Privacy Policy

1. Scope and Website Role

This notice explains how personal data are processed when you visit avcsuite.com, subscribe to Avatar Creator communications, contact support, or follow a link to the authorized SuperHive marketplace. It is provided under Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data-protection and e-privacy law.

avcsuite.com is an informational and promotional website. It does not create customer accounts and does not directly process product purchases, payments, card details, invoices, taxes, withdrawals, or refunds. Purchases are completed on SuperHive, which operates its marketplace and transaction services under its own terms and privacy policy.

2. Data Controller

Data Controller for avcsuite.com and Avatar Creator support communications: Lorenzo Ceaglio, operating under the name “Avatar Creator”, tax code CGLLNZ94B01I470R, Italy.

Privacy contact: support@avcsuite.com. No Data Protection Officer is currently designated because no appointment is presently required. This section will be updated if a DPO is appointed.

SuperHive is a separate data controller for its marketplace, customer account, checkout, transaction, payment, tax, invoice, withdrawal and refund processes. Its own privacy policy applies when you visit or use SuperHive.

3. Data, Purposes and Legal Bases

3.1 Website delivery, logs and security

The hosting infrastructure may process IP address, requested URL, date and time, browser and device information, referrer, response status and security events in technical logs. These data are used to deliver the website, diagnose faults, prevent abuse and protect the website and infrastructure. Legal basis: the Controller’s legitimate interests in operating and securing the website (Article 6(1)(f) GDPR) and compliance with legal obligations where applicable (Article 6(1)(c) GDPR).

3.2 AVC Launch Access emails

AVC Launch Access is one email program covering Avatar Creator and Avatar Wrap, including launch announcements and launch-related product updates. The same consent scope applies to every Launch Access form; the form source records only where you joined, not a separate subscription topic. When you request AVC Launch Access, AVC stores your email address, the time, form source, consent-policy version and subscription status in its database on Aruba. Brevo Transactional delivers a confirmation email. Clicking the confirmation button in that email opens avcsuite.com and automatically submits the confirmation securely; loading the page without a valid confirmation token does not subscribe you. Only after confirmation is your contact synchronized to the AVC marketing list in Brevo for that AVC Launch Access email program. Newsletter consent is separate from optional Analytics and Marketing cookie choices. Legal basis: your consent (Article 6(1)(a) GDPR).

You may withdraw consent at any time through the unsubscribe link in an email or by contacting us. Withdrawal does not affect processing carried out before withdrawal. The public form requests only the information shown in the form and does not create an AVC account or take payment.

3.3 Support and other communications

If you contact us, we process the contact details, message, attachments and correspondence you provide. Depending on the request, we may also process your operating system, Blender version, Avatar Creator version, screenshots, logs, project extracts voluntarily supplied by you, and limited purchase information needed to identify the product or verify eligibility for support. Purposes: responding to requests, taking pre-contractual steps, providing product support, investigating reproducible defects, preventing abuse and maintaining appropriate records. Legal bases: Article 6(1)(b), 6(1)(c) or 6(1)(f) GDPR, depending on the request.

Do not send confidential client files, special-category personal data or complete production files unless they are strictly necessary and you are authorized to provide them. Where possible, send a reduced test file that contains only the information needed to reproduce the issue.

3.4 SuperHive marketplace and purchase-related support

When you follow a purchase link, you leave avcsuite.com and interact directly with SuperHive. SuperHive is the merchant of record and independently manages its account, checkout, payment, tax, invoice, withdrawal and refund processes. AVC does not receive or store your payment-card details.

If you contact AVC for support after a purchase, or if a support conversation is escalated through SuperHive, AVC may process limited information such as your SuperHive display name or contact details, order or transaction reference, purchased SKU, purchase date, support history and the technical information you provide. These data are used only to verify the relevant product, provide support, investigate defects, prevent fraud and establish or defend legal claims. Legal bases: contract performance, legal obligations and legitimate interests, as applicable.

3.5 Cookie and consent preferences

The website stores your cookie-category choice in first-party local storage under avc_cookie_consent_v1. This is used to remember your selection on that browser and device. It is not an AVC account and is not, by itself, a server-side record of consent. See the Cookie Policy and use “Cookie Settings” in the footer to change your choice.

3.6 Google Fonts

The current website requests the Overpass typeface from Google Fonts. When the font is requested, Google receives technical request data such as the IP address, requested resource, browser or operating-system headers and referrer in order to deliver the font and protect the service. Google states that Google Fonts data are not used to create end-user profiles or for targeted advertising. Legal basis for the website operator’s use: legitimate interest in consistent and efficient presentation of the website (Article 6(1)(f) GDPR). The font may be self-hosted in a future technical release, in which case this paragraph will be updated.

3.7 Product telemetry, website analytics and advertising tags

The current distributed Avatar Creator products do not require an AVC activation token and do not send AVC license tokens, device fingerprints, usage telemetry or crash reports to AVC. On the website, Google Tag Manager is used as a consent-controlled tag container and Google Analytics 4 may be activated only after you grant Analytics consent. The purposes are aggregated traffic measurement, page-performance analysis, traffic-source reporting and understanding interactions with the public website. Legal basis: your consent (Article 6(1)(a) GDPR and applicable e-privacy rules). Meta Pixel is active only with Marketing & Advertising consent. It measures page visits, accepted Launch Access requests, confirmed email subscriptions and qualified product-page engagement, and supports audience creation and remarketing. Qualified product engagement requires reaching at least 90% of a product page and spending at least 30 seconds with the page visible after the relevant consent. Google Analytics is linked to the AVC Google Ads account for conversion measurement and audience sharing; advertising use and personalization require Marketing consent. A separate Google Ads website remarketing tag is not yet active. Analytics-only visitors are not authorized for advertising personalization. The legal basis for optional advertising technologies is your consent, which you can withdraw in Cookie Settings.

4. Whether Data Are Required

Technical request data are necessary to deliver the website. Providing an email address is optional, but necessary to receive newsletter or launch communications. Information requested for support may be necessary to answer the request or verify the purchased SKU. Refusing optional marketing or tracking technologies does not restrict access to the public website.

5. Recipients and Service Providers

Personal data may be made available, only where necessary, to:

• Aruba S.p.A., providing website hosting, email and infrastructure services;
• Brevo, providing transactional confirmation email delivery and marketing-list/email services on the Controller’s behalf;
• SuperHive and its operator, as a separate controller for marketplace services and, where relevant, as the source or recipient of limited purchase-support information;
• Google Ireland Limited and relevant Google group companies: Google Tag Manager after Analytics or Marketing consent, Google Analytics 4 under Analytics consent, and advertising conversion measurement and audience use through the linked Google Ads account under Marketing consent;
• Meta Platforms Ireland Limited and relevant Meta group companies, for Meta Pixel, advertising measurement and consented website audiences under Marketing & Advertising consent;
• authorized contractors and professional advisers bound by confidentiality and data-protection obligations;
• competent authorities, courts or other recipients where disclosure is required by law or necessary to establish, exercise or defend legal claims.

Personal data are not sold. Payment-card data are not collected through avcsuite.com.

6. Locations and International Transfers

Aruba provides the website hosting and the AVC contact database; Brevo provides email delivery and the marketing contact list. Their applicable privacy notices and contractual terms describe their processing locations, subprocessors and any international transfers. AVC does not claim a transfer arrangement beyond those actually applicable to these services.

Google Fonts may process technical request data through Google infrastructure. With the applicable optional consent, Google and Meta services process website event data, browser or device information, cookie identifiers and technical request data such as IP addresses through their infrastructure. AVC does not send Launch Access email addresses, confirmation tokens, form contents or its contact database to Google Analytics, Google Ads or Meta Pixel. Cookie and browser identifiers are not anonymous data. Provider processing and any international transfers are described in the applicable Google notice for partner sites and Meta Privacy Policy; no additional transfer arrangement is asserted here. When you choose to visit SuperHive, you provide data directly to a separate controller established in the United States under SuperHive’s privacy policy. Where the Controller itself transfers personal data outside the EEA or to an organization in a country without an adequacy decision, it will use an applicable lawful mechanism, such as Standard Contractual Clauses, and supplementary measures where required.

7. Retention

• unconfirmed requests: confirmation links expire after 48 hours. Never-confirmed pending requests expire after 14 days and their email and related request records are removed by scheduled cleanup; an expired resubscription of a previously confirmed contact returns to an unsubscribed state;
• newsletter data: for as long as you remain subscribed; after withdrawal, a minimal suppression record and evidence of the consent or withdrawal may be retained for the time reasonably necessary to respect the opt-out and demonstrate compliance;
• support correspondence and files: ordinarily up to 24 months after the request is closed, unless a longer period is necessary for an active support case, contractual evidence, legal obligations or legal claims;
• limited purchase-support data: ordinarily up to 24 months after the last relevant support interaction, unless longer retention is necessary to establish entitlement, comply with law or handle a dispute;
• server and security logs: for the shortest period made available or configured through the hosting service that is reasonably necessary for delivery, security and fault diagnosis; any copies exported and controlled by AVC are ordinarily deleted within 30 days unless retained for a documented security incident or legal obligation;
• cookie preference: until you clear browser data or the consent version changes;
• Google Fonts request data: according to Google’s own retention and security practices.
• Google Analytics 4 data and cookies: according to the configured Analytics retention settings and the durations described in the Cookie Policy.
• website audiences: rolling membership windows of 30 or 90 days for visitors and product interest, 30 days for requested Launch Access leads, and 180 days for confirmed leads. These audience membership windows are not a statement of the providers’ complete data-retention periods. Provider records follow their applicable settings and notices.

AVC keeps a minimal history of subscription, confirmation and suppression transitions while the corresponding record is retained. Unsubscribe, hard-bounce and complaint information prevents unintended reactivation. New consent and a new confirmation are required for resubscription; provider delivery blocks are not cleared automatically. Application diagnostics do not record email addresses, confirmation tokens, IP addresses, user-agent strings or request payloads. Hosting access logs and Brevo delivery records remain subject to their own applicable settings.

When a retention period expires, data are deleted or anonymized unless continued retention is required or permitted by law.

8. Your Rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.

Send requests to support@avcsuite.com. We may request proportionate information to verify identity and protect personal data from unauthorized disclosure.

Requests relating to a SuperHive account, checkout, payment, invoice, withdrawal or refund must be directed to SuperHive under its own privacy and marketplace procedures.

9. Automated Decisions and Children

The current website does not make decisions based solely on automated processing that produce legal or similarly significant effects. The website and product are not directed to children, and the subscription form should not be submitted by anyone below the age at which they can independently consent to this processing under applicable law.

10. Security

Appropriate technical and organizational measures are used in view of the nature of the data and the relevant risks. These measures include encrypted transport through HTTPS, access controls, data minimization, use of reputable service providers and limitation of access to persons who need the data for their tasks. No internet transmission or storage system can be guaranteed to be completely secure.

11. Changes to This Notice

This notice will be updated when the website’s processing activities or service providers materially change. The date above identifies the current version. Material changes will be highlighted or otherwise communicated where reasonably practicable and legally required.

12. Contact

Lorenzo Ceaglio, operating under the name “Avatar Creator”, tax code CGLLNZ94B01I470R, Italy — support@avcsuite.com.