Privacy Policy

Last updated: 2 November 2026.

AvanSaber Inc., United States is responsible for the information described in this policy. Contact [email protected] with privacy questions or requests.

This policy covers our websites, apps and services. The sections below explain the different ways they work. Information kept only on your device is separate from information you choose to send to us.

Which sections apply

Website visits, support messages and newsletter requests are covered by the company-wide sections below. For app features, use this table.

Apps operated under a separate merchant agreement keep their own data-processing notice. This includes the order-export app notice. A signed data-processing agreement controls the processing it covers.

Local document tools

Our local PDF and image tools on Mac, iPhone, iPad, Windows and Android require no account and do not upload your documents or images to us. They have no in-app analytics or advertising identifier. You choose the files to open and where to save output. Files are held in memory during processing; temporary output files on Apple devices and Windows are removed when processing finishes.

The Apple App Store builds make no app-initiated network requests, have no update check and run no in-app analytics. Their shipped binaries link neither CFNetwork nor Network.framework. Apple handles App Store updates. The Windows build includes .NET and WebView2 components with networking libraries, but opened no TCP or UDP connection during tested reading and page-editing workflows. Choosing Help opens our website in your browser.

On Apple devices, recent-file lists and saved layout presets are stored locally and are not synchronised by the app. The apps do not use your documents to train models, and we provide no document-upload service for these tools.

Windows storage, recovery and sharing

The Windows document app keeps a local recent-files list. While changes are unsaved, a local recovery record stores file details, page arrangement, changed form values and added marks, including notes and signature pictures. It does not copy the original PDF page streams. A signature saved with Save on Device stays in the local signature library. Removing a saved signature moves it to a recoverable removed-items folder rather than immediately erasing its picture. These records are not synchronised between devices.

Text recognition uses an installed Windows recognition language on your device. Recognised text is not uploaded to us. Share stages a separate PDF copy in local app storage and opens the Windows share sheet. You choose the receiving app and its privacy practices apply. The app attempts to remove staged copies older than seven days on a later start or share. They can remain longer if the app is not run or another app holds the file.

A small rotating local diagnostic log records lifecycle stages, times, exception types, error codes and method names. It excludes document text, file names, file paths and exception messages and is not automatically sent to us.

Android storage, camera and sharing

The Android document app has no internet permission, account, in-app analytics, advertising or advertising identifier. It keeps a working copy of an opened PDF and unsaved page changes in its own storage for recovery. It leaves the original unchanged until you choose where to save a new copy. Recent documents, your bookmarks (page numbers only) and saved signatures stay on your device. Uninstalling the app or clearing its storage removes them.

The camera is requested only when you open Scan Document. Scan photos stay in app storage until you save the scan as a PDF or discard it, then the app deletes them. Recognize Text on This Device uses a built-in English model on the device. Recognition does not change the source document; you can choose to save a searchable copy.

Share, Share Text, Share File and Share with AI App first show the selected content, then open Android's share menu. You choose the receiving app, whose policy applies. An AI app may upload what it receives to its own servers. Our document app does not make that choice for you.

Send Feedback opens an editable message in your email app with the app version and Android version, not document details. Nothing is sent until you send it. A Google Play installation may ask Google Play to show its rating prompt. Google handles that prompt; a review you submit there is public.

Platform diagnostics

Apple may share aggregated crash reports from people who choose to share diagnostics. Windows Error Reporting may send crash diagnostics to Microsoft according to device settings, and Microsoft may share crash statistics with us. Optional Windows crash diagnostics can include parts of a file open when an app crashed. These services are separate from the app's own collection. See Apple's diagnostics settings and Windows diagnostic settings.

Clips, notes and selected file copies

Clipboard clips and images saved as clips use device storage. On Mac, clipboard capture is opt-in while the app runs. You can pause it, set exclusions and clear history. On iPhone and iPad, saving uses deliberate Paste, Share or supported drag and drop. Clips do not sync through the app's iCloud feature.

Protected signed builds encrypt local record bodies using a key in the device Keychain. Managed file copies use platform file protection and app storage permissions. Saved material may be included in device backups.

After you choose iCloud, notes and explicitly selected managed file copies can transfer through Apple CloudKit in your private Apple account. The email account service is separate. Pausing iCloud transfers does not remove material already saved in iCloud. An imported file is a managed copy; removing it does not delete the original source file. A cloud-only copy must be downloaded before offline use.

Clip removal and Clear History permanently remove clips, including favourites. Notes and managed file copies have Recently Deleted for recovery unless you permanently remove them.

Optional accounts and deletion

The optional email account for the clips and notes app uses Supabase for code-based sign-in. That service receives your email address, account and session information, and any profile name or photo you choose to save. The app prepares the photo as a small JPEG with source metadata removed. Native sessions are stored in the device Keychain.

The account service does not receive clip content, note text, file bytes or file paths. An email account is not required for local saving or private iCloud. Signing in does not subscribe you to marketing.

Delete Account removes the active email profile and sign-in access after a successful request. Local shelf items and private iCloud copies remain under your control. Sign Out and Remove Session From This Device are separate controls and do not delete the account. Follow the account-deletion instructions. If you cannot access the app, email support from the account address; we may verify ownership. Do not send a sign-in code.

Authentication audits and service error logs are separate from the active profile and saved content. Audit records can include an IP address, timestamp and event details. These records currently have no fixed automatic expiry and can remain after account deletion. Hosting services may retain earlier recovery copies or snapshots; their retention period has not been confirmed. Account deletion does not immediately remove these separate records.

The current clips and notes app has no advertising or content-upload analytics. Choosing a profile photo does not require broad photo-library access. Support messages do not automatically attach shelf content or diagnostics.

Virtual desktops and local diagnostics

Virtual machine settings and disks are stored on your Mac. A disk contains the guest operating system and files created or installed inside it. The app accesses installer images, existing virtual machines and Mac folders you select. You control those files and backups; a backup or cloud service has its own settings and policies.

Removing an app-owned virtual machine from the library moves its bundle into Removed Items for recovery. Removing an externally stored machine from the list leaves its files in place. To permanently remove a machine, shut it down, locate its bundle and remove it through Finder. Check Removed Items and backups separately. Uninstalling the app does not remove all virtual machine data.

When enabled, clipboard sharing transfers text between macOS and the guest on your Mac. Folder sharing grants the guest access to a folder you select. Windows folder access is read only in version 1.0. You can turn sharing off or revoke access; guest software may retain information already copied to it.

Local diagnostic logs can include versions, virtual machine names and file paths. They are not automatically uploaded and the app collects no app analytics. Logs have no fixed time-based expiry. When the existing log exceeds 256 KiB, the app replaces it before the next entry. Review extracts before sending them to support. Do not send passwords, account PINs, licence keys or a complete virtual machine disk.

Guest operating systems and apps can connect to internet services under their publishers' policies and your settings. Help and download links open external websites. Apple's App Store services are covered by Apple's policies.

Device-based apps with an AI provider you choose

Your books are stored on your Mac. When you connect your own AI account and ask a question, the app sends your chosen provider what you type, instructions for working with your books, and the conversation context and business records needed for the answer, such as a customer name, invoice total or stock count. Nothing else on your Mac is sent.

You choose a provider and agree before anything is sent. The choices are Meta Muse, OpenAI, Anthropic Claude, Google Gemini, xAI Grok, Moonshot Kimi and OpenRouter. Your provider's terms and privacy policy govern its processing, retention and use of data to improve models. Read those terms before connecting.

OpenRouter passes requests to the model operator selected under your model and account settings. Both OpenRouter's terms and that operator's terms apply. Review the provider policies and routing controls. A paid model does not by itself promise no training or no retention.

Your companies, customers, invoices, ledger entries and conversations are stored on your Mac. Records and conversation context needed for an AI answer may be sent to the provider as described above. Your AI key is stored in the app's own private folder on this Mac and sent only to the chosen provider to authenticate. You can remove it in Settings.

The app does not send your books, conversations, key or typed text to AvanSaber. AvanSaber does not run a server between you and your AI provider and does not see that traffic.

Test builds distributed through Apple TestFlight

For TestFlight test builds, Apple collects crash logs and usage information and shares them with the developer. Feedback may include comments, screenshots and contact details. Apple handles these records under its TestFlight privacy notice. Information we receive is used to investigate issues and improve the app and is subject to this policy's retention and rights provisions.

Self-hosted software

Self-hosted business software stores business data on infrastructure you control. AvanSaber does not have access to those records merely because you install the software. Direct integrations connect your instance to the third-party service, with credentials stored locally. Public module downloads may produce aggregate download counts, not individual-user tracking.

The privacy documentation and licence shipped with each self-hosted repository describe its operation. The MIT-licensed SEO server's PRIVACY.md governs your server, separately from this website. Enterprise engagements are governed by the signed Master Services Agreement. Information you send us through support, a product inquiry or a newsletter is covered by the company sections below.

Shopify pairing and operational status

For the self-hosted accounting connector, our hosted pairing service completes Shopify OAuth, issues a one-time pairing code and displays operational status in the merchant's admin. Your instance pulls orders, customer records, products, transactions and financial data directly from Shopify. Those records do not pass through our pairing service.

The pairing service processes the shop domain, shop ID, shop name, owner email and shop country. It temporarily holds the scoped offline access token for read_orders, read_customers and read_products, a six-character pairing code and a transient JWT. The status display receives the software version, last-sync timestamp, counts of orders synced and general-ledger entries posted in the last 24 hours, an error count and the instance's local URL. It does not receive individual customers, order contents, line items, payments, refunds, inventory or financial records.

Shopify's customers/data_request and customers/redact webhooks are logged and acknowledged. Because the pairing service holds no shopper records, the merchant must handle relevant requests in its own instance. Notifications let support or the merchant confirm that handling. The shop/redact webhook deletes shop, pairing and status records. Webhook signatures are verified; unsigned or invalid requests are rejected with HTTP 401.

Cloudflare provides the Workers runtime, KV storage, hosting and DNS through its global network. Tokens use KV's encryption at rest; traffic uses TLS 1.2 or later; status updates require the pairing-issued bearer token. No other processor handles merchant data for this pairing service. Merchant data is not sold, used for advertising or used to train AI models.

Cloudflare offers Standard Contractual Clauses and is certified under the EU to US Data Privacy Framework. Shop identifiers and counters may be stored across its global network. Your business records remain in the jurisdiction where you host your instance. You can uninstall the connector or contact support for access, correction or deletion of the limited records we hold. Material changes are announced on the app listing and by email to the shop owner.

Direct financial integrations

The direct Stripe accounting connector runs on your own infrastructure. It reads Stripe data and keeps local accounting records using your API key. There is no AvanSaber relay, Worker or message queue in that data path. We do not receive your charges, customer records, payouts, payment-card details, subscriptions, financial records or Stripe API key.

The key is stored locally in the software's encrypted credential vault, using PBKDF2-HMAC-SHA256 with 600,000 iterations. Read-only restricted keys are recommended. You can rotate or revoke the key in Stripe, remove the local account or export records from your instance. If webhooks are enabled, the local software verifies their HMAC signatures. Connections to Stripe use TLS 1.2 or later.

Stripe processes Stripe activity under its privacy policy. AvanSaber maintains listing copy and screenshots on the Stripe Marketplace, serves documentation and receives messages you choose to send to support. Documentation web logs are retained for seven to 30 days; support correspondence follows the company retention section. We do not use that support correspondence for AI training or marketing analysis.

Cloudflare serves documentation and its access logs, not your financial records. Other than documentation logs and support correspondence, AvanSaber holds no data from this direct integration. Material changes are announced on the marketplace listing and the software repository. Security reports to support are acknowledged within 48 hours.

Websites, support and email updates

Hosting and content-delivery services process ordinary request information: IP address, request time, page or file, referrer, user agent and status. We use these records to deliver and protect the website and investigate faults, retaining them only as needed for those purposes.

Cloudflare Web Analytics is cookieless. Where Google Analytics is enabled, the site's cookie controls govern analytics storage. Product websites may use separate measurement properties. The local PDF website retains analytics data for 14 months. The clips and notes website records basic page views and deliberate availability and support clicks, excludes query parameters and fragments from page location, and reduces referrers to their origin. It does not send saved content, Help search terms or email account identity to Google. Advertising signals and advertising personalisation are disabled there.

Analytics cookies named _ga and _ga_ followed by a property code may last up to two years after consent. Browser local storage remembers your choice. Cookie settings lets you change it; withdrawing stops the relevant tag and removes its analytics cookies. Necessary delivery and abuse-prevention cookies may still be used. Website analytics is separate from native-app processing.

StockVR's demo form and StockVR inquiries attributed through AvanSaber Contact or interactive Support use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

AvanSaber general business inquiries about AI implementation, SAP consulting, digital transformation, technology or partnerships, and General AvanSaber support inquiries attributed to AvanSaber, use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

SEOmonster inquiries sent through the SEOmonster form on AvanSaber Contact, and SEOmonster support inquiries sent through AvanSaber Support, use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

EntAgent inquiries sent through the EntAgent form on AvanSaber Contact, and EntAgent support inquiries sent through AvanSaber Support, use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

Pi.TEAM inquiries sent through the Pi.TEAM form on AvanSaber Contact, and correctly attributed Pi.TEAM support inquiries sent through AvanSaber Support, use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

SocialMan inquiries sent through the SocialMan form on AvanSaber Contact, and correctly attributed SocialMan support inquiries sent through AvanSaber Support, use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

ExplorePaste inquiries correctly attributed through the shared general form on AvanSaber Contact or through AvanSaber Support use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

ExplorePDF inquiries correctly attributed through the shared general form on AvanSaber Contact or through AvanSaber Support use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

RunWin inquiries correctly attributed through the shared general form on AvanSaber Contact or through AvanSaber Support use Zoho CRM to store the details you provide and the inquiry source for our team. These inquiries do not subscribe you to marketing emails.

Other product contact and support forms send the details you provide, product or inquiry source and request time to Brevo. We keep the inquiry as a lead or support record and send it to our team. A product request, support inquiry or app installation does not subscribe you to marketing.

The InventoryPath and AvanSaber newsletters use separate Zoho Campaigns hosted signup forms, embedded on each site or opened from its signup link. When you submit a form, you request that site's newsletter without a separate email confirmation step. Zoho Campaigns handles the requested subscription and unsubscribe requests. You can unsubscribe at any time. Loading or opening a form does not subscribe you.

The ExplorePDF newsletter uses its own Zoho Campaigns hosted signup form, embedded on ExplorePDF pages or opened from its signup link. It handles the email address and name you provide for that newsletter. Submitting the form requests the ExplorePDF newsletter without a separate email confirmation step. Zoho Campaigns handles the requested subscription and unsubscribe requests. You can unsubscribe at any time. Loading or opening the form does not subscribe you.

Other newsletter forms send your email and signup source to Brevo for a confirmation email. You join the requested newsletter only after confirming. You can unsubscribe from any newsletter or ask us to remove your address. Confirmed addresses are kept until you unsubscribe or request deletion.

Addresses from an earlier, now-closed launch-notification form remain separate from newsletters. They are used only for the single announcement requested and removed after it is sent or upon a deletion request, whichever comes first. They are not repurposed or passed to another service for marketing.

Our local document tools do not ask children for accounts or profiles and are not directed at children. The company-wide age and rights provisions below also apply to information we receive.

For personal information we hold in connection with the local document tools, you can request access, correction, export, deletion, restriction or objection by contacting support. We answer within 30 days. People in the European Economic Area or United Kingdom may complain to their national data protection authority. Apple and Microsoft provide separate controls for their platform diagnostics.

Connected messaging services

Our messaging service offers Messenger chatbots, broadcasts, comment automation, Instagram direct messages and subscriber lists using Meta's official Messenger Platform. Contact support about connected-account information or to request access to or deletion of information held by AvanSaber. A platform's own terms and privacy controls also apply to information it processes.

1 Introduction

This Privacy Policy applies to all services provided by AvanSaber Inc, including our website avansaber.com and all related services. Throughout this policy, "we," "us," and "our" refer to AvanSaber Inc and its subsidiaries and affiliates.

2 Information We Collect

We collect information that you provide directly to us when you:

• Register for an account
• Fill out a form or complete a purchase
• Subscribe to our newsletter
• Request customer support
• Communicate with us via third-party platforms

The types of data we may collect include:

• Personal identifiers (name, email address, phone number)
• Business information
• Transaction information
• Communications and interactions with our team
• Usage data and technical information

3 Automatically Collected Information

When you use our website or services, we may automatically collect certain information, including:

Device Information

Browser type, operating system, device type

IP & Location

IP address and location information

Usage Patterns

Usage patterns and browsing history on our platform

Referring Sources

Referring websites or applications

Cookies & Technologies

Cookies and similar tracking technologies

Website Providers

Our website uses Google Analytics and Cloudflare Web Analytics only after you choose to accept analytics. These services help us understand aggregate traffic and site usage. Google and Cloudflare may receive technical information such as your IP address, browser, device, referring page, and pages visited when their analytics scripts load.

Except for the StockVR, AvanSaber general, SEOmonster, EntAgent, Pi.TEAM, SocialMan, ExplorePaste, ExplorePDF and RunWin inquiry routes described above, when you submit a contact form on AvanSaber, CraftAgent or NikhilJ, Brevo stores your contact details and request in a lead list for that site or product and sends the message to our support inbox. This does not subscribe you to a newsletter. When you choose to load or open our scheduling calendar, Microsoft Bookings processes the scheduling details you provide. These third-party services operate under their own privacy terms.

If you request the AvanSaber newsletter, its separate Zoho Campaigns hosted form handles your email address and signup source for that newsletter. There is no separate email confirmation step. Zoho Campaigns manages the requested subscription and unsubscribe requests. You can unsubscribe at any time. A contact or booking inquiry does not subscribe you to marketing emails.

4 How We Use Your Information

We may use the information we collect for various purposes, including:

Providing and improving our services

Processing transactions

Communicating with you about our services

Analyzing usage and trends

Detecting and preventing fraud or security breaches

Complying with legal obligations

5 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your personal data under the following legal bases:

Contractual Necessity

To perform our contractual obligations to you, including providing our services

Legitimate Interests

For our legitimate business interests, such as improving our services and marketing

Consent

Where you have given us specific consent to process your data

Legal Obligation

To comply with legal requirements

6 Information Sharing

We may share your information with:

• Service providers and business partners who perform services on our behalf
• Other AvanSaber Inc companies and affiliated entities
• Legal authorities when required by law
• In connection with a business transaction (e.g., merger or acquisition)
• With your consent or at your direction

7 Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• End-to-end encryption for data transmission
• Secure cloud storage with robust access controls
• Regular security assessments and audits
• Employee training on data protection practices

8 Your Rights and Choices

Your CCPA/CPRA Rights

Depending on your state of residence, you may have rights regarding your personal information, including:

Right to know what personal information we collect about you

Right to access your personal information

Right to request deletion of your personal information

Right to opt-out of the sale of your personal information

Right to non-discrimination for exercising your privacy rights

Your GDPR Rights

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with applicable data protection laws, you may have the following rights:

Access to your personal data

Rectification of inaccurate information

Erasure of your information

Restriction of processing

Data portability

Objection to processing

Withdrawal of consent at any time

Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at [email protected].

9 Cookies and Tracking Technologies

We store your cookie preference so the site can remember whether you accepted or declined analytics. Google Analytics and Cloudflare Web Analytics remain unloaded unless you select "Accept" in the cookie panel. If you accept, we use analytics to:

Preferences

Remember your preferences and settings

Interactions

Understand how you interact with our services

Analytics

Analyze and improve our services

You can decline analytics when the panel first appears or use the "Cookie settings" control in the footer at any time to change your choice. Withdrawing consent disables future Google Analytics collection from this site, removes Google Analytics cookies that the site can access, and reloads the page to stop the loaded analytics runtime. You can also control cookies through your browser settings.

10 International Data Transfers

Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

Specifically, our servers are located in the United States, and our service providers and partners may be located in various countries around the world. This means that when we collect your personal information, we may process it in any of these countries.

When transferring data from the EEA to countries where the European Commission has not determined provide an adequate level of data protection, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect your personal data.

11 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you

Whether there is a legal obligation to which we are subject

Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations)

12 Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

13 California Privacy Rights

California residents have certain rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

14 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

If we make material changes to this Privacy Policy, we will make reasonable efforts to notify you, such as by posting a notice on our website or sending you an email.

15 Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email

Address

AvanSaber Inc
1050 Lakes Drive, Suite #225
West Covina, CA 91790

Website

For data protection inquiries, including GDPR-related requests, please email: [email protected]