Privacy Policy

Avery Nexus develops private, sovereign and auditable AI for high-trust and critical environments. Designed to keep intelligence closer to where it matters, with greater control, privacy and precision.

Privacy Policy

Effective: 2026-07-27
Version: 2026-07-27

Avery Nexus ("we", "us") respects your privacy. This policy explains what personal data we collect through averynexus.com and related pages, why we collect it, how we use it, and the rights you have under the European Union General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).

1. Data Controller

Avery Nexus AS, organisation number 935 285 275, Norway, is the data controller for the personal data collected through this website.

Contact:sebastian@averynexus.com

2. What We Collect and Why

We only collect personal data you actively submit through our forms. We do not sell your data. We do not use it to train AI models.

2.1. Demo Request Form

We collect the following information:

  • Name and work email address
  • Phone number (optional)
  • Company, job title, and industry
  • The message you write and your decision authority answer

Purpose: To evaluate and respond to your pilot interest.

Legal basis: Steps taken at your request before entering into a contract (GDPR Article 6(1)(b)) and, where applicable, your consent (Article 6(1)(a)).

2.2. Investor Inquiry Form

We collect the following information:

  • Name and email address
  • Phone number (optional)
  • Investor type or firm and message

Purpose: To respond to your investment interest.

Legal basis: Your consent and our legitimate interest in evaluating strategic investors (GDPR Articles 6(1)(a) and 6(1)(f)).

2.3. Newsletter Signup

We collect the following information:

  • Email address
  • Language preference

Purpose: To send you product and company updates.

Legal basis: Your explicit marketing consent (GDPR Article 6(1)(a) and the Norwegian Marketing Control Act, markedsføringsloven, Section 15).

You can withdraw your consent at any time using the unsubscribe link in every email or by writing to us at sebastian@averynexus.com.

3. Who Has Access

Access to personal data submitted through forms is restricted to the Avery Nexus leadership team (currently the CEO and one operations lead) on a need-to-know basis.

We do not share your data with third parties, except with processors strictly required to run the service, as described in the following section.

4. Processors and Hosting

We use the following data processors:

  • Supabase: Database and authentication, with the hosting region configured for the EU. Form submissions are stored in a managed PostgreSQL relational database.
  • Resend: Transactional email delivery for confirmations and internal notifications.
  • Lovable: Website hosting and build platform.

We do not use MongoDB or any other third-party database beyond the processors listed above, and we do not store your data in any other system.

Each processor is bound by a data processing agreement and appropriate safeguards for any transfer outside the EU/EEA.

5. Retention

  • Demo and investor inquiries: Kept for up to 24 months from the last contact, then deleted or anonymised.
  • Newsletter subscribers: Kept until you unsubscribe or ask for deletion.
  • Server logs: Kept for up to 30 days for security and troubleshooting.

6. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your personal data ("right to be forgotten").
  • Restrict or object to processing.
  • Request data portability.
  • Withdraw your consent at any time, without affecting processing carried out before withdrawal.
  • Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) atdatatilsynet.no.

To exercise any of these rights, emailsebastian@averynexus.com.We respond within 30 days.

7. Cookies and Analytics

We use only strictly necessary cookies required to run the site and remember your language choice. We do not use third-party advertising or tracking cookies.

8. Security

Form submissions are transmitted over HTTPS. Data is stored in access-controlled databases with row-level security policies.

9. Children

Our website is intended for business use and is not directed at children under 16.

10. Changes to This Policy

We may update this policy from time to time. The current version number and date are shown at the top of this page.