Privacy Policy
This page explains what Avand takes from the forms on this site, from your investor account, and from this site's cookies — why we take it, and how long we keep it.
What we collect
Only what you type into the Growth Assessment form: business name, founder name, contact email, website, industry, city, founded year, team size, revenue band, customers, growth rate, and your answers to the three strategic questions. We also record when you gave consent and which language you used.
Your investor account
If you register for an Avand investor account, we store your name, email and country. Your password is never kept in a readable form — we store only a hashed version of it, one that not even we can turn back into the original password. The moment you confirm your email is recorded too. The email-confirmation link and the password-reset link are each usable only once, stay valid for 48 hours, and are kept on your account only as a hash — never as the raw link.
Your record with the Avand team
Creating an investor account creates a new investor record for you, or updates the one you already have — the same record our team uses to qualify and contact you. This is exactly what the public investor form has always done.
Cookies
This site sets three cookies, each for one purpose: "avand_session" for Avand team sign-in, "avand_investor_session" for your sign-in to your investor account, and "avand_consent", which remembers your answer to the analytics banner. None of the three is set on your browser before you sign in or answer that banner.
Emails we send you
When you create an investor account we send you an email-confirmation link, and if you ever reset your password, a password-reset email too. When you submit the Growth Assessment form or register your interest as an investor, we send an email confirming we received your request. Every email is recorded in our outbox before it is sent, and its delivery status — pending, sent or failed — is kept. The link in an email-confirmation or password-reset email is replaced with a redaction marker as soon as it is sent successfully; the record of the email itself — recipient, type, and delivery status — is kept.
Sign-in attempts
Every attempt to sign in — successful or not — is recorded with the email address entered, the IP address, the outcome, and the exact time. These records are kept to rate-limit repeated attempts (so a password cannot simply be guessed) and for security audit.
Your investment requests
When you submit an investment request against one of the marketplace's deals, we record the number of shares, the amount, the request's status (Pending, Approved, Settled or Declined), the time of each decision, and the team member who made it. Every status change is announced two ways: an in-app notification, and one of four investment emails (request received, approved, declined, or settled). Settlement itself — the actual transfer of funds — happens off this platform; we hold no payment data (card, bank account or similar) at all.
How we use it
To read your application and to contact you about it. We do not sell it and we do not show it on the public site.
How long we keep it
Every application is kept, even one that goes no further. If you want yours erased, write to the address below.
Your rights
You can ask to see what we hold about you, to correct it, or to have it erased.
Contact
For anything about this page, write to privacy@avand.example.
This text is an accurate description of what the system does. It has not yet been reviewed by a lawyer, which must happen before the site is published.