How Avra Handles Your Data

Last updated: 14 February 2025

Avra powers AI-assisted sales workflows, so safeguarding your Gmail data, contacts, and analytics is core to our mission. This page explains what we collect, why we need it, and the controls you have over your information.

1. Information We Collect

Category	Examples	Source
Account & Profile Data	Name, email, password hash, company, workspace preferences	Provided by you during signup or profile edits
Connected Account Data	Gmail account email, avatar URL, sync status, OAuth tokens, auto-reply settings	Received from Google when you connect Gmail
Communication Content	Email headers/bodies, attachments when required, AI-generated drafts, call transcripts	Pulled from Gmail or uploaded to Avra when you use those features
Contact & CRM Data	Contacts, interactions, playbooks, dictionary entries, tasks, projects	Created/imported by you or your workspace members
Usage Information	Device type, app version, IP address, timestamps, event logs, diagnostics	Automatically collected when you access the Services
Payment & Billing	Subscription plan, invoices, payment status (card data handled by processor)	Provided by you to our payment provider

We only pull Gmail message bodies or attachments when a feature you invoke requires it, such as inbox sync or draft creation.

2. How We Use Information

Authenticate you and secure your workspace
Sync Gmail, contacts, and tasks so you can triage replies inside Avra
Generate AI-assisted drafts, auto replies, call scripts, summaries, and analytics
Send email, create drafts, apply labels, and mark threads handled on your behalf
Provide support, debugging, incident alerts, and service notifications
Operate, maintain, and improve the Services, including usage analytics
Enforce terms, detect abuse/spam, and comply with applicable law

GDPR / UK GDPR legal bases

Depending on the processing activity, we rely on performance of contract (delivering your workspace), legitimate interests (product improvement, fraud prevention), consent (connecting Gmail or running beta features), and legal obligations (billing, compliance).

3. Sharing & Disclosure

Service providers: hosting, storage, analytics, logging, payments, and customer support vendors under confidentiality agreements.
Connected platforms: Gmail/Google services strictly for the features you enable.
Workspace collaborators: teammates you grant access to shared data.
Compliance: regulators, authorities, or advisers when required by law or to protect users.
Business transfers: in the event of a merger or acquisition with appropriate safeguards.

4. Retention & Security

We retain account data while your workspace stays active. Gmail tokens and content persist only as long as a feature requires them or law mandates retention. Backups purge on a rolling schedule. We use encryption in transit, least-privilege access, monitoring, and audits; however no platform is perfectly secure, so please contact us immediately if you suspect a breach.

International transfers

Avra operates primarily from the United States. Where required we use Standard Contractual Clauses or other safeguards for cross-border transfers.

5. Your Rights

Your rights vary by jurisdiction, but Avra honors valid requests globally. Many actions can be taken directly inside settings, or by emailing our privacy team.

Access, correct, or delete stored personal data
Export a copy of your data
Object to or restrict certain processing activities
Withdraw consent (for example, disconnect Gmail) at any time
Lodge a complaint with your local supervisory authority

6. Other Notes

Children: Avra is not directed to individuals under 16, and we delete any inadvertently collected child data.

Changes: We may update this policy and will notify you of material changes via email or in-app notices.

7. Contact Us

If you have questions about how Avra handles your information or wish to exercise a right, reach out any time.

Avra Labs, Inc.
548 Market St PMB 62555
San Francisco, CA 94104, USA
privacy@hireavra.com