1. Definitions
In this Privacy Policy:
- “Aavgo,” “we,” “us,” and “our” mean Parshva Corp, doing business as Aavgo [Legal entity name, to confirm].
- “Site” means the website at aavgo.com and its pages, forms, and features that link to this Privacy Policy.
- “Services” means Aavgo’s hotel front-desk products and services, including remote front-desk agents, self check-in kiosks, guest and staff applications, and related software.
- “Personal Information” means information that identifies, relates to, or could reasonably be linked with an identified or identifiable individual or household, and includes “personal data” as defined under the GDPR.
- “Processor” or “Service Provider” means a third party that processes Personal Information on our behalf and under our instructions.
- “Consent” means your freely given, specific, informed, and unambiguous agreement, such as selecting “Accept” in our cookie notice.
- “Applicable Law” means all data-protection and privacy laws that apply to a given processing activity, which may include the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), other U.S. state privacy laws, the EU and UK General Data Protection Regulation (“GDPR”), and India’s Digital Personal Data Protection Act, 2023.
2. Scope
This Privacy Policy applies to Personal Information we collect through the Site and through communications with prospective customers. When Aavgo provides the Services to a hotel, the hotel generally decides how guest information is used, and Aavgo processes that information on the hotel’s behalf under its agreement with the hotel. In that case, the hotel’s own privacy notice governs, and questions about guest information should be directed to the hotel.
This Privacy Policy does not apply to third-party websites or services, even if linked from the Site.
3. Information We Collect
3.1 Information you provide
- Contact and pricing forms. Name, work email, phone number, company or hotel name, and any details you include in your message, such as number of rooms or desired coverage hours.
- Meeting bookings. When you book a meeting through our Microsoft Outlook Bookings page, Microsoft collects the details you enter (such as name, email, phone number, and selected time) and shares them with us so we can hold the meeting.
- Email and other communications. The content of messages you send us and records of our correspondence.
3.2 Information collected automatically
- Analytics data (only with Consent). If you accept analytics cookies, Google Analytics 4 collects information such as pages viewed, referring pages, approximate location derived from IP address, device and browser type, and interactions with Site features (for example, buttons, the savings calculator, and form starts).
- Session recordings and heatmaps (only with Consent). If you accept analytics cookies, Microsoft Clarity records how you scroll, click, and move through pages. Form fields on the Site are masked so that their contents are not captured.
- Technical data. Our hosting provider may log basic technical information, such as IP address, browser type, and request times, to deliver and secure the Site.
3.3 Savings calculator
The savings calculator runs in your browser. The hours you select are used to display an estimate. If you have accepted analytics cookies, the selections are recorded as anonymous usage events; they are not linked to your name or contact details by us.
4. Cookies and Similar Technologies
We use cookies and similar technologies only as described below. Non-essential technologies load only after you give Consent.
| Technology | Purpose | When it loads |
|---|---|---|
| Essential storage (for example, your cookie choice) | Remembers your consent choice and supports basic Site functions | Always (strictly necessary) |
| Google Analytics 4 (with Google Consent Mode v2) | Measures Site traffic and feature use | Analytics storage is denied by default and enabled only after you select “Accept”; advertising storage, ad user data, and ad personalization remain denied |
| Microsoft Clarity | Session recordings and heatmaps to improve usability; form fields masked | Loads only after you select “Accept” |
4.1 Withdrawing or changing Consent
You may change your choice at any time by selecting Cookie settings in the Site footer and choosing “Decline.” You may also clear cookies and site data in your browser settings. Withdrawing Consent does not affect processing that took place before withdrawal.
4.2 Global Privacy Control
If your browser sends a Global Privacy Control (“GPC”) signal and you have not made a choice in our cookie notice, the Site treats the signal as declining analytics, and Google Analytics and Microsoft Clarity are not enabled.
5. Kiosk and Mobile Check-In Services
Aavgo’s Services may include self check-in kiosks, mobile check-in, digital keys, and live remote agents for hotels. Depending on the hotel’s configuration, these Services may process guest information such as reservation details, identity verification information, and payment information. That processing is performed on behalf of the hotel and is described in the hotel’s privacy notice and in Aavgo’s agreements with the hotel, not in this Site Privacy Policy. Card payments in the Services are handled through payment processors in accordance with PCI DSS requirements.
6. How We Use Personal Information and Legal Bases
| Purpose | Examples | Legal basis (where the GDPR applies) |
|---|---|---|
| Responding to inquiries and providing quotes | Replying to forms, sending requested pricing, scheduling meetings | Steps taken at your request before entering into a contract; legitimate interests |
| Communicating with prospective and current customers | Follow-up emails, service updates, and, where permitted, marketing emails | Legitimate interests; Consent where required by law |
| Measuring and improving the Site | Analytics, session recordings, heatmaps | Consent |
| Security and fraud prevention | Monitoring for misuse and protecting systems | Legitimate interests; legal obligation |
| Legal and compliance | Complying with law, responding to lawful requests, enforcing our terms | Legal obligation; legitimate interests |
You may opt out of marketing emails at any time using the unsubscribe link in the email or by contacting us.
7. Sharing and Processors
We do not sell Personal Information, and we do not share Personal Information for cross-context behavioral advertising. We disclose Personal Information only as follows:
- Google (Google Analytics 4), for Site analytics, only with Consent.
- Microsoft (Microsoft Clarity, for session recordings and heatmaps only with Consent; Microsoft Outlook Bookings and Microsoft 365, for meeting scheduling and email).
- Mailchimp (Intuit Inc.), for sending email communications and managing subscriptions.
- Form delivery provider [FormSubmit (formsubmit.co), to confirm], which delivers Site form submissions to our sales inbox.
- Hosting and infrastructure providers [Hosting provider name], to operate and secure the Site.
- Aavgo personnel and affiliated teams in the United States, India, and the Philippines who need the information to respond to you or provide the Services.
- Legal and safety disclosures, where required by law or legal process, or to protect the rights, property, or safety of Aavgo, our customers, or others.
- Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
Our Processors are permitted to use Personal Information only to provide services to us and are bound by contractual confidentiality and security obligations.
8. International Data Transfers
Aavgo is based in the United States, and our remote front-desk agents and support teams work from call centers in India and the Philippines. Personal Information may therefore be accessed from or processed in the United States, India, and the Philippines, and in other countries where our Processors operate. These countries may have data-protection laws that differ from those in your country. Where required, we use appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses [and the UK International Data Transfer Addendum, to confirm].
9. Retention
We keep Personal Information only as long as necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. As a guide:
- Inquiry, form, and meeting records: [Retention period for leads, to confirm].
- Account and identity data: for the life of the account and deleted within 90 days after closure or inactivity, whichever comes first.
- Support and communication logs: 18 months from closure of the support case.
- Security and audit logs: at least 1 year and up to 2 years, consistent with PCI DSS and internal audit requirements.
- Financial and billing records: 7 years, or as required by tax and accounting law.
- Analytics data: according to the retention settings in Google Analytics and Microsoft Clarity [GA4 and Clarity retention settings, to confirm].
- Anonymized or aggregated data that cannot identify an individual may be kept indefinitely.
10. Security
Aavgo maintains administrative, technical, and physical safeguards designed to protect Personal Information, including access controls, encryption in transit, logging, and monitoring. Aavgo is SOC 2, PCI DSS, and ISO 27001 compliant. These compliance programs describe our security controls; they do not guarantee that any system is free of risk. No method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security. To report a suspected security issue, contact security@aavgo.com.
11. Your Privacy Rights
11.1 California and other U.S. states
Depending on your state of residence, including California under the CCPA/CPRA, you may have the right to: (a) know and access the categories and specific pieces of Personal Information we have collected about you; (b) correct inaccurate Personal Information; (c) delete Personal Information; (d) obtain a portable copy; (e) opt out of the sale or sharing of Personal Information, targeted advertising, and certain profiling; and (f) limit the use of sensitive Personal Information. We do not sell or share Personal Information, do not use it for targeted advertising, and do not use sensitive Personal Information for purposes that would require a right to limit. We will not discriminate against you for exercising your rights.
11.2 EEA, UK, and Switzerland
Where the GDPR applies, you may have the right to access, rectify, erase, restrict, or object to processing of your Personal Data, the right to data portability, and the right to withdraw Consent at any time. You also have the right to lodge a complaint with your local supervisory authority.
11.3 How to exercise your rights
Email security@aavgo.com with the subject “Privacy Request.” We may need to verify your identity before responding. You may use an authorized agent, who must provide proof of authorization. If we deny your request, you may appeal by replying to our decision with the subject “Privacy Appeal.” We respond within the time required by Applicable Law (generally 45 days under the CCPA/CPRA and one month under the GDPR, subject to permitted extensions).
13. Children’s Privacy
The Site and Services are intended for adults (18 years and older) acting in a business capacity. We do not knowingly collect Personal Information from children under 18. If you believe a child has provided Personal Information to us, contact us and we will delete it.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. If changes are material, we will provide additional notice as required by Applicable Law.
15. Contact Us
Questions or requests regarding this Privacy Policy may be directed to:
- Parshva Corp, doing business as Aavgo
- Business address: 1730 S Amphlett Blvd, Suite 125, San Mateo, CA 94402
- [Registered address, if different, to confirm]
- Privacy and data-protection contact: security@aavgo.com
- [Data Protection Officer name and contact, to confirm]
- [EU/UK representative, if required, to confirm]