Privacy Policy

Last updated: October 28, 2026

This policy explains what personal information Avowgate (“we”, “us”) collects when you use our website, web app, API and agent tools (the “Service”), why, who sees it, how long we keep it, and what you can ask us to do. In short: we collect what we need to run the Service, we do not sell it, we do not show ads, and we do not use your content to train AI.

What we collect

• Account details. Your email address, name (if you give one), a password stored only as a one-way hash, the workspaces you belong to and your role, and when you last signed in or were active.
• Your content. The requirements, test names, test results, notes, deployment records, sign-offs and similar material you or your tools put into the Service, and a record of who did what (the audit trail, which names the email address of the person or the name of the token that acted).
• Access tokens. The name you give a token, when it was created and last used. The token itself is stored only as a hash.
• Proof links. If an owner or admin creates a proof link, anyone holding the link can see, without signing in, that product's name, the titles and status of its requirements, the names and results of the linked tests and the overall verdict, until the link expires (30 days unless the owner chooses otherwise) or is revoked. We keep a view count and the time of the last view for each link; we do not identify who viewed it. Only a one-way hash of the link is stored.
• Messages and requests. What you send us through the contact form or by email to info@avowgate.com, and your email address, and the email address you leave to ask for early access.
• Technical logs. Our servers record technical information such as your IP address, the time and the address requested, to keep the Service secure and working.
• Cookies and tracking. We do not use cookies, analytics, advertising or tracking tools, and we load nothing from other sites. Your browser keeps a sign-in token, your selected product and your theme choice in its local storage so the app works; this stays on your device.

Why we use it

• To provide the Service: sign you in, show your content, compute verdicts, send the emails the Service needs (confirmation, password reset, invitations, and a notice to workspace owners and admins when an agent is waiting for your decision; you can turn that notice off in Settings).
• To keep it secure and reliable: prevent abuse, limit repeated sign-in attempts, fix problems, keep backups.
• To answer you, and to write to you about access if you asked for early access.
• To meet legal obligations.

Where the law asks for a legal basis, we rely on performing our agreement with you, our legitimate interest in running a secure service, your consent (for the early-access list), and legal obligations.

Who we share it with

We share personal information only with the companies that help us run the Service, listed on our service providers page, and only so they can do that work. We may also disclose information if the law requires it, or to protect the rights and safety of our users or the Service, or in connection with a sale or reorganization of the business. We do not sell your personal information and we do not share it for advertising.

AI

We do not send your content to AI services and we do not use it to train AI models. Avowgate itself does not run AI on your data.

How long we keep it

• Account details and your content: while your account exists.
• If you ask us to delete your account, we delete it within 30 days. Copies in our nightly backups are replaced as the backups rotate, within about 14 days after that.
• Technical logs: kept for a short period only, no more than 60 days.
• Messages you send us: as long as needed to deal with them.
• The early-access list: until you are given access or ask to be removed.

Your choices and rights

You can ask us to give you a copy of your information, correct it, delete it, or stop using it for a purpose. Depending on where you live (for example the EU or UK, or California), you may have specific legal rights, and you may complain to your data protection authority. To make a request, use the contact form and choose “Privacy request”. We may need to confirm it is you, and we aim to reply within 30 days. You can also leave the early-access list at any time by asking.

Security

The Service is served over HTTPS. Passwords and access tokens are stored as hashes. Access to the systems that hold your information is limited to the people who need it, and we limit repeated sign-in attempts. No system is perfectly secure, so we cannot promise absolute security. If you find a security problem, please tell us through the contact form and choose “Security”.

Where information is processed

Our servers are in the United States, and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for transfers.

Children

The Service is for people who build software and is not directed to anyone under 16. We do not knowingly collect information from children.

Changes

We may update this policy. If a change is significant we will tell you by email or in the app. The date at the top shows when it was last changed.

Contact

Use the contact form or email info@avowgate.com. For privacy requests, choose “Privacy request” in the form, or put “Privacy request” in the subject of your email, so we see it first.