Privacy Policy

1. Introduction

Welcome to Aventa, a service provided by AVENTA TECH LLC ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://aventa.app and use our B2B SaaS platform ("Platform"). Our Platform provides point-of-sale (POS) financing integration software for retail merchants ("Merchants").

2. Our Role as a Data Processor

AVENTA TECH LLC operates as a technology provider and Data Processor for our partnered Merchants. We do not act as a lender, bank, or financial institution. Our Platform facilitates the collection of information from various sources, including Merchant-controlled websites, mobile applications, and third-party advertising platforms (such as TikTok Lead Generation and Meta Advertising Services), to route it to third-party lending partners ("Lenders") via API.

3. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Platform includes:

• Consumer Data (Processed on behalf of Merchants): Personally identifiable information, such as name, shipping address, email address, telephone number, Social Security Number (SSN), date of birth, and financial information provided directly by the Consumer during the intake process or via authorized Third-Party API integrations (e.g., TikTok Leads).
• Merchant Data: Business names, contact details, EINs, and API credentials (such as Merchant IDs provided by Lenders or Social Media Platform access tokens).
• System Data: IP address, browser type, operating system, and access times automatically collected when using our Platform.

4. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we use information collected via the Platform to:

• Securely route Consumer financing applications to appropriate third-party Lenders using the Merchant's credentials.
• Sync lead information from platforms like TikTok and Meta to the Merchant's dashboard.
• Facilitate pre-qualification (soft credit pulls) where authorized.
• Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.

5. How we use information to improve our services, including AI

We may use de-identified and aggregated information derived from your interactions with merchants who use the Aventa platform (such as message content with personal details removed, and conversion metrics) to develop and improve our products and services, including AI-powered features, and to provide enhanced analytics and performance metrics to our merchants. Before any such information is used to train AI or generate aggregate benchmarks, we apply automated redaction to remove personal identifiers; information that cannot be reliably de-identified is not used for this purpose. We do not use sensitive financial information you provide for a financing application (such as Social Security numbers, ITINs, income, bank-account details, or lender decisions) to train AI models — that information is used only to process your financing request.

6. Data Retention and Deletion

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. For data retrieved via third-party advertising APIs (such as TikTok), Aventa adheres to a strict 30-day retention policy, after which personal identifiable lead data is automatically deleted or anonymized from our active processing systems.

7. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

• To Third-Party Lenders: Consumer data is transmitted securely to third-party Lenders (e.g., Affirm, Snap Finance, Klarna) as requested by the Merchant to process financing applications.
• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.

8. Your Privacy Rights

Depending on your location, you may have the right to access, correct, or delete your personal information. Consumers wishing to exercise these rights regarding data processed by Aventa should contact the Merchant through whom their application was submitted, as the Merchant is the Data Controller. Aventa will assist Merchants in responding to such requests within reasonable timeframes.

9. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. This includes encrypting sensitive data (such as SSNs) at rest and in transit using industry-standard protocols (AES-256 and TLS 1.2+).

10. Google & YouTube API Services

Aventa offers an optional integration that lets a Merchant or salesperson connect their own Google/YouTube account to manage their content and audience from within the Platform. This feature uses the YouTube API Services. By connecting a YouTube channel, you agree to be bound by the YouTube Terms of Service, and you acknowledge the Google Privacy Policy.

When you choose to connect your channel — and only after you grant consent through Google's OAuth screen — we access the following on your behalf:

• Channel and video information (your channel name, avatar, recent uploads and their public metrics) — to display your own content inside Aventa.
• Comments on your videos (scope youtube.force-ssl) — to show them in Aventa's unified inbox and let you reply to, hide, or report them.
• Upload and manage your videos (scope youtube.upload) — to publish, at your request, the content you create within Aventa to your own channel.

We access this data only to provide these features to you, the account owner. We do not sell it, do not use it for advertising, and do not use it to train generalized artificial-intelligence models. Access tokens are stored encrypted and used solely to operate the integration you enabled.

Aventa's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect your channel at any time from within Aventa (Networks → Integrations), or revoke Aventa's access directly from your Google Account at myaccount.google.com/permissions. The YouTube data we stored for the integration is deleted when you disconnect.

11. Google Ads API Services

Aventa also offers an optional integration that lets a Merchant or salesperson connect their own Google Ads account to view and manage their advertising campaigns from within the Platform's Ads Management panel. This feature uses the Google Ads API (scope https://www.googleapis.com/auth/adwords).

When you choose to connect your Google Ads account — and only after you grant consent through Google's OAuth screen — we access the following on your behalf:

• Campaign, ad, and performance data (campaign and ad names, status, budgets, spend, impressions, clicks, and conversions) — to display your campaigns and their performance inside Aventa.
• Campaign and ad controls — to let you pause, resume, or delete a campaign or ad, edit its budget, and create or edit ad creatives, all only at your explicit action.
• Optional automation ("Smart Rules") — if you turn this on for your account, Aventa may automatically pause a campaign, adjust its budget, or resume it later, based on rules and thresholds you configure yourself (e.g. pause if cost-per-lead exceeds a limit you set). This is off by default and fully under your control.

We access this data only to provide these features to you, the account owner. We do not sell it, do not use it to serve ads for other advertisers, and do not use it to train generalized artificial-intelligence models. Access tokens are stored encrypted and used solely to operate the integration you enabled.

Aventa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect your Google Ads account at any time from within Aventa (Contenido → Gestión de Publicidad), or revoke Aventa's access directly from your Google Account at myaccount.google.com/permissions. The Google Ads data we stored for the integration is deleted when you disconnect.

12. Google Business Profile API Services

Aventa offers an optional integration that lets a Merchant connect their own Google Business Profile so they can manage their business listing and customer reviews from within the Platform, alongside their other channels. This feature uses the Google Business Profile APIs.

When you choose to connect your Business Profile — and only after you grant consent through Google's OAuth screen — we access the following on your behalf:

• Your business locations (the listings your Google account manages, with their names and identifiers) — so you can pick which location Aventa should work with, and so we can build the review link we send to your customers.
• Reviews left on your listing (star rating, review text, reviewer display name, and date) — to show them in Aventa's unified inbox next to your other channels, so you can see and answer them in one place.
• Replies to those reviews — to publish, at your explicit action, the reply you write inside Aventa back to your Google listing.
• Posts and photos on your listing — to publish, at your request, the content you create within Aventa to your own Business Profile.

Aventa also offers a review-request feature that does not use any Google API: the Merchant sends their own customer a message containing an Aventa link that records the click and then forwards the customer to the Merchant's public Google review page. For that feature we store only the customer already in the Merchant's CRM, the destination link, and whether and when the link was opened. Aventa never sees, submits, or influences the content of any review a customer chooses to write.

We access this data only to provide these features to you, the account owner. We do not sell it, do not use it for advertising, and do not use it to train generalized artificial-intelligence models. Access tokens are stored encrypted and used solely to operate the integration you enabled.

Aventa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect your Business Profile at any time from within Aventa (Settings → Integrations), or revoke Aventa's access directly from your Google Account at myaccount.google.com/permissions. The Business Profile data we stored for the integration is deleted when you disconnect.

13. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

AVENTA TECH LLC
Email: contact@aventa.app