Scope
Last updated: September 17, 2026. This policy applies only to the Avenyora spiritual guidance platform. Privacy information for the separate AuthorityFlow publishing integration is available at https://avenyora.com/authorityflow/privacy.
Data we process
We process account details, optional birth information, tool inputs and results, subscription records, support messages and first-party product events needed to provide Avenyora. Guest results may remain in browser storage until you choose to save them.
Birth charts and numerology are calculated from the information you provide. Relationship profiles, Journal entries and long-term AI memories are optional.
City lookup
When you search for a birth city, the city search text is sent through Avenyora to Open-Meteo's geocoding service to retrieve matching places, coordinates and timezones. Your birth date, birth time and calculated chart are not included in this lookup. Suggestions also include a local list of supported cities.
AI and permission-based memory
Long-term AI memory is disabled by default. If you explicitly enable it, Avenyora may include your Blueprint, active memories and a limited number of recent Journal themes in AI context. You can inspect, edit, deactivate, export or permanently delete these items.
Avenyora asks AI providers not to store application state where supported. We do not use your private profile to train a generalized Avenyora model. AI responses are reflective guidance, not guaranteed predictions or professional advice.
Encryption and access
Relationship details, Journal content and memory payloads are encrypted at rest at the application layer. Access requires your authenticated account. Operational access is limited to authorized services and personnel with a legitimate support or security need.
Payments and service providers
Square is the current primary payment processor. Payment-card details are entered on Square's hosted checkout and are not stored by Avenyora. Stripe integration is retained as an inactive alternative. We also use contracted hosting, email, authentication, analytics and AI providers only to operate the requested service.
Analytics choices
Optional first-party product events and Google Analytics stay off until you actively allow analytics. Product events use allowlisted page paths and never include form answers, birth details, chat or Journal content, URL queries or fragments, verification tokens, journey identifiers or newsletter tokens.
With the updated analytics choice, signed-in visits also create a first-party record containing your account ID, the active UTC calendar day and when we first observed that day. This limited account-linked record helps us count return visits; it is not anonymous. Your account ID is not sent to Google Analytics. We ask again before this new purpose even if you previously allowed anonymous analytics.
We honor Global Privacy Control as an analytics opt-out, use Google Consent Mode v2 and keep advertising-related consent denied. Google page views use only sanitized origins and paths. Declining stops optional collection in this browser and requests removal of stored activity days for your currently signed-in account. Once that request succeeds, old account-linked grants are blocked until you explicitly allow analytics again. If the removal request fails, the preferences panel tells you how to retry. Anonymous historical events cannot be linked back to your account for removal. You can reopen preferences at any time; account access and tools work when you decline.
Retention and deletion
Account-linked activity days use a rolling 180-day retention window and are removed by scheduled cleanup and collection-time cleanup. They are included in your account export and removed when you delete your account or successfully withdraw the signed-in analytics choice. We retain the account's analytics-revocation timestamp to prevent an older grant from restarting collection.
Saved profile data remains until you delete the item or your account, unless a shorter retention period is required for a specific feature. Orders, refunds, fraud-prevention records and legally required transaction records may be retained after account deletion.
Deleting your account removes active profile, Blueprint, relationship, Journal, memory, insight, reading and chat data and cancels an active subscription where the payment provider supports programmatic cancellation.
Your choices
You can use free tools without saving results, decline AI memory, download an account export, clear individual memories and Journal entries, unsubscribe from marketing email or delete your account.
For access, correction, deletion or privacy questions, contact info@avenyora.com.
Sensitive information
Do not enter medical records, financial account credentials, government identifiers or emergency information into spiritual guidance prompts. Avenyora is not an emergency, medical, legal or financial service.
Consented analytics delivery
After you allow analytics, we keep the first page observed under that choice and the referring site's hostname in the current tab's session storage. Tool events can use this limited context to help us understand which entrances lead to useful results. It is not an account ID or a cross-device visitor identifier. We do not collect advertising click IDs or campaign query values through this feature.
Already-consented events may wait briefly in page memory while the Google tag loads, with a limit of 50 events and a 30-second delivery window. We do not buffer actions taken before consent, and withdrawal clears pending delivery and this tab's analytics context. Page titles sent by our analytics code are derived from sanitized routes, and external referrer paths are omitted.