Privacy Policy

Last Updated: April 2026 Effective Date: April 2026

A Note From Us Before You Read

At Avenyx, everything we build is designed around one principle: humans first. That applies to our products and it applies to how we handle your data. We collect what we need to make things work well for you. We protect it like it matters — because it does. And we're always transparent about what we're doing and why.

This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have over it. Please read it. If you have questions, reach out to us directly at contact@avenyx.co.

1. Who We Are

Avenyx is a technology company based in Oregon, United States. We build human-centered software products including PromptLens, a prompt coaching and AI usage tool, and Hoshi Travel, an AI-assisted travel planning application.

2. Who This Policy Applies To

Our services are intended for users who are 16 years of age or older. We do not knowingly collect personal data from anyone under 16. If you are under 16, please do not use our services or submit any personal information to us.

If we become aware that we have collected data from a user under 16 without appropriate consent, we will delete that information promptly. If you believe we have collected data from a minor, please contact us at contact@avenyx.co.

This policy applies to users worldwide, including those in the United States, the European Union, and all other regions.

3. What Data We Collect

We collect the following categories of information depending on which Avenyx products you use:

a) Account Information

Name
Email address
Password (stored in encrypted form — we never see your plain-text password)
Account preferences and settings

b) Prompt Data (PromptLens)

Prompts you submit for analysis
Feedback and coaching responses generated
Improved prompts generated by the tool
Prompt categories and usage patterns

We want to be clear: your prompts may contain sensitive information. Do not include protected health information (PHI), personally identifiable information (PII) such as Social Security numbers, financial account numbers, or any confidential data belonging to others in your prompts. We are not a HIPAA-covered entity and cannot guarantee HIPAA-compliant handling of health data submitted through PromptLens.

c) Usage Data

How frequently you use our products
Which features you use and when
Categories of tasks you use AI for (e.g., communication, writing, technical)
Performance data such as prompt improvement over time

d) Location Data (Hoshi Travel)

Your real-time location while using Hoshi Travel, used to suggest nearby alternatives and organize trip content
Location data is used only while the app is active and for the purposes of your trip
We do not sell or share your location data with third parties for advertising purposes

e) Feedback and Communications

Feedback you submit directly through our products
Emails or messages you send to contact@avenyx.co
Survey responses if you choose to participate

f) Technical Data

Device type, operating system, and browser
IP address
App version
Error logs and crash reports

4. How We Use Your Data

We use your data to:

Provide, operate, and improve our products and services
Analyze your prompt patterns to give you accurate coaching and feedback (PromptLens)
Suggest relevant alternatives based on your location and saved itinerary (Hoshi Travel)
Generate team and organizational usage insights for managers (PromptLens team features)
Send product updates, newsletter content, and important service announcements
Respond to your questions and support requests
Detect and prevent fraud, abuse, or security incidents
Comply with legal obligations

We do not use your data to train third-party AI models. We do not sell your data. Ever.

5. How We Protect Your Data

We take data protection seriously. Our security practices include:

Encryption of data in transit using HTTPS/TLS
Encrypted storage of passwords and sensitive fields
Access controls limiting which team members can access user data
Regular review of our security practices as we grow

A note on prompts: While we protect your data with industry-standard practices, please use good judgment about what you paste into PromptLens. Do not submit PHI, PII belonging to others, confidential business information, or any data you are not authorized to share. We are not responsible for sensitive information you voluntarily submit through the platform.

6. Data Sharing

We do not sell your personal data. We may share data only in the following circumstances:

Service providers: We work with third-party services (such as hosting, database, and analytics providers) who process data on our behalf under strict data processing agreements
Team features: If you use PromptLens through an organizational account, your manager or administrator may have access to your usage data as described in the team dashboard features
Legal requirements: We may disclose data if required by law, court order, or to protect the safety of our users or the public
Business transfers: If Avenyx is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you before that happens.

7. Your Rights

Depending on where you live, you may have the following rights over your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request that we correct inaccurate or incomplete data
Deletion: Request that we delete your personal data
Portability: Request your data in a portable format
Opt-out: Unsubscribe from marketing communications at any time
Restriction: Request that we limit how we process your data

For EU/EEA users (GDPR): You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

For California users (CCPA): You have the right to know what personal information we collect, the right to delete it, and the right to opt out of sale (we do not sell data, but this right applies regardless).

To exercise any of these rights, contact us at contact@avenyx.co. We will respond within 30 days.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Prompt data and usage analytics may be retained in anonymized, aggregated form after account deletion for research and product improvement purposes. This data cannot be linked back to you.

9. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how people use our products. We do not use third-party advertising cookies.

You can control cookies through your browser settings. Disabling cookies may affect some features of our products.

10. International Data Transfers

Avenyx is based in Oregon, United States. If you are accessing our services from outside the US, your data may be transferred to and processed in the United States. We take steps to ensure that international transfers comply with applicable data protection laws, including the use of standard contractual clauses for EU data transfers where required.

11. Changes to This Policy

We may update this Privacy Policy as our products grow and evolve. When we make significant changes, we will notify you by email or through a notice in our products. The "Last Updated" date at the top of this document will always reflect the most recent version.

Continued use of our services after changes are posted means you accept the updated policy.

12. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, please reach out:

Avenyx contact@avenyx.co

We are a small team and we read every email. We will get back to you.