Privacy policy

This notice explains how AnavoTech ("Anavo", "we", "us") collects and uses personal information through this website. We are the controller of the personal information described here. We operate from Minnesota (United States), London (United Kingdom), Frankfurt (Germany), and Addis Ababa (Ethiopia), and serve clients in the United States, Europe, and Africa.

Our address is Minnesota, USA. You can contact us about privacy at [email protected]. We do not offer a telephone line, so all privacy requests are handled by email.

We collect the information you give us through forms on this website, and a small amount of technical information.

• Contact form: name, work email, company, phone number (optional), services of interest, and your message.
• Consultation requests: the above, plus preferred dates, time of day, time zone, and topic.
• Proposal requests: contact details, project summary and goals, services and deliverables, timeline, optional budget range, existing systems, and any file you attach.
• Job applications: name, contact details, location, profile links, resume or CV, cover note, and how you heard about the role.
• Accounts: if you create an account, your name, email address, and a one-way encrypted (hashed) version of your password, plus the time you created the account and last logged in. We email our own team a notice when someone creates an account, containing your name, email, the time, and your IP address.
• Newsletter: email address.
• Downloads and event registrations: name, work email, company, and the resource or event you chose.
• Optional analytics and personalization, only if you opt in: page and button events (such as which campaign page was viewed) sent to our own server without cookies, names, emails, or IP addresses, and a list of topics you viewed that stays in your browser. We honor browser privacy signals such as Global Privacy Control.
• AI assistant: the questions you type and the assistant's replies. These are sent to our AI provider (Google, through the Gemini API) to generate answers. Please do not enter confidential or sensitive information in the assistant.
• Technical data: standard server logs kept by our hosting provider, such as IP address, browser type, and pages requested.
• Browser storage: small items stored on your device to make the site work, remember choices, and confirm form submissions. See the cookie policy.

We use personal information only for the purposes below. Where the EU or UK GDPR applies, the legal basis is shown.

• To respond to inquiries and arrange consultations or proposals (legitimate interests, or steps before entering a contract).
• To process job applications and manage recruitment (steps before entering an employment contract, or legitimate interests).
• To send our newsletter or event information (consent, which you can withdraw at any time).
• To deliver resources and manage event registrations you requested (performance of your request, or consent where applicable).
• To create and run your account, and to keep it secure (performance of a contract with you, and legitimate interests).
• To keep the website secure and prevent abuse (legitimate interests).
• To meet legal and regulatory obligations (legal obligation).

We keep personal information only as long as needed for the purposes above, then delete or anonymize it.

• Inquiries and proposals: up to 24 months after our last contact, or longer if a client relationship begins (then as the contract and law require).
• Job applications: up to 12 months after the role is filled, and up to 6 months for applicants in the EU, unless you ask us to keep your details for future roles.
• Accounts: until you ask us to delete your account, or after a long period of inactivity.
• Newsletter subscriptions: until you unsubscribe, and a short period afterward to honor your request.
• Event registrations and downloads: up to 24 months.
• Server logs: typically 30 to 90 days, as set by our hosting provider.

We do not sell your personal information, and we do not share it for cross-context advertising. We share it only with:

• Service providers who help us run the website and our business: our email provider (Zoho Mail, which delivers form submissions to our team), our hosting provider, scheduling and customer-relationship tools if we use them, and Google for the website assistant.
• Professional advisers such as lawyers, accountants, and insurers where needed.
• Authorities, courts, or others where the law requires or permits it.
• A successor organization if the business is reorganized or sold.

We work across the United States, Europe, and Africa, so personal information may be processed in countries other than your own, including the United States. Where the EU or UK GDPR requires it, we protect transfers with safeguards such as the European Commission's standard contractual clauses or an adequacy decision, and we require our providers to protect information to an equivalent standard.

Depending on where you live, you may have the rights below. To use any of them, email us at the address in this notice. We will verify your identity and respond within 30 days (45 days for US state-law requests, which we may extend once where the law allows).

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Ask us to delete your information.
• Restrict or object to certain uses of your information.
• Receive your information in a portable format.
• Withdraw consent at any time, where we rely on consent.
• European Economic Area, UK, and Germany: lodge a complaint with your data protection authority. In Germany this is the authority of your federal state or the Federal Commissioner for Data Protection and Freedom of Information (BfDI).
• Ethiopia: exercise the rights granted by the Personal Data Protection Proclamation, including access, correction, and objection, and complain to the competent authority.
• United States (California, Minnesota, and other states with privacy laws): know, access, correct, delete, and obtain a copy of your personal data, and opt out of its sale, targeted advertising, or profiling. We do not sell personal data or use it for targeted advertising. You may appeal a refusal by replying to our decision.

We use reasonable technical and organizational measures to protect personal information, including access controls, limited staff access, and encryption in transit. No method of transmission or storage is completely secure, so please avoid sending sensitive personal data through our forms.

If a breach affects your information, we will notify you and the relevant authorities as the law requires.

This website is for businesses and is not directed at children under 16. We do not knowingly collect their personal information. If you believe a child has sent us information, email us and we will delete it.

Send privacy requests and questions to [email protected], or write to AnavoTech, Minnesota, USA. We aim to respond within 30 days. Regional teams can also be reached at [email protected] (United States), [email protected] (Europe), and [email protected] (Africa); please copy [email protected] on privacy requests.

We may update this notice. The date of the latest update is shown at the top of this page (October 19, 2026). If we make material changes, we will say so on this page.