep the rest of your account data in accordance with this policy.
• Professional advisors (attorneys, accountants), subject to a duty of confidentiality.
• Authorities, judges, or courts, when required by law.
• A buyer or successor, in the event of a merger, acquisition, or sale of all or part of the business.

We do not sell your personal data or share it with third parties for advertising.

---

5. International Transfers

Avimath LLC is located in the United States and our providers are located mainly there, although some may be in other countries. For that reason your data is processed in the United States and in other countries, whose laws may differ from those of your country of residence and whose authorities and courts may access it in accordance with those laws.

Where the law of your country requires safeguards for these transfers, we use those offered by each provider. An adequacy decision of the European Commission (and its United Kingdom equivalent) exists only for United States organizations certified under the EU-U.S. Data Privacy Framework (and its UK Extension); where the provider is certified, we rely on it. In all other cases, we rely, depending on the provider, on the European Commission's Standard Contractual Clauses and, for the United Kingdom, its Addendum. You can request a copy of these safeguards by writing to privacy@avimath.com.

---

6. Cookies, Analytics, Do Not Track, and Third-Party Tracking

We use strictly necessary cookies to keep you signed in and a few items of browser data to remember your preferences (for example, language and light or dark theme). We do not use advertising cookies. Details are in the Cookie Policy.

Analytics. We load an analytics script (Umami) from the domain t.katsuvo.com, a domain other than avimath.com. It is a Umami instance that we self-host on a rented server (VPS) located in France. It measures use of the site in the aggregate: pages visited, referring page, screen size, language, browser type, and approximate location inferred from the IP address. We do not use it for advertising or to build profiles, and avimath.com does not add its own cookies for it. The legal basis is our legitimate interest. You can object by writing to privacy@avimath.com; we will handle your objection in accordance with Section 9.1. The immediate way to object is to block the script through your browser settings.

Do Not Track and Global Privacy Control. The Service does not respond to "Do Not Track" signals or to Global Privacy Control, because we do not sell or share personal data and we do not track you across websites. Analytics is aggregated and does not depend on those signals.

Third-party tracking. We do not incorporate advertising or cross-site tracking tools into the Service, and we do not configure the analytics script to collect personal data about your online activities over time and across different websites. We also use Sentry to diagnose errors in the Service; we do not use it for advertising or tracking (see Section 4). Payment takes place on our payment processor's page, which applies its own privacy and cookie policy.

---

7. Your Files

Only users with Premium access, including the free trial period (72 hours or 50 calculations, whichever comes first), can save files. Files are stored on the database and storage infrastructure of our processor (Section 4), with access restricted to their owner, to our processors where necessary to provide the Service, and to authorities where the law requires it, and we process them only for those purposes. We do not store any copy of your files in your browser's storage.

If your trial or your Premium plan ends, you will still be able to access Settings and your files to list, download, and delete them, but you will not be able to upload files or open any of them in the viewer. The storage limit and the retention period are set out in Section 9 of the Terms and in Section 8 of this Policy.

You are responsible for the content of your files and for having the right to use the information you include in them. Do not include special categories of personal data (health, origin, beliefs, biometric data, etc.) or data about third parties without a legal basis to process them.

---

8. How Long We Keep Your Data

We keep your data for as long as you have an account and, afterward, only for as long as necessary for the purposes for which we collected it, to comply with the law, and to defend our rights, applying these criteria. When an account is closed, the data we must retain is kept only for as long as necessary for those purposes and, at most, for 12 months from the closure (unless the law requires us to keep it longer, or a claim is pending, in which case we suspend its deletion until the claim is resolved); after that, a daily automated task deletes it.

Technical security data is short-lived. A daily automated task deletes: request counters used against abuse, after 2 days at most; sign-in lockout records, 30 days after the last failed attempt or, if a 24-hour lockout was applied, 30 days after it expired; calculation usage counters, 13 months after their last update; and the email fingerprint and date of the free trial, 24 months after the trial was granted.

When you delete your account:

• Your account data is deleted, except as stated below and except for backups that our providers may retain until they are overwritten in their ordinary cycle.
• Your files are deleted from storage within a maximum of 90 days. Once your account is deleted you will no longer be able to access them, so download them beforehand.
• Automatic deletion at 12 months. Twelve months after you delete your account, a daily automated task deletes the residual data listed below: the record of your acceptance of the Terms, the logs of account changes linked to its internal identifier, and your customer record in Stripe (whatever Stripe must retain by law or under its own policies is retained by Stripe).
• If we close your account ourselves (suspension or termination for cause under the Terms), we keep the account and its files for 12 months from the closure, during which you may request delivery of your files by writing to support@avimath.com, and then we automatically delete the account, its files, and the residual data listed in the previous point.
• We retain, for as long as necessary for their purpose:
  • what the law requires us to retain (for example, billing records), for the legally required period;
  • security and audit records (server logs and logs of account changes), for as long as necessary to keep the Service secure and to defend claims; the logs of account changes include the internal identifier of the deleted account and the changes of plan or trial, without email or IP, and those linked to that identifier are deleted automatically 12 months after the account is closed. The record of failed sign-in attempts is deleted when you delete your account and, in any case, within the automatic periods stated above; the IP address of your sign-up is stored in your profile and is deleted with it;
  • a cryptographic fingerprint (hash) of your email address and the date on which you used the free trial, for a maximum of 24 months from when it was granted, after which it is deleted automatically;
  • the record of your acceptance of the Terms: date, IP address, language, versions and fingerprints (hash) of the accepted documents, and the fingerprint (hash) of your email address. We keep it to evidence the terms accepted for 12 months from when you delete your account (longer if a claim is pending), and then it is deleted automatically;
  • the withdrawal requests you have sent, for 12 months from the request, and then they are deleted automatically;
  • if we were unable to cancel your subscription when you deleted your account, the data necessary to cancel it and, if applicable, to refund you, until the matter is resolved;
  • the email correspondence you have had with us, for as long as necessary to address it and to defend our rights (messages sent through the in-app support form are deleted with your account);
  • the data retained by our payment, email, error monitoring, and analytics providers, in accordance with their own policies.

---

9. Your Rights and How to Exercise Them

You have the right to access your data, rectify it, erase it, restrict its processing, receive it in a structured format (portability), and object to its processing. If any processing is based on your consent, you may withdraw it at any time, without affecting what was done before.

You can exercise them as follows:

• In your account: from Settings you can view your email address, change your password, and delete your account; from Settings → Subscription you can manage your subscription.
• By email, by writing to privacy@avimath.com: to request a copy of your data in a structured, commonly used format, correct data you cannot change from your account (for example, your email address), request its deletion, request the restriction of its processing, or object to a specific use. Restriction and portability are exercised by email only.

To protect your account, we may ask you to confirm your identity, usually by writing to us from the email address associated with your account. We will respond without undue delay and, in any case, within the period set by applicable law (for example, one month in the European Union and the United Kingdom, and 45 days in California). Exercising these rights is, in general, free of charge; if requests are manifestly unfounded or excessive, we may refuse them or charge a reasonable fee in accordance with applicable law.

If you reside in another country with a data protection law (for example, Brazil, Argentina, Chile, Colombia, the European Union, or the United Kingdom), you have the rights that law grants you, including, where the law provides for them, the rights to request review of automated decisions and to obtain information about with whom we share your data. You exercise them by writing to privacy@avimath.com.

If you are not satisfied with our response, you may lodge a complaint with the data protection authority of your country of residence, your place of work, or the place of the alleged infringement (for example, in the United Kingdom, the Information Commissioner's Office, ICO).

9.1 Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Section 3), including analytics. Write to privacy@avimath.com stating what you object to. We will stop processing your data for that purpose, unless we demonstrate compelling legitimate grounds that override your rights or we need it to defend a claim. For aggregated analytics, if we cannot identify your data in order to exclude it, we will explain this to you. For analytics, see also Section 6.

9.2 If You Reside in Mexico

You have the right to access your data, rectify it, cancel it, and object to its processing (ARCO rights), as well as to revoke your consent and to limit the use or disclosure of your data. To exercise these rights, write to privacy@avimath.com stating your name, your account email address, the right you are exercising, and a clear description of your request. We will respond within twenty business days of receiving your complete request. If you are not satisfied with our response, you may contact the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), the competent authority for personal data protection.

Necessary and non-necessary purposes. Necessary purposes are those that give rise to the contract and its performance: account, calculations, files, subscription and payments, support, security and abuse prevention, record of acceptance, and legal compliance. Non-necessary purposes are error and performance diagnostics and site analytics (Section 6): for these we understand that you consent tacitly unless you state otherwise, and you may refuse at any time by writing to privacy@avimath.com (see also Section 9.1).

Financial data. Payment financial or asset data is processed by our payment processor; by entering it and confirming the payment you give your express consent to that processing.

Transfers. The disclosure of your data to Sold through Link, LLC and Stripe is necessary to perform the contract with you and does not require your consent; disclosure to authorities and to defend a right is made where the law requires or permits it. If there were a merger, acquisition, or sale of the business (Section 4), we will tell you before the transfer and we understand that you accept the transfer of your data to the buyer or successor unless you state otherwise by writing to privacy@avimath.com. The disclosure of data to the analytics service described in Section 6 is part of that non-necessary purpose: we understand that you consent to it tacitly unless you state otherwise, and you may refuse by writing to privacy@avimath.com.

Changes. We will notify you of changes to this policy as described in Section 12.

9.3 If You Reside in Canada

We process your data with your consent, which may be express or implied depending on the sensitivity of the data and your reasonable expectations: for payment financial data it is express (by entering it and confirming the payment) and for other data it is, in general, implied by your use of the Service. You have the right to access your data, to challenge its accuracy and have it corrected, and to withdraw your consent at any time, subject to legal or contractual restrictions. If you withdraw your consent to processing that is necessary to provide the Service, we will not be able to continue providing it to you and you will need to delete your account. We will respond to access requests within 30 days. The person responsible for privacy compliance is the privacy contact named in Section 1 (privacy@avimath.com), at the mailing address in Section 13; write to them to exercise these rights or to file a complaint. You may also file a complaint with the Office of the Privacy Commissioner of Canada.

9.4 If You Reside in the United States

Where the law of your state applies to us (for example, California), you may ask us for access to, correction of, or deletion of your data, to receive a copy in a portable format, or for information about it, by writing to privacy@avimath.com. We will respond within a maximum of 45 days (extendable by another 45 days if necessary, with notice) and, if we refuse your request, we will tell you how to appeal and how to contact your state's authority. We will not discriminate against you for exercising your rights. We do not sell or share your personal data for advertising purposes and have not done so in the last 12 months (for "Do Not Track" signals and Global Privacy Control, see Section 6). If you reside in Nevada, you may submit a request that we not sell your information to privacy@avimath.com; although we do not sell it, we will handle your request within a maximum of 60 days. In the last 12 months we have collected the categories of data described in Section 2, from the sources and for the purposes described in Sections 2 and 3, and disclosed them to the categories of recipients in Section 4. Your account credentials may be considered sensitive personal data under California law; we use them only to provide the Service and keep it secure, and we do not use or disclose them for other purposes. You may submit your request through an authorized agent; we may ask you to verify your identity and the agent's, and the agent's written authorization. If we refuse your request, you may appeal that decision by writing to privacy@avimath.com with the subject "Appeal"; we will respond to the appeal within a maximum of 45 days. The appeal is optional and does not limit your right to go to your state's authority.

---

10. Minors

The Service is not directed to minors. You must be at least 18 years old to create an account. We do not knowingly collect data from anyone under 18; if we learn that a minor has provided us with data, we will delete their account and their data, except for what we must retain by legal obligation or to evidence compliance, in accordance with Section 8. If you believe that a minor has provided us with data, email us at privacy@avimath.com.

---

11. Security

We apply reasonable technical and organizational measures to protect your data, including encryption of communications, restricted access to data, and storing passwords using a cryptographic hash function (never in plain text). Even so, no system is completely secure and we cannot guarantee absolute security. If a security breach affecting your data occurs, we will notify you by email at your account address and without undue delay when required by law.

---

12. Changes to This Policy

We may modify this policy. We will post each new version on this page with its version number and its last updated date. Because this policy follows the same change procedure as the Terms, changes are communicated and take effect in accordance with Section 19 of the Terms: if the change is material, we will notify you by email (and, if you do not have a paid subscription, also through a prominent notice in the Service) at least 30 days before it takes effect. Minor changes, or changes favorable to you, may apply immediately, in accordance with Section 19 of the Terms.

---

13. Contact and Language

• Privacy and exercise of rights (preferred channel): privacy@avimath.com
• General support: support@avimath.com
• Mailing address (registered agent's address in Wyoming): Avimath LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA

This document is available in English and Spanish. In case of any conflict or inconsistency between the versions, the language rule in Section 22.7 of the Terms applies.