Privacy Policy

We collect information you provide directly through our website:

• Contact form submissions: full name, email address, phone number, company name, budget range, and project description
• Communications: emails, messages, and project-related correspondence you send to us

We may also collect limited data automatically:

• Usage data: pages visited, time on site, referring URL, browser type, and device type through analytics tools
• IP address: used solely for spam prevention and rate-limiting on our contact form

We do not use cookies for tracking or advertising, and we do not run retargeting campaigns.

We use the information we collect to:

• Respond to your consultation request and follow up on project inquiries
• Send project updates, proposals, and deliverables during an active engagement
• Process invoices and manage billing through Whop, our payment platform
• Prevent spam and abuse on our contact form
• Understand how visitors use our site through aggregated, anonymized analytics

We do not sell, rent, or trade your personal information to third parties. We do not use your information for third-party advertising purposes.

If you provide your phone number through our contact form or during a client engagement, you may receive SMS messages related to your inquiry or active project. These messages may include follow-ups on your consultation request, project updates, scheduling confirmations, and responses from our team.

For additional assistance with SMS, contact us at support@avestian.com. Your consent to receive SMS is not required as a condition of purchasing any service.

We use a small number of trusted third-party platforms to operate our business. Each processes data under their own privacy policy.

• Whop (whop.com): Handles invoicing, payments, and client access management. Payment data is processed directly by Whop.
• Vercel (vercel.com): Hosts avestian.com and may process request logs including IP addresses.
• Resend (resend.com): Powers our transactional emails (contact confirmations and auto-replies). Not used for marketing email.
• Google Analytics (if enabled): May collect aggregated, anonymized usage statistics. No personally identifiable information is shared with Google Analytics.

We select partners that maintain appropriate data protection standards and do not share your information with any other third parties.

• Inquiry data (name, email, company, message) from contacts who do not become clients is retained for up to 24 months from the date of submission, then permanently deleted.
• Client data is retained for the duration of the engagement and for 7 years thereafter, consistent with US federal tax record requirements.

You may request earlier deletion at any time by contacting us (see Section 6). Deletion requests are subject to legal retention requirements.

Depending on your location, you may have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request that we delete your personal information, subject to legal retention requirements

To exercise any of these rights, email support@avestian.com with the subject line “Privacy Request.” We will respond within 30 days.

Our services are intended for businesses and professionals. They are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from someone under 18, please contact us at support@avestian.com and we will delete it promptly.

Avestian is a distributed freelance team with members in Pakistan and Florida, USA. Information you submit may be transferred to and processed in the United States or Pakistan, where data protection laws may differ from those in your home country. By using our site or submitting a form, you acknowledge that your information may be processed in these locations.

We serve clients in the US, EU, and Middle East and apply consistent data handling standards regardless of the client's location.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be communicated to active clients via the email address on file. Continued use of our site or services after a change constitutes acceptance of the updated policy.

For questions about this Privacy Policy, to exercise your data rights, or to report a concern: