Privacy Notice

1. Who is responsible for the information

Avora Relay LLC, an Ohio limited liability company, is responsible for the personal information covered by this Notice. The Ohio LLC Filing Guide is an Avora Relay product. Privacy questions and requests may be sent to hello@avorarelay.com.

2. Information collected

• Account information: authenticated email address and, when provided by the authentication service, a display name.
• Transaction information: order identifier, product, amount, currency, payment status, purchase date, refund or chargeback status, and a receipt link. Stripe processes payment-card details; Avora does not receive or store the full card number.
• Product information: completed Filing Guide steps, the current step, and the source or rule versions needed to save and resume the purchased experience. You can delete this saved information at any time through My Products.
• Access and acceptance records: entitlement dates; the exact checkout offer and checkbox text; offer and policy versions; checkout snapshot and cryptographic hash; acceptance time, source page, and browser identifier; and limited audit events such as access activation, save, deletion, refund, suspension, or expiration.
• Support information: your email address and the content and metadata of messages you send to customer support.
• Technical information: security, request, device, browser, network, cookie, and diagnostic information that the hosting, authentication, or payment providers process to operate and protect the service.

3. Information you should not provide

Do not enter or email Social Security numbers, EINs, banking or payment-card details, passwords, identity documents, full birth dates, confidential customer records, protected health information, confidential legal or tax documents, or Ohio account credentials. The product does not need this information.

4. How information is used

Avora uses information to authenticate customers; deliver and administer purchases and access; save and display guide progress; provide support; process refunds; prevent misuse and fraud; secure and troubleshoot the service; maintain business and accounting records; comply with law; and document which product and policy versions applied.

Avora does not sell personal information and does not use product answers for targeted advertising.

5. Service providers and disclosures

Avora uses service providers to operate and protect the service, including providers for account authentication, website hosting and security, payment processing, email, and customer support. Avora provides these companies with information reasonably needed to perform their services. They may also process information as described in their own terms and privacy notices.

Payment-card information is submitted directly to Stripe. Avora does not receive or store complete card numbers or security codes.

Avora may also disclose information when required by law, to protect customers or the service, to investigate fraud or misuse, or as part of a business transfer with appropriate confidentiality protections.

6. Retention schedule

• Saved Filing Guide progress: while product access remains active, unless you delete it sooner. The saved progress becomes inaccessible when access expires. Retention maintenance removes expired saved-progress records when it next runs during normal account, checkout, payment, refund, or transaction activity. You may request deletion at any time instead of waiting for that event-driven process.
• Account, entitlement, order, refund, receipt, and policy-acceptance records: seven years after the later of the transaction, refund, or account closure, unless a longer period is required for an active legal, tax, fraud, or accounting matter.
• Support messages: ordinarily reviewed for deletion two years after the last activity in the support thread, unless needed longer for an active dispute or legal obligation.
• Security and audit events: retained for up to two years in the active database, subject to event-driven retention maintenance, unless needed longer to investigate misuse, a security event, or a legal claim.
• Provider records and recovery copies: providers may retain their own records under their policies. Deleted D1 data may remain in encrypted disaster-recovery history for up to 30 days before aging out.

The schedule combines automated and documented manual controls. Automated maintenance removes expired saved-product records and two-year security and audit events when maintenance next runs. Support messages are reviewed quarterly for deletion eligibility. Account, entitlement, order, refund, receipt, and policy-acceptance records receive an annual eligibility review after the seven-year period. Deletion may not occur on the exact anniversary date, and a documented legal, tax, fraud, security, chargeback, or accounting hold may extend retention.

7. Your choices and request process

You can delete saved Filing Guide progress through My Products. You may also ask Avora to provide, correct, or delete personal information associated with your account.

Email hello@avorarelay.com with the subject Privacy Request from the email associated with your account. State whether you are requesting access, correction, or deletion and identify the product involved. Do not send identity documents unless Avora explains why additional verification is necessary.

Avora will acknowledge a request within ten business days and ordinarily complete it within 30 calendar days after verification. If more time is reasonably needed, Avora will explain the reason and expected completion date. A request may be limited when Avora cannot verify the requester, when deletion would conflict with required transaction, security, accounting, or legal records, or when another lawful exception applies. Avora will explain any denial or limitation.

8. Cookies, security, and data location

Infrastructure providers may use cookies or similar technologies needed for authentication, security, and service operation. Avora may use browser storage for temporary interface preferences, but it is not the authoritative source for product access or saved product records. Avora does not currently add third-party advertising cookies or behavioral advertising trackers.

Avora uses reasonable administrative and technical safeguards, including authenticated access, encrypted provider infrastructure, same-origin write protection, request-rate controls, security response headers, dependency review, and documented incident-response and retention procedures. No online service can guarantee absolute security. Information is processed in the United States and may pass through provider infrastructure in other locations, subject to provider safeguards and applicable law.

9. Children and changes to this Notice

The product is intended for adults and is not directed to children under 13. Avora does not knowingly collect personal information from children through this product.

Avora may update this Notice to reflect changes in the service, providers, or law. The updated date will appear at the top. If a material change affects active customers, Avora will provide reasonable notice and request renewed acknowledgment when appropriate.

10. Contact

Privacy and deletion questions may be sent to hello@avorarelay.com.