AVENTRA SOLUTIONS
Aventra privacy notice
Version: 2026-10-12-v2
Operator and contact
Growth Partner Academy Sp. z o.o. ul. 1 Maja 191, 25-646 Kielce, Polska NIP: 9592086128 · KRS: 0001193069 · REGON: 542667836 Kontakt / Contact: jacob@aventra.solutions
1. Controller and information you provide
The company identified above is the controller for Aventra. We process your email and authentication information, name, country, timezone and optional phone number. Configuration may include birth and current names, birth date/time/place, dominant hand, intention, personal answers, selected palm images or a Human Design chart and AI outputs. Depending on your choices and services, information may also include answers, configuration, uploads, cycle and session history, feedback and integration. Answers may contain health or intimate-life information; you do not have to provide it.
2. Purposes and legal bases
Information necessary for your account, free configuration and agreed services is processed to perform a contract or take steps at your request before entering into one (GDPR Art. 6(1)(b)). Security, abuse prevention and legitimate claims rely on legitimate interests (Art. 6(1)(f)), taking your rights into account. Legal obligations, such as accounting, rely on Art. 6(1)(c). Optional AI analysis of answers and marketing rely on consent (Art. 6(1)(a)); voluntarily provided special-category information included in that analysis requires explicit consent (Art. 9(2)(a)).
3. Access and providers
Work materials are accessible to the authorized founder and assigned expert according to their roles. Other clients do not receive account access. Supabase supports accounts and the database, Vercel hosting, and OpenAI API selected analyses. Authentication forms use Cloudflare Turnstile to reduce automated abuse. Google email supports communication; transactional delivery depends on the active authentication configuration. Session organization and delivery use GoHighLevel/LeadConnector and Google Meet; separately consented recording or transcription uses Fathom. Providers receive information necessary for the relevant operation; the Data & AI document explains the scope.
4. Storage and international processing
The active application database project is in the EU (eu-central-1, Frankfurt). This does not mean every service, copy or remote access is exclusively in the EU. Providers may also process information outside the EEA; GDPR international-transfer requirements apply, and you can request details of the mechanisms and copies of appropriate safeguards from the controller. Account and work information is retained while your account is in use; afterwards, further retention is limited to legal duties, security and legitimate claims. This does not constitute indefinite permission for further AI analysis. Providers may retain technical and security copies under their terms; deleting an Aventra account does not mean immediate deletion of every provider copy. Contact the controller about a specific retention period or material deletion.
5. Your choices and rights
You may request access, correction, erasure, restriction and portability where legally applicable, and object to processing based on legitimate interests. AI, sensitive-information and marketing consent can be changed or withdrawn in your profile; this does not affect earlier lawful processing. Features depending on withdrawn consent become unavailable, while basic account access and configuration remain. You may complain to Poland’s UODO or your competent supervisory authority. Contact the email above for data requests; we may request information necessary to verify your identity.
6. Automation and cookies
AI prepares suggestions and summaries that may be wrong; readings may be displayed without prior human review. People confirm session direction and feedback release; AI does not independently make the final decision about your transformation. Account screens use browser storage and cookies for sign-in sessions, language and appearance. The Cookies Notice describes known cookies and browser storage. AI consent does not authorize advertising.