1. Who is responsible for your data
Avendo is created by Sansavision, a subdivision of Sansa Group AB in Gothenburg, Sweden. References to “Avendo”, “we”, “us”, or “our” in this policy mean Sansa Group AB acting through its Sansavision subdivision. For the marketing website and account administration, Sansa Group AB is the controller. When a customer uploads or connects product, research, content, audience, or customer data, we generally process that information on the customer's instructions as a processor or service provider.
Questions and privacy requests can be sent to support@sansavision.com. If your account is covered by a separate order form or data processing agreement, that agreement controls where it conflicts with this policy.
2. Information we collect
3. Why we use information
- Provide, secure, maintain, and troubleshoot Avendo.
- Create and administer accounts, workspaces, subscriptions, and authorised integrations.
- Process customer instructions and generate requested research, scripts, media and posts.
- Measure performance and improve the service when permitted by your settings and applicable law.
- Respond to support, legal, security, and rights requests.
- Prevent fraud, abuse, and violations of our Terms.
4. Legal bases in the EEA and UK
Depending on the activity, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already performed lawfully.
5. How we disclose information
We may disclose information to infrastructure, authentication, payment, communications, support, and professional-service providers under appropriate contractual restrictions; to connected platforms at your direction; within a corporate transaction; or when required to protect rights, safety, and comply with law. We do not disclose customer workspace content for third-party advertising.
Payment details are processed by the payment provider and are not stored as full card numbers by Avendo.
6. Connected social accounts
You can connect social accounts you own or manage so Avendo can post on your behalf. You connect each account through the platform's own sign-in, choose which accounts or Pages to share, and can disconnect at any time.
Avendo only posts content that you approve, or that the autopilot setting you switched on approves within your limits. Avendo never likes, comments on, shares or follows from your accounts, and never posts to accounts you have not connected. We do not sell data from connected accounts, use it for advertising, or use it to train general-purpose AI models. We disclose it only to the infrastructure providers that host Avendo, under the restrictions in Section 5.
Access tokens are encrypted before storage, kept outside our main database, and used only by our servers when a post or a performance check runs. Post performance figures are stored with your workspace for as long as the workspace exists.
When you disconnect an account in Settings, Avendo deletes the stored access tokens and, where the platform allows it, revokes Avendo's access with that platform (Google, Facebook and TikTok). Instagram has no revoke option for apps; remove Avendo under Instagram Settings → Apps and websites. You can also remove access at any time in your Google account permissions, your Facebook Business Integrations settings, or TikTok's Manage app permissions. Deleting your workspace deletes all data from connected accounts. You can also ask us to delete it at support@sansavision.com.
Google user data. Avendo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Avendo uses the YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google processes data under the Google Privacy Policy.
7. International transfers
Information may be processed outside your country. Where required for EEA, UK, or Swiss data, we use recognised safeguards such as adequacy decisions or standard contractual clauses and apply supplementary safeguards where appropriate.
8. Retention
We retain account data while an account is active and as needed for contractual, security, tax, dispute, and legal obligations. Workspace content is retained according to the customer's plan, settings, and agreement. Logs and backups are retained for limited operational periods and then deleted or de-identified according to our retention schedule.
9. GDPR and UK data-protection rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also withdraw consent and complain to your local supervisory authority. We may need to verify your identity and may direct requests about customer-controlled workspace content to the relevant customer.
Submit a privacy request10. California privacy notice
California residents may have rights to know, access, correct, and delete personal information; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service when exercising privacy rights. We do not currently sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics.
The categories collected during the preceding 12 months are described in Section 2. We use and disclose them for the business purposes in Sections 3 and 5. We retain them using the criteria in Section 8. Where legally required, we recognise Global Privacy Control as an opt-out preference signal.
You or an authorised agent may submit a request by email. We will verify requests using information associated with the account or request and will not discriminate against you for exercising a right.
Submit a California request11. Children
Avendo is a business service and is not directed to children under 16. We do not knowingly collect personal information from children under 16 through the marketing site.
12. Security and changes
We use technical and organisational safeguards designed to protect information. No system is completely secure. We may update this policy as the service or law changes and will post the revised date and provide additional notice when required.