Legal

Privacy Policy

Effective October 8, 2026

Avrue provides organization-specific application and approval workspaces. This policy explains how Avrue handles information when organizations, administrators, officers, and applicants use the service.

Information we collect

We collect account details such as name, email address, organization, role, and authentication information. We also process forms, applications, files, decisions, remarks, workflow history, and audit records submitted through an organization workspace. Technical records may include IP address, device and browser information, request identifiers, security events, and service diagnostics.

Google sign-in

When you choose Google sign-in, Avrue receives your Google account identifier, name, email address, and email-verification status. Avrue uses this information only to create or authenticate your account and does not request access to Gmail, Google Drive, contacts, or calendars.

How information is used

We use information to provide and secure the service, route applications through configured workflows, send account and workflow notifications, support users, prevent abuse, and meet legal obligations. We do not sell personal information.

Organization control

Each organization controls the business records entered in its workspace and determines who may access them. Organization administrators may manage users, workflows, forms, and retention requirements. Contact your organization first for requests concerning an application or organization-managed record.

Service providers and transfers

Avrue uses service providers, including Amazon Web Services for hosting, storage, databases, and email delivery, and Google for optional authentication. These providers process information under their own contractual and security obligations. Information may be processed in the United States or other locations where these providers operate.

Security and retention

We use access controls, tenant isolation, encryption, audit records, and other safeguards designed to protect information. No system is completely secure. Information is retained for the period required to provide the service, satisfy an organization’s configured obligations, resolve disputes, and meet legal requirements.

Your choices

You may use email and password instead of Google sign-in. You may request access, correction, or deletion by contacting your organization administrator or Avrue. Some records may need to be retained for legal, audit, or government-processing requirements.

Contact

For privacy questions or requests, email support@avrue.app.