--- title: Privacy Policy ยท Aeonav description: How Aeonav handles personal information and account data. canonical: https://www.aeonav.fivecoder.com/legal/privacy updated: "2026-11-09" --- [/ Legal](http://www.aeonav.fivecoder.com/legal) # Privacy Policy Last updated November 9, 2026 > **Publication status.** This is Aeonav's operational privacy baseline, not a finalized privacy notice. Aeonav is operated by the Fivecoder team. The operator's legal name, business address, final vendor list, international transfer position, retention schedule, and data processing terms must be confirmed before paid commercial launch. This policy describes how the Fivecoder team ("we", "our", or "us") handles personal information in connection with Aeonav, our websites, and our APIs (together, the "Services"). Aeonav is the product name. The legal entity or individual acting as the data controller has not yet been stated because that information has not been confirmed. This policy covers visitors, prospective customers, customers, and authorized users of the Services. It does not cover personal information that a customer processes through its own separate systems, or information a customer asks us to process solely on its behalf under a separate written agreement. ## [Information we collect](#information-we-collect)Copy Anchor Link ### [Account and authentication information](#account-and-authentication-information)Copy Anchor Link We collect information needed to create and operate an account, such as your name, email address, password or authentication credentials, profile information supplied by an identity provider, organization membership, and account preferences. Identity providers enabled in a deployment may process authentication data under their own terms. ### [Customer content](#customer-content)Copy Anchor Link We store the content you submit to the Services, including brands, competitors, prompts, websites, domains, tracked topics, source URLs, generated reports, and related configuration. This content is processed to provide and secure the Services. ### [Billing and payment information](#billing-and-payment-information)Copy Anchor Link If you purchase a paid plan, Waffo currently provides checkout and payment processing. Payment card details are submitted through the payment flow and are not sent to us by email or support message. We may receive and retain transaction references, plan information, billing status, invoice records, and related support information. Payoneer may be used by the operator to receive settlement or payout. Payoneer is not a customer checkout method unless a checkout page expressly says so. ### [Technical, security, and usage information](#technical-security-and-usage-information)Copy Anchor Link We may collect account identifiers, IP address, timestamps, authentication events, request metadata, browser and device information, diagnostic logs, error reports, and security events. We use this information to operate, secure, troubleshoot, and improve the Services. ### [Support communications](#support-communications)Copy Anchor Link When you contact us, we receive the information you include in the message, such as your email address, account details, attachments, and correspondence history. ### [Cookies and similar technologies](#cookies-and-similar-technologies)Copy Anchor Link We use browser storage and may use cookies or similar technologies for sign-in, security, preferences, diagnostics, and, where enabled and permitted, analytics or advertising. See the [Cookie Policy](http://www.aeonav.fivecoder.com/legal/cookies). ## [Why we use information](#why-we-use-information)Copy Anchor Link We use information to: - provide, operate, and maintain the Services; - authenticate users and manage accounts and organizations; - process payments and maintain billing records; - deliver customer support and respond to requests; - detect, investigate, and prevent fraud, abuse, and security incidents; - debug errors and improve product reliability; - comply with legal, tax, accounting, and regulatory obligations; and - send service messages and, where permitted, marketing communications. ## [How information is shared](#how-information-is-shared)Copy Anchor Link We may share information with: - service providers that help operate the Services, such as hosting, database, authentication, payment, email, monitoring, AI, search, and crawling providers; - professional advisers, auditors, insurers, and payment or payout providers where needed to run the business; - authorities or other parties when required by law or necessary to protect rights, safety, and security; and - a successor or acquirer in connection with a merger, acquisition, financing, restructuring, or transfer of the Services, subject to applicable law. The current production vendor list is not final. The [Subprocessors](http://www.aeonav.fivecoder.com/legal/subprocessors) page states which providers have been confirmed and which entries remain subject to verification. Do not treat that page as a complete contractual subprocessor schedule until it says so. We do not state that we sell personal information. If our practices change, this policy and the Cookie Policy must be updated before the change takes effect. ## [AI, search, and customer content](#ai-search-and-customer-content)Copy Anchor Link Prompts and related content may be sent to third-party AI model, search, crawling, or analysis providers to produce the requested results. Do not submit personal information, credentials, confidential information, or content that you are not authorized to process. Third-party outputs can be inaccurate, incomplete, or non-deterministic. ## [Retention and deletion](#retention-and-deletion)Copy Anchor Link We keep information for as long as reasonably necessary for the purposes described in this policy, including operating the account, maintaining security, resolving disputes, and meeting legal, tax, and accounting obligations. - Account content is generally retained while the account is active. - Billing and transaction records may be retained where required for tax, accounting, fraud prevention, or legal compliance. - Logs and security records may be retained for a limited operational period, subject to incident and legal requirements. - Backups may retain deleted information until they expire. We do not currently promise a specific backup-retention period on this page. You can request deletion or export by emailing . We may need to verify your identity. Some information may be retained where law permits or requires it, or where needed to protect the Services and other users. > **Pending confirmation: retention schedule.** A precise retention table, backup period, deletion SLA, and data-export format must be confirmed before paid launch. ## [Your rights](#your-rights)Copy Anchor Link Depending on where you live and the law that applies, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, or appeal a decision. Email to make a request. We may need to verify your identity and may retain information where an exception applies. Nothing in this baseline is intended to waive a right that applicable law does not allow us to waive. ## [International transfers](#international-transfers)Copy Anchor Link Aeonav and its service providers may process information in countries other than the country where you live. The final list of provider locations and the applicable transfer mechanism are not yet confirmed. Before offering services to customers that require a data processing addendum or a specific transfer mechanism, the operator must document and publish the relevant safeguards. ## [Security](#security)Copy Anchor Link We use reasonable administrative, technical, and organizational measures designed to protect information. No system is perfectly secure, and we cannot guarantee that unauthorized access, loss, or alteration will never occur. Report suspected vulnerabilities to . ## [Children](#children)Copy Anchor Link The Services are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information, contact . ## [Data processing addendum](#data-processing-addendum)Copy Anchor Link A customer DPA is not represented as available on this page. We may discuss a DPA upon request, but no Standard Contractual Clauses, UK addendum, security schedule, audit commitment, or enterprise processing term should be treated as agreed until a reviewed document is signed by the appropriate parties. > **Pending confirmation: DPA and controller identity.** The controller's legal identity and address, the DPA template, transfer mechanism, security schedule, subprocessor notice process, and incident-notification commitment must be finalized with qualified counsel. ## [Changes and contact](#changes-and-contact)Copy Anchor Link We may update this policy as the Services and legal requirements change. The date at the top of the page shows the latest revision. Questions or requests can be sent to . A postal address is intentionally omitted until the operator's business address is confirmed. --- _This baseline is adapted from the [Basecamp open-source policies](https://github.com/basecamp/policies) under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), with substantial modifications for Aeonav._ ## Other policies - [Terms of Service](http://www.aeonav.fivecoder.com/legal/terms) - [Cookie Policy](http://www.aeonav.fivecoder.com/legal/cookies) - [Subprocessors](http://www.aeonav.fivecoder.com/legal/subprocessors) - [Acceptable Use](http://www.aeonav.fivecoder.com/legal/acceptable-use)