Privacy Notice.
Draft prepared . This candidate notice describes the data practices Aveline Ventures LLC (“Aveline,” “Company,” “we,” “us,” or “our”) expects for Daveth’s currently available website and identity services (the “Service”).
What this Notice covers
At publication, Daveth provides a limited identity and authentication experience. This Notice covers data handled through account creation, email verification, sign-in, password recovery, abuse prevention, and related support contact. Before Daveth introduces new product areas such as paid services, courses, learning records, support cases, or certificates, their data practices must be reviewed and this Notice updated before the new processing begins.
Information you provide or create
- Account details: your name, email address, and the Daveth account identifiers created when your identity is activated.
- Authentication and security information: confirmation status, authentication-provider subject identifiers, session and security events needed to protect and operate your account. Password handling is performed by the authentication provider; Daveth pages do not display your password.
- Optional provider information: if Google sign-in is enabled and you choose it, the identity information returned under the requested Google OpenID, email, and profile scopes.
- Support correspondence: information you send to support@daveth.com.
- Local browser data: a session stored under
daveth.auth.session, your selected display theme, and a short-lived OAuth consent-flow indicator. You can remove local browser storage through your browser controls or by signing out where available.
Purpose-limited use
- create, verify, secure, and administer your Daveth identity;
- send requested account-security and password-recovery messages;
- detect, prevent, investigate, and respond to abuse, fraud, security incidents, and technical failures;
- provide support and comply with applicable law, lawful requests, and enforceable legal obligations; and
- establish, exercise, or defend legal claims where necessary.
Where applicable law requires a legal basis, our processing is based on performance of a request or agreement with you, legitimate interests in operating a secure Service, compliance with legal obligations, or your consent where we ask for it.
When information is disclosed
We disclose information only as needed to operate and protect the Service, including to infrastructure, authentication, email-delivery, and abuse-prevention providers. The current technical implementation uses Cloudflare for site delivery and Turnstile abuse protection, Supabase for authentication and database services, and may use Google when you elect Google sign-in. These providers process information under their own terms and privacy documentation and our applicable arrangements with them.
We may also disclose information in connection with a corporate transaction, to comply with law or a valid legal process, or where necessary to protect the rights, safety, and security of Aveline, users, or others. We do not authorize service providers to use personal information for their own unrelated purposes.
Protecting and retaining information
We use proportionate technical and organizational safeguards designed to protect account information. No internet service can guarantee absolute security. We retain information only for as long as reasonably necessary for the purposes described here, including security, account continuity, legal, audit, and dispute-resolution needs. Some identity and consent records may be retained when needed to preserve security, legal evidence, or account-lifecycle integrity.
Access, correction, deletion, and questions
Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or portability of certain personal information; to object to certain processing; or to withdraw consent where processing relies on consent. To make a request, email support@daveth.com with the subject line “Privacy request.” We may need to verify your identity before responding, and some information may need to be retained where law or legitimate security and recordkeeping needs permit or require it.
Daveth is not intended for anyone below the minimum age required to use the Service in their jurisdiction. If you believe a child has provided personal information in violation of that rule, contact us so we can review the request.
Changes to this Notice
We may publish a new version when our practices or applicable requirements change. A revised notice will have its own version and publication date. This document does not itself determine which version applies to any account; the relevant service flow and recorded consent evidence control that question.
Questions about this Notice can be sent to support@daveth.com. For the related versioned Terms document, see Aveline-Daveth Terms v1.0.