Privacy Policy

This policy explains how personal data is processed when you visit this marketing website (avis-studio.app). It is written to satisfy the EU General Data Protection Regulation (GDPR), the German BDSG, and the main US state privacy laws (see the US section below).

Scope: this policy covers the public website only. The Avis Studio workspace app and any purchases are handled separately: purchases run through our Merchant of Record (Paddle), whose privacy policy governs the checkout and payment data.

1. Controller

The controller responsible for data processing on this website is:

We are not legally required to appoint a Data Protection Officer. For any privacy request, contact us at the email above.

2. What we collect, and why

How consent works in your region

We determine your region on our server from the country your network connection resolves to (via our hosting provider), so the correct rule applies before anything loads:

• EU, EEA, United Kingdom and Switzerland: the analytics and advertising tools below run only after you actively consent. Until you click “Accept” in the banner, nothing is sent to Google or Meta — in your browser or from our server — and no analytics/advertising cookies are set.
• All other regions: these tools run by default under a notice-and-opt-out model, as permitted by the applicable law (e.g. the US state privacy laws in section 6). A non-blocking notice tells you this, and you can opt out at any time via the “Cookie settings” link in the footer. After you opt out, nothing further is sent — browser or server — and existing cookies are removed.

The subsections below describe each tool; where they say “only with your consent”, that is the EU/EEA/UK/Switzerland rule above.

Server log files (hosting)

This site is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you load a page, the hosting infrastructure automatically processes technical data your browser transmits: IP address, date and time, requested URL, referrer, user-agent and similar. This is necessary to deliver the site securely and reliably.

• Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a stable, secure website.
• Retention: log data is kept only as long as needed for security and operations, then deleted or anonymised.

Analytics (Google Analytics 4) — only with your consent

We use Google Analytics 4, a web-analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to understand how visitors use the site (e.g. which pages are viewed, approximate region, device and browser type). To do this, Google Analytics stores cookies and similar identifiers on your device and transmits the collected data to Google, including to servers operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Your IP address is shortened by Google before any further processing; we do not use Google Analytics for advertising, remarketing or cross-site tracking.

In the EU/EEA/UK/Switzerland, Google Analytics only runs after you actively consent. There, a banner asks whether analytics may be enabled, and no Google Analytics cookies are set and no data is sent to Google unless and until you click “Accept”. In other regions it runs by default and you can opt out at any time (see “How consent works in your region” above).

• Legal basis: your consent under Art. 6 (1) (a) GDPR, and § 25 (1) TDDDG for storing/reading information on your device.
• Withdrawing consent: you can change or withdraw your choice at any time with effect for the future via the “Cookie settings” link in the footer. You can also install Google's browser opt-out add-on.
• Retention: aggregated analytics data is retained for up to 14 months; the consent cookies expire within up to 2 years or when you withdraw consent.
• More information: see how Google uses analytics data and Google's privacy policy.

Advertising measurement (Meta Pixel & Conversions API)

We advertise this product on Meta platforms (Facebook and Instagram). To measure whether those ads work, we use the Meta Pixel, a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). When loaded, the pixel stores first-party cookies on your device (notably _fbp, and _fbc if you reached us from an ad click) and transmits event data — that you viewed a page or clicked a “Start free trial” button, together with technical data such as your IP address, user-agent and the ad click identifier — to Meta, including to Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA. Meta acts as an independent controller for its own further use of this data. On this website we only record a page view and trial-button clicks; we do not record any purchase or sign-up here.

The same events are also sent server-side via Meta's Conversions API: our server transmits the event (with the technical data above) directly to Meta, and it is de-duplicated against the browser event so it is not counted twice. This server-side path is subject to the exact same regional consent — it is not used to bypass a refusal: in the EU/EEA/UK/Switzerland nothing is sent from our server unless you consented, and after an opt-out elsewhere nothing further is sent.

Because the cookies are set on our root domain, a page view here can be linked to a later sign-up on our workspace app (a subdomain of the same site) so we can attribute it to the ad you clicked. This is cross-context, advertising-related processing.

In the EU/EEA/UK/Switzerland, the Meta Pixel and the server-side Conversions API only run after you actively consent. No Meta cookies are set and no data is sent to Meta — browser or server — unless and until you click “Accept”. In other regions they run by default and you can opt out at any time (see above).

• Legal basis: your consent under Art. 6 (1) (a) GDPR, and § 25 (1) TDDDG for storing/reading information on your device. Where Meta processes the data as a controller, that is governed by Meta's own policy.
• Withdrawing consent: change or withdraw your choice at any time with effect for the future via the “Cookie settings” link in the footer.
• Retention: the pixel cookies expire within up to 90 days (or when you withdraw consent); Meta's retention of the event data is governed by its policy.
• More information: see Meta's cookie policy and privacy policy.

Fonts (self-hosted)

Fonts are self-hosted and served from our own infrastructure at build time. No connection to Google servers is made when you load the site, so no data is transmitted to Google Fonts.

Contacting us

If you email us, we process the data you send (your address and message) solely to handle your request.

• Legal basis: Art. 6 (1) (b) GDPR where it concerns a (pre-)contractual matter, otherwise Art. 6 (1) (f) GDPR.

3. Cookies & local storage

In the EU/EEA/UK/Switzerland, this website sets no analytics or advertising cookies until you consent. In other regions they may be set by default until you opt out (see section 2). We set:

• Your consent choice — stored in your browser (local storage) and mirrored to a cookie on our root domain so the choice is remembered across our subdomains. Strictly necessary and set without consent.
• Your region (avis-region) — a strictly necessary cookie recording only whether the opt-in or opt-out rule applies to you, so we apply the correct consent regime. It holds no identifier and is set without consent.
• Google Analytics cookies (e.g. _ga, _ga_<id>) — set only after you accept in the banner (see section 2). Declining, or withdrawing consent later, means these are not set, and existing ones are removed.
• Meta Pixel cookies (_fbp, and _fbc if you arrived from an ad) — set only after you accept in the banner (see section 2), on our root domain so ad attribution carries across to our workspace app. Declining, or withdrawing consent later, means these are not set, and existing ones are removed.

4. International data transfers

Our hosting provider (Vercel Inc.) is based in the USA, so technical data described above may be processed there. If you consent, data is additionally transferred to the USA — to Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for analytics and to Meta (Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA) for advertising measurement. Such transfers are safeguarded by the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. You can review the host's data processing terms, the host's privacy policy , Google's privacy policy and Meta's privacy policy.

5. Your rights under the GDPR

If the GDPR applies to you, you have the right to:

• access your personal data (Art. 15);
• rectification (Art. 16) and erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21).

To exercise any of these, email legal@avis-studio.app. You also have the right to lodge a complaint with a supervisory authority. Ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) (Promenade 18, 91522 Ansbach, Germany).

6. Your rights under US state privacy laws

If you are a resident of California (CCPA/CPRA) or another US state with a comprehensive privacy law (e.g. Virginia, Colorado, Connecticut, Utah, Texas), the following applies to this website:

• Categories collected: internet/network activity (log and aggregate analytics data, and — if you consent — the Meta Pixel identifiers described above). We do not knowingly collect sensitive personal information here.
• Sharing for advertising: we do not sell your personal information for money. If you consent to the Meta Pixel, we do “share” internet-activity data for cross-context behavioural advertising, as those terms are defined under the CCPA/CPRA and similar laws. You can stop this at any time — and opt out under those laws — by declining or withdrawing consent via the “Cookie settings” link in the footer, which is our “Do Not Sell or Share” mechanism for this site. We do not knowingly share the data of anyone under 16.
• Your rights: to know/access, delete, correct, opt out of sharing for targeted advertising, and to be free from discrimination for exercising these rights.

To make a request, email legal@avis-studio.app, or use the “Cookie settings” link to opt out of advertising sharing directly. We will verify and respond within the time frames required by applicable law.

7. Children

This website and our product are directed at businesses and professionals, not children. We do not knowingly collect personal data from children under 16 (or under 13 where COPPA applies). If you believe a child has provided us data, contact us and we will delete it.

8. Changes to this policy

We may update this policy as the site or the law changes. The current version is indicated by the “Last updated” date at the top.