This policy explains how Avantiqo handles information used by the Business Operating System, customer organizations and connected business services.
Core policy
Avantiqo processes organizational, operational, financial, workforce, commercial, customer, document and configuration data to provide the business workflows an organization enables. Access is governed by organization context, user permissions, roles and approved platform capabilities.
When an authorized user connects an external provider, Avantiqo may access the provider data required for the selected feature. The exact information depends on the provider and the permissions granted by the customer through that provider's authorization process.
Avantiqo uses information to provide requested business functionality, execute authorized workflows, maintain records and auditability, support reporting and reconciliation, improve enabled user-facing features, protect the service and comply with applicable legal obligations.
Avantiqo is designed so business records and connected-service access remain associated with the correct organization. Users are given access according to organization membership, role and permissions. External accounts are connected only by users authorized to act for that organization.
Where enabled, Avantiqo may use authorized business data to research, summarize, classify, recommend, create drafts, detect issues and coordinate approved workflows. Organizations remain responsible for configuring approvals and deciding which actions may be automated.
Avantiqo does not sell personal data or connected-service user data. Information may be processed by infrastructure or service providers when necessary to deliver a customer-requested feature, maintain security, comply with law or act with the user's or organization's authorization.
Information is retained for as long as reasonably required to provide enabled services, maintain legitimate business and audit records, meet legal or accounting obligations and protect platform integrity. Authorized administrators can disconnect integrations to stop future provider access. Data deletion requests can be submitted through Avantiqo support subject to applicable retention obligations.
Avantiqo uses access controls, organization-scoped authorization and protected infrastructure to reduce unauthorized access. Customers are responsible for protecting their credentials, assigning appropriate permissions and promptly removing access that is no longer required.
Google API user data
Avantiqo accesses Google user data only after an authorized user explicitly connects a Google service. Access is limited to the organization and features selected by that user. Avantiqo requests only the Google permissions required to provide those connected features.
Google Account email address, used to identify the Google account that authorized a connection.
Google Business Profile data, including business locations, reviews and review replies, when an organization connects Google Business Profile.
Google Ads account, campaign, budget, asset, performance and spend data, when an organization connects Google Ads.
Google user data is used only to provide or improve user-facing Avantiqo features requested by the connected organization, including Business Profile management, review workflows, Google Ads campaign management, reporting, spend reconciliation and approved optimization. Avantiqo does not use Google user data for unrelated advertising or to build general-purpose advertising profiles.
Authorization credentials and connected-service records are stored with organization-scoped access controls. Avantiqo applies access restrictions so one customer organization cannot access another organization's connected Google data.
Avantiqo does not sell Google user data. Google user data is not transferred to third parties except when necessary to provide the user-requested Avantiqo feature, comply with law, protect security, or with the user's explicit consent. Any processing remains subject to applicable Google API Services User Data Policy requirements.
Connected Google data is retained only for as long as needed to provide the organization's enabled features, meet legitimate legal or accounting obligations, and maintain required audit records. An authorized organization administrator can disconnect a Google integration to stop future access. Users can also revoke Avantiqo's Google access from their Google Account permissions.
Avantiqo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including applicable Limited Use requirements.
Related legal information
