Last updated: September 2026
Aviio is operated by Aviio Inc., a Delaware corporation ("we", "our", "us"). This policy explains how we collect, use, and protect your information when you use our marketing decision engine.
We collect information you provide directly, such as your name, email address, and account credentials when you sign up. When you connect advertising platforms (Google Ads, Meta, TikTok, LinkedIn), we access campaign performance data on your behalf through authorized OAuth connections.
We use your information to provide and improve our services, including aggregating and analyzing your marketing data across platforms, generating performance insights, and communicating with you about your account.
We use Vercel Web Analytics and PostHog (hosted in the United States) to understand how people find and use Aviio. PostHog sets a first-party cookie so we can tell one visit from the next and follow a visit from our website into signup. On our public website and signup pages we record how visitors use the page (clicks, scrolling, and session recordings), with everything typed into forms masked. When you first arrive we note where you came from (the referring site, the page you landed on, and any campaign tags in the link) and attach it to a demo or trial request you send us.
Inside the signed-in product we record which pages and features are used, with all on-screen text masked, and we take no session recordings, so your campaign and account data is never sent to these services. We do not use analytics data for advertising and do not sell it.
We use Sentry (hosted in the United States) to find and fix errors in Aviio. When something breaks, Sentry receives the error message and stack trace, the page or API route involved, your browser type, and an internal user ID, so we can see who was affected. It does not receive your name, email address, form input, cookies, request contents, or campaign and account data, and we strip link parameters from anything we send.
We encrypt OAuth tokens at rest and use industry-standard security practices to protect your data. We do not sell your data to third parties. See more details here.
You can disconnect any connected advertising platform at any time from within Aviio's Connections page. You can also revoke Aviio's access to your Google account by visiting your Google Account permissions page. Once access is revoked, we will no longer be able to retrieve new data from that platform. Previously synced data can be deleted upon request.
Aviio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We retain your data for as long as your account is active. You can request deletion of your data at any time by contacting us.
Questions about this policy? Reach out at privacy@aviio.io.