AVENDOCampaigns that learn.
Back to Avendo

Privacy and data protection

Privacy Policy

Last updated August 22, 2026Effective August 22, 2026

This policy explains what personal information Avendo processes, why we process it, how long we retain it, and the choices available to you.

1. Who is responsible for your data

Avendo is created by Sansavision, a subdivision of Sansa Group AB in Gothenburg, Sweden. References to “Avendo”, “we”, “us”, or “our” in this policy mean Sansa Group AB acting through its Sansavision subdivision. For the marketing website and account administration, Sansa Group AB is the controller. When a customer uploads or connects campaign, audience, product, or customer data, we generally process that information on the customer's instructions as a processor or service provider.

Questions and privacy requests can be sent to support@sansavision.com. If your account is covered by a separate order form or data processing agreement, that agreement controls where it conflicts with this policy.

2. Information we collect

CategoryExamplesSource
Account and contact dataName, work email, organisation, role, authentication identifiersYou, your employer, or an identity provider
Workspace contentProducts, campaign briefs, claims, assets, approvals, prompts, and commentsYou and authorised workspace users
Connected-service dataStore, advertising, publishing, performance, and billing records you authorise us to accessConnected platforms and service providers
Usage and device dataPages and features used, approximate location from IP, browser, device, logs, and diagnostic eventsYour browser, device, and our infrastructure
CommunicationsSupport requests, demo enquiries, and feedbackYou

3. Why we use information

  • Provide, secure, maintain, and troubleshoot Avendo.
  • Create and administer accounts, workspaces, subscriptions, and authorised integrations.
  • Process customer instructions and generate requested campaign outputs.
  • Measure performance and improve the service when permitted by your settings and applicable law.
  • Respond to support, legal, security, and rights requests.
  • Prevent fraud, abuse, and violations of our Terms.

4. Legal bases in the EEA and UK

Depending on the activity, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already performed lawfully.

5. How we disclose information

We may disclose information to infrastructure, authentication, payment, communications, support, and professional-service providers under appropriate contractual restrictions; to connected platforms at your direction; within a corporate transaction; or when required to protect rights, safety, and comply with law. We do not disclose customer workspace content for third-party advertising.

Payment details are processed by the payment provider and are not stored as full card numbers by Avendo.

6. International transfers

Information may be processed outside your country. Where required for EEA, UK, or Swiss data, we use recognised safeguards such as adequacy decisions or standard contractual clauses and apply supplementary safeguards where appropriate.

7. Retention

We retain account data while an account is active and as needed for contractual, security, tax, dispute, and legal obligations. Workspace content is retained according to the customer's plan, settings, and agreement. Logs and backups are retained for limited operational periods and then deleted or de-identified according to our retention schedule.

8. GDPR and UK data-protection rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also withdraw consent and complain to your local supervisory authority. We may need to verify your identity and may direct requests about customer-controlled workspace content to the relevant customer.

Submit a privacy request

9. California privacy notice

California residents may have rights to know, access, correct, and delete personal information; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service when exercising privacy rights. We do not currently sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics.

The categories collected during the preceding 12 months are described in Section 2. We use and disclose them for the business purposes in Sections 3 and 5. We retain them using the criteria in Section 7. Where legally required, we recognise Global Privacy Control as an opt-out preference signal.

You or an authorised agent may submit a request by email. We will verify requests using information associated with the account or request and will not discriminate against you for exercising a right.

Submit a California request

10. Children

Avendo is a business service and is not directed to children under 16. We do not knowingly collect personal information from children under 16 through the marketing site.

11. Security and changes

We use technical and organisational safeguards designed to protect information. No system is completely secure. We may update this policy as the service or law changes and will post the revised date and provide additional notice when required.