Privacy Policy

Auvolar ("Company," "we," "us," or "our") is committed to protecting the privacy of our customers, partners, and website visitors. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website www.auvolar.com (the "Site"), purchase our products, or interact with us in any way.

This policy complies with the California Consumer Privacy Act (CCPA/CPRA), the California Online Privacy Protection Act (CalOPPA), and other applicable U.S. privacy laws.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, phone number, company name, job title when you create an account or request a quote.
• Order Information: Billing and shipping addresses, payment method details (processed securely by our payment processor; we do not store full credit card numbers).
• Communications: Any information you provide when you contact us via email, phone, live chat, or contact forms.
• Partner Applications: Business information, tax ID, trade references submitted through our partner program.
• BOM/File Uploads: Documents you upload through our BOM tool or quote request forms.

1.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type and version, operating system, device type, screen resolution.
• Usage Data: Pages visited, time spent on pages, click patterns, referring/exit pages, date and time of visits.
• Cookies & Tracking: We use cookies, pixels, and similar technologies. See Section 7 for details.

1.3 Information from Third Parties

• Analytics Providers: Google Analytics (anonymized usage data).
• Marketing Platforms: HubSpot (CRM and marketing automation).
• Payment Processors: Stripe (transaction data).

2. How We Use Your Information

We use your personal information for the following purposes:

• Order Fulfillment: Process and ship your orders, send order confirmations and tracking information.
• Customer Service: Respond to inquiries, provide technical support, handle returns and warranty claims.
• Account Management: Maintain your account, manage partner relationships, process quote requests.
• Communications: Send transactional emails (order updates, shipping notifications) and, with your consent, promotional communications about products, rebates, and industry news.
• Site Improvement: Analyze usage patterns to improve our website, products, and services.
• Security: Detect and prevent fraud, unauthorized access, and other security incidents.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Companies that help us operate our business, including:
  • Vercel (website hosting)
  • Google Analytics (website analytics)
  • HubSpot (CRM and email marketing)
  • Shipping carriers (UPS, FedEx, freight carriers)
  • Payment processors
• Business Partners: Authorized distributors and sales representatives, only to the extent necessary to fulfill your order or service your account.
• Legal Requirements: When required by law, subpoena, court order, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

4. Your Privacy Rights

4.1 Rights for All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Opt-Out: Unsubscribe from marketing emails at any time using the link in any email or by contacting us.

4.2 California Residents (CCPA/CPRA Rights)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, with certain exceptions (e.g., completing a transaction, legal obligations).
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is necessary.
• Right to Limit Use of Sensitive Information: We do not use or disclose sensitive personal information for purposes other than those permitted under CCPA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, contact us at sales@auvolar.com or call (626) 364-9198. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

4.3 Categories of Personal Information Collected (CCPA Disclosure)

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Specifically:

• Account data: Retained while your account is active and for 3 years after closure.
• Order/transaction data: Retained for 7 years for tax and legal compliance.
• Marketing data: Retained until you unsubscribe or request deletion.
• Website analytics: Aggregated data retained indefinitely; individual-level data for 26 months.

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

• TLS/SSL encryption for all data transmission (HTTPS enforced site-wide).
• HTTP Strict Transport Security (HSTS) with preload.
• Content Security Policy (CSP) to prevent cross-site scripting attacks.
• API rate limiting to prevent abuse.
• Role-based access controls for administrative functions.
• Payment processing handled by PCI-DSS compliant third-party processors (we never store full card numbers).

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

7. Cookies & Tracking Technologies

We use the following cookies and tracking technologies:

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of our Site. Most browsers allow you to:

• View and delete existing cookies
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies

8. Third-Party Links

Our Site may contain links to third-party websites (e.g., Stripe checkout, YouTube product videos). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing personal information.

9. Children's Privacy

Our Site is intended for business use and is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will take steps to delete it promptly.

10. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature. There is currently no uniform standard for handling DNT signals. Our Site does not currently respond to DNT signals. However, you can control tracking through cookie settings and opt-out mechanisms described in Section 7.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. For significant changes, we may also send notification via email. Your continued use of the Site after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us:

For CCPA requests, we will respond within 45 days of receiving a verifiable request. In certain cases, we may extend this period by an additional 45 days with notice.