Draft

Privacy notice

Founders' beta. Avokata is operated by Kiznis Studio (trading name). This is a draft notice, not a data processing agreement (DPA). A registered legal entity is not published yet (P1-114).

Privacy contact: privacy@avokata.com · Security: security@avokata.com

Purposes

We process personal data to operate Avokata: authenticate accounts and API keys, apply quotas, store matter profiles and workflows you deliberately save, respond to support and security reports, and improve reliability. The Lithuanian law corpus is public record and is not your personal data.

Search and tool question text is not stored. We record that a tool ran, when, latency, result counts, quota used, and a one-way digest of arguments (arg_digest) that cannot be reversed into your words. Matter profiles are the deliberate exception where you choose to save text.

Legal bases

Where applicable under the GDPR we rely on: performance of a contract (Art 6(1)(b)) for account operation; legitimate interests (Art 6(1)(f)) for security, abuse prevention, aggregated reliability measurement and keyless trial metering; consent (Art 6(1)(a)) where we ask for it explicitly, such as optional newsletter signup.

Recipients and processors

Infrastructure providers process data on our behalf as listed on our Subprocessors page. We do not sell personal data or use it to train third-party models. Support staff may access data only on a need-to-know basis when you contact us.

International transfers

Primary hosting and backups run on Hetzner in Germany (EU). Cloudflare operates a global edge network for DNS, TLS termination and email routing; where data leaves the EEA we rely on appropriate safeguards such as Standard Contractual Clauses as described on the subprocessors page.

Retention

Account data is kept while the account exists. Usage metadata survives account deletion with the account identifier nulled and no query text retained. Matter profiles and workflows remain until you delete them or the account. Server logs rotate on the host (about 30 MB per service). Keyless trial rate-limit hashes live in server memory only for the daily allowance.

Your rights

You may request access, correction, deletion, restriction, portability or object to processing. Write to privacy@avokata.com; we respond within one month. You may complain to your supervisory authority. Account deletion is available through request_deletion or email confirmation.

Cookies

This site uses strictly necessary cookies for security and routing where applicable, and cookieless analytics as described in our Cookie policy. We do not use Google Analytics.

Business customers

Enterprise terms, a signable DPA and registered-entity details are not yet available during beta (P1-114). When they are published, business customers will receive updated notices and subprocessors information before checkout or contractual processing begins.