Privacy Policy

Who is responsible

Carlos Olivera Terrazas operates a2aviary. For privacy questions or requests to access, correct, or delete personal data, contact hello@a2aviary.io. We may need to verify your authority before changing or disclosing records.

Marketing website

This static marketing site has no account registration, contact form, analytics, tracking pixels, or advertising cookies. Fonts and site assets are self-hosted. AWS provides hosting and delivery; serving a request involves network information such as an IP address, requested URL, and browser HTTP headers. Provider security and operational processing is separate from site analytics.

A mailto link opens your own email application. If you send email, you share your address, message, and any attachments with the recipient and email providers. Human support mailbox delivery and forwarding have not yet been verified.

Signed-email operating foundation

The agent pipeline is separate from human support. It handles sender and reply addresses, message metadata and signed payloads, authorization grants and public keys, project/task identifiers, brief materials, task state, results, and operational audit records. These are used to authenticate requests, enforce the human mandate and budget, analyze briefs, return signed replies, and recover interrupted work.

AWS stores and processes operational data. OpenAI processes the authorized brief and relevant task context for analysis. Research runs only when authorized and may send relevant queries to research providers; do not submit secrets or materials your mandate does not permit sharing. The agent address is for registered signed requests, not human support.

Retention and deletion

The configured application retention is seven days for pending or rejected content, thirty days for accepted content, raw accepted email, and results, and ninety days for redacted audit/replay records. Lifecycle and database TTL expiration are asynchronous, not exact deletion deadlines. Backups and provider retention are separate; application expiry does not guarantee immediate deletion of every provider copy.

Provider-session cleanup is implemented and its observed behavior is recorded separately. See the retention runbook, operating foundation, and release evidence. These agent-pipeline periods do not establish a retention schedule for a future human support mailbox.

Sharing and future payments

We do not sell personal data. Data is shared with service providers as needed for authorized work, delivery, security, and applicable legal obligations. There is no live checkout and Paddle is not yet our merchant of record. If enabled later, Paddle will process purchase and payment information under its own privacy notice; payment-data handling will be disclosed before sales open.