Privacy Policy

1. Who We Are

Avox Labs operates as a digital product studio with primary entities in Nairobi, Kenya and Dover, Delaware, USA. When you engage with our public web platform, client portal, or commercial services, Avox Labs acts as the data controller for personal information collected through our direct channels.

2. Information We Collect

We only collect information necessary to deliver exceptional product engineering services and maintain commercial communications:

• Inquiry & Brief Information: Name, work email address, company or organization, project budget estimates, timeline constraints, and scope specifications submitted through our contact forms.
• Client Portal Accounts: Account email, authenticated user identifier, organization billing details, and interaction records within the client invoice and quote system.
• Technical Telemetry: Anonymized server logs, IP addresses for security and abuse prevention, and local interface preferences (such as light or dark theme state stored strictly in your browser).

3. How We Use Your Data

We process personal and project information strictly for legitimate commercial and technical operations:

• Evaluating project briefs, conducting technical feasibility reviews, and preparing itemized proposals.
• Operating our self-service client portal for quote approvals, invoice tracking, and customer support.
• Fulfilling legal, statutory accounting, and compliance requirements in Kenya and the United States.
• Preventing fraudulent transactions and defending our infrastructure against automated abuse.

4. Third-Party Infrastructure Processors

We partner with enterprise-grade cloud providers who adhere to strict data security standards:

• Supabase: Encrypted relational database storage, authentication management, and row-level security (RLS).
• Paystack: PCI-DSS Level 1 compliant payment gateway handling credit card and mobile money disbursements. We never store raw payment card data on our servers.
• Vercel: Global edge network deployment, edge function execution, and static asset distribution.

5. Your Rights & Data Protection

Depending on your jurisdiction (including the Kenyan Data Protection Act 2019, the European Union GDPR, or the California Consumer Privacy Act), you retain full rights regarding your data. You may at any time request access to your records, request rectification of inaccuracies, or request complete deletion of your customer portal account.

To exercise any of these rights, contact our legal counsel directly at legal@avoxlabs.com or hello@avoxlabs.com.