Privacy Policy

Riverso Ventures Inc. (“Averow”, “we”, “us”, or “our”) operates the Averow AI agent platform. This Privacy Policy explains how we collect, use, store, and protect information when you use our Service. We take privacy seriously and are committed to handling your information with care.

We do not sell your personal data. We do not use your data to train AI models.

Account information. When you register, we collect your email address, name, city, and timezone. If you sign in with Google, we receive your name and email from Google’s OAuth service.

Agent configuration. We store the configurations you create for your Agent — including its name, personality, goals, skills, and any instructions you provide. This information is used solely to operate your Agent on your behalf.

Credentials and integrations. When you connect third-party services (such as Telegram, CRMs, or other platforms), we store the credentials you provide (API keys, tokens, chat IDs). All credentials are encrypted at rest using AES-256 encryption and are never accessible to Averow staff in plaintext.

Activity data. We log Agent activity — including skill runs, messages sent, tasks completed, and errors — to display in your dashboard and to help you monitor your Agent’s behaviour. Activity logs are retained for 90 days.

Conversation history. Messages between you and your Agent (via dashboard chat or connected channels) are stored within your isolated Agent environment to maintain context across conversations.

Usage data. We collect standard usage information such as IP addresses, browser type, and pages visited to operate and improve the Service. This data is not sold or shared with advertisers.

We use the information we collect to:

• Provision and operate your isolated Agent container.
• Execute the skills and tasks you have configured your Agent to perform.
• Authenticate your account and keep it secure.
• Send you transactional communications (account confirmations, password resets, important service notices).
• Display your Agent’s activity in your dashboard.
• Improve the reliability and performance of the Service.
• Respond to your support requests.

We do not use your data to train AI models, and we do not share your data with third parties for advertising purposes.

Each Averow account runs in a private, isolated container environment. Your Agent’s data — including its memory, configurations, credentials, and conversation history — is logically separated from other users’ data at the infrastructure level.

Security measures we implement include:

• AES-256 encryption for stored credentials and sensitive configuration data.
• Encrypted connections (TLS) for all data in transit.
• Access controls limiting staff access to production data.
• Regular security reviews of our infrastructure.

Despite these measures, no internet-connected system can guarantee perfect security. We encourage you to use credentials with minimum required permissions and to rotate any credentials you believe may be compromised. Please notify us immediately at hello@averow.com if you suspect unauthorized access to your account.

Your Agent processes data on your behalf — including reading messages, browsing web pages, and interacting with third-party services — as directed by the skills and instructions you configure. This processing occurs within your isolated container environment.

When your Agent uses AI models to generate responses or take actions, your inputs and relevant context may be sent to the AI model provider (such as Google or OpenAI) to generate outputs. This processing is subject to the AI provider’s data processing terms. We configure AI providers to use your data only for inference, not for training.

You are responsible for ensuring that any data you direct your Agent to process complies with applicable privacy laws, including obtaining any required consents from third parties whose data your Agent may handle.

Averow integrates with third-party services at your direction — including communication platforms (Telegram), CRM systems, and others. When your Agent interacts with these platforms using credentials you provide, it does so on your behalf. We are not responsible for how those platforms handle data.

We use the following infrastructure providers:

• Supabase — authentication and database (your account data and activity logs).
• Cloud infrastructure providers — to host your isolated Agent containers.
• AI model providers — to power your Agent’s intelligence (data sent only for inference).

We retain your account data for as long as your account is active. Activity logs are retained for 90 days. When you delete your account, we delete your data within 30 days, except where retention is required by applicable law.

Conversation history within your Agent’s memory persists until you clear it or delete your account.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent for optional processing.

To exercise any of these rights, contact us at hello@averow.com. We will respond within 30 days.

We use essential cookies to maintain your authenticated session. We do not use cookies for advertising or tracking across third-party websites. You can disable cookies in your browser settings, but doing so may prevent you from using the Service.

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or within the product. The effective date at the top of this page reflects when the policy was last updated.

Questions or concerns about this policy? Reach us at hello@averow.com or write to:

Riverso Ventures Inc.
Toronto, Ontario, Canada