Privacy Policy

Avelx AI ("Avelx", "we", "us") provides software that scans business websites and helps business owners create, launch, and manage advertising campaigns on Facebook and Instagram. Dashboard AI Ltd, trading as Avelx AI, is the data controller for the personal data described in this policy. You can contact us about privacy at support@avelxai.com.

Account data. Your email address, used for sign-in via secure magic links, and your account settings.

Website scan data. When you or a visitor submits a website URL, we fetch and analyse publicly available content from that website: page text, headings, images, links, colours, services, testimonials, and calls to action. We only scan publicly accessible pages.

Business profile data. Information you provide during guided setup: business name, budget, locations you serve, target audiences, lead delivery preferences, and contact details for lead delivery.

Advertising data. If you connect a Meta account: ad account IDs, page IDs, Instagram account IDs, access tokens, and campaign performance data such as spend, leads, and cost per lead. Access tokens are stored server-side and are never exposed to your browser or to other users.

Payment data. Payments are processed by Stripe. We receive your subscription status, plan, and Stripe customer reference. We never see or store full card details.

We use your data to: provide the service (scans, ad recommendations, campaign creation, and optimisation); operate your subscription and billing; deliver leads to your chosen channel; provide support; keep the service secure; and meet our legal obligations.

Our lawful bases under UK GDPR are: performance of a contract (providing the service you signed up for), legitimate interests (service security, improvement, and fraud prevention), and consent where required (for example, marketing communications).

Avelx uses AI models to analyse website content and generate ad copy, audience suggestions, and optimisation recommendations. Website scan content and business profile information may be sent to our AI providers to generate these outputs. We do not use your data to train our own models, and we select providers whose terms prohibit training on customer data submitted via API.

We share data only with the processors needed to run the service:

• Supabase — authentication and database hosting.
• Stripe — subscription payments.
• Meta Platforms — creating and managing your ad campaigns when you connect your account.
• OpenAI — AI analysis and content generation.
• Netlify — application hosting.

We do not sell personal data. Some providers process data outside the UK; where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

We keep your data while your account is active. If you cancel, we retain account and campaign records for up to 12 months in case you return, then delete or anonymise them. Billing records are kept for 6 years as required by UK tax law. You can request earlier deletion at any time — see our Data Deletion page.

Under UK GDPR you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. To exercise any right, email support@avelxai.com from your account email address. We respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would welcome the chance to resolve your concern first via our complaints process.

Data is encrypted in transit, access tokens are held server-side only, database access is restricted with row-level security, and payment details never touch our servers. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the ICO as required by law.

If we make material changes to this policy, we will notify you by email or in-app before the changes take effect.