The short version. We collect the minimum we need to answer your enquiry, run our contracts and keep the site working. We do not sell personal data, we do not run advertising trackers, and we never use client data to train third-party models. You can ask us to show you, correct or delete what we hold at any time by emailing contact@avioxtechnologies.com.
The rest of this page is the detail behind those four sentences.
01 Who we are
Aviox Technologies Pvt Ltd (“Aviox”, “we”, “us”) is a software and AI engineering company incorporated in India, registration number CIN to confirm, with an engineering office at E-299 Corporate Greens, Sector 75 Industrial Area, SAS Nagar, Punjab 160055, India, and a client office at 3673 Lexington Ave N, Ste H-2, Arden Hills, MN 55126, USA.
For personal data described in this policy, Aviox is the data controller — we decide what is collected and why. Where we process personal data on behalf of a client as part of a delivery engagement, we act as a data processor and the client's own privacy notice governs that data. Section 08 explains the difference and why it matters.
Privacy questions, requests and complaints: contact@avioxtechnologies.com.
02 What this policy covers
This policy applies to avioxtechnologies.com and to the business relationships we run from it — enquiries, proposals, contracts, recruitment and marketing. It does not apply to:
- Third-party sites we link to, each of which has its own policy.
- Client systems we build or operate, which are governed by the client's own privacy notice and our data processing agreement with them.
- Our products, which carry their own policies. ExamsDojo's policy is published on examsdojo.com.
03 What we collect
We collect only what a given interaction actually needs. In practice that falls into four groups.
| Category | What it includes | Where it comes from |
|---|---|---|
| Contact details | Name, work email, company, phone number if you give one | Forms you submit, emails you send, calls you book |
| Enquiry content | What you tell us about your process, systems, budget range and timeline | The brief form and subsequent correspondence |
| Contract records | Signatories, billing contacts, invoices, purchase orders, delivery correspondence | The engagement itself |
| Technical data | IP address, browser and device type, pages viewed, referring page, approximate region | Automatically, when you use the site |
Booking a demo or an expert consultation. Before we open our booking calendar (a Google Calendar appointment page) we ask for your email address and phone number and keep them, together with what you are booking (for example “ExamsDojo Demo”), so our team can prepare for and follow up the call. Google then handles the booking itself under its own Privacy Policy.
We do not ask for special category data (health, biometrics, political opinions and similar) and we ask that you do not include it in a brief. If you send it anyway, we will delete it once the enquiry is resolved.
04 How we use it
Every use falls under one of these purposes:
- Answering you. Replying to a brief, scoping work, preparing an estimate, arranging a call.
- Delivering an engagement. Running a project, communicating with your team, raising invoices, providing support.
- Running the business. Accounting, tax records, insurance, resolving disputes, keeping our own security logs.
- Improving the site. Understanding in aggregate which pages are useful and where people give up.
- Occasional updates. Sending the insights newsletter, only where you asked for it.
We do not make automated decisions about you that produce legal or similarly significant effects, and we do not profile you for advertising.
05 Legal bases
Where the UK GDPR, EU GDPR or India's Digital Personal Data Protection Act applies, we rely on:
- Legitimate interests — responding to a business enquiry you sent us, securing our systems, and understanding site usage in aggregate. We have weighed these against your rights and consider them proportionate because the data is minimal and the use is the one you would expect.
- Performance of a contract — everything required to deliver an engagement you have signed.
- Legal obligation — tax, accounting and statutory record-keeping.
- Consent — the newsletter and any non-essential analytics. You can withdraw consent at any time; doing so does not affect processing that already happened.
06 Cookies and analytics
This site is deliberately light on tracking. We do not run advertising pixels, cross-site trackers or data brokers. The full list of every cookie and similar technology, with its purpose and lifetime, is in our Cookie Policy, and you can change your choices at any time with Cookie settings in the footer.
- Strictly necessary storage. A cookie that remembers your cookie choices, a short counter in your browser that slows down repeated form submissions, and a session flag so the loading animation does not replay on every page. These carry no profile of you and are always on.
- Functional and analytics storage. Only if you accept them: for example a note that you already subscribed, or, for analytics, the page you arrived on and which button led you to a form.
- Spam protection (Google reCAPTCHA). Our forms and the staff sign-in use Google reCAPTCHA v3 to tell people from bots. It loads only when you start using a form. Google receives your IP address, browser details and how you interact with the page, and sets a cookie (
_GRECAPTCHA); Google's Privacy Policy and Terms of Service apply. We receive only a score, which we keep with the enquiry. - Fonts and libraries. Typefaces and animation libraries are served from our own server, so your browser does not contact a font or code provider to display the site.
- Visit records. Our own server counts page views and clicks on outbound links. Without your consent each record holds the page, where you came from, your device type, browser and country, with no IP address and no cookie. If you accept analytics we also keep your IP address and the internet provider it belongs to, and record how you use the site: pages viewed and time spent, scroll depth, sections seen, buttons and links clicked, whether forms were viewed, started or submitted (never what you typed), downloads and where you came from. These records use a random visitor ID and visit ID stored in two cookies, are kept for 13 months, and are erased if you withdraw analytics consent. If you send an enquiry after accepting analytics, we link it to the pages you visited so we can see which content led to it. The country and provider are looked up in an offline database on our server, so your address is not sent to anyone.
- Consent records. When you save a cookie choice we keep a record of it (time, an anonymous ID, your choice, IP address, browser and page) for 36 months as proof of consent.
- Forms and security. What you send through a form is stored on our server so we can reply, together with your IP address, browser details and the page you sent it from. To stop spam and abuse we also keep a short log of blocked attempts, using a one-way hash in place of your IP address.
Your browser can block or clear all of the above. Nothing on this site breaks if you do.
07 AI systems and your data
We build AI systems for a living, so it is worth being explicit about how that intersects with privacy.
- Your enquiry is not training data. What you send us through this site is used to answer you. It is not added to any training set, ours or anyone else's.
- Client data stays the client's. On delivery engagements we deploy against enterprise model tiers with training opt-out enabled, or against open-weight models hosted inside the client's own cloud account where policy requires it.
- Personal data is minimised before inference. Where a workload touches personal data, we redact what the model does not need before the request leaves the client boundary, and we log what was sent.
- Decisions stay explainable. Systems we build record their inputs, retrieved sources and outputs so an automated outcome can be reconstructed and challenged later.
If you are a client's customer and believe your data is being processed by a system we built, contact that organisation first — they are the controller and hold the records. We will support them in responding, and you can copy us at contact@avioxtechnologies.com.
08 Who we share it with
We do not sell personal data and we do not share it for anyone else's marketing. We do share it with a small set of service providers who process it on our instructions under contract:
- Cloud hosting and infrastructure providers.
- Email, calendar and business collaboration tools.
- Accounting, invoicing and payment processors.
- Professional advisers, where a matter genuinely requires it.
We will also disclose data where we are legally required to, or where it is necessary to establish or defend a legal claim. If Aviox is ever acquired or merged, data may transfer as part of that transaction; you would be told before it changed how your data is used.
09 International transfers
We operate from India and the United States and use providers based in several jurisdictions, so personal data may be transferred outside the country it was collected in. Where data moves out of the UK or EEA we rely on the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses, together with any additional technical measures a transfer risk assessment identifies. You can request a copy of the relevant safeguards.
10 How long we keep it
| Data | Kept for |
|---|---|
| Enquiries that do not become work | 24 months from last contact, then deleted |
| Client contract and delivery records | Duration of the contract plus 7 years, for tax and limitation periods |
| Newsletter subscription | Until you unsubscribe, plus a suppression record so we do not re-add you |
| Recruitment applications | 12 months, unless you ask us to keep them on file |
| Server and security logs | Up to 12 months |
11 Your rights
Depending on where you live, you can ask us to:
- Show you what personal data we hold about you and why.
- Correct anything inaccurate or incomplete.
- Delete it, where we have no overriding obligation to keep it.
- Restrict or object to processing based on legitimate interests.
- Port data you gave us to another provider in a machine-readable format.
- Withdraw consent for the newsletter or non-essential analytics.
Email contact@avioxtechnologies.com and we will respond within 30 days. We do not charge for this. We may ask you to confirm your identity first, purely so we do not disclose your data to somebody else.
If you are unhappy with our response you can complain to your local supervisory authority — the Information Commissioner's Office in the UK, your national authority in the EEA, or the Data Protection Board of India. We would rather you told us first so we can fix it.
12 Security
We apply the same engineering standards to our own systems that we recommend to clients: encryption in transit and at rest, least-privilege access, multi-factor authentication on administrative accounts, dependency and vulnerability scanning in the build pipeline, and audit logging on systems that touch personal data.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant authority within 72 hours and tell affected individuals without undue delay.
13 Children
This site and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18 through this site. If you believe a child has provided us data, tell us and we will delete it.
14 Changes to this policy
We will update this policy when our practices change. The effective date at the top always reflects the current version, and material changes will be flagged on this page for at least 30 days. Previous versions are available on request.
15 Contact us
For anything in this policy — a question, a request, or a complaint:
- Email — contact@avioxtechnologies.com
- Sales — sales@avioxtechnologies.com
- India — E-299 Corporate Greens, Sector 75 Industrial Area, SAS Nagar, Punjab 160055 · +91 95017 54948
- USA — 3673 Lexington Ave N, Ste H-2, Arden Hills, MN 55126 · +1 763-200-6344