Privacy policy

Who processes the data

AVIERIX is a cloud business management system. Each company that subscribes owns the database it records (customers, suppliers, employees, operations) and decides what it is used for. AVIERIX acts as a data processor on behalf of that company, under Peruvian Law No. 29733 on Personal Data Protection.

What data is recorded

Whatever each company enters to operate: identification of customers and suppliers, employee data, and the users who access the system (name, email, sign-in records and actions taken).

No sensitive data in the legal sense is recorded unless the company itself enters it in free-text fields, under its own responsibility.

What it is used for

Exclusively to provide the service: issuing documents, inventory, cash and accounting, staff and access management, and the company's tax obligations. AVIERIX does not sell, share or use the data for advertising.

How it is protected

Per-company isolation in the database, encryption in transit, hashed passwords, second-factor authentication, revocable sessions and an immutable audit log.

The service is hosted with recognized infrastructure providers; the exact location is stated in each company's contract.

How long it is kept

As long as the company keeps the service. On termination the company can export all its data and request its permanent deletion. Electronic documents and books may be subject to legal retention periods the company must observe first.

Rights of individuals

Access, rectification, cancellation and opposition are exercised before the company that owns the database. AVIERIX gives each company the tools to handle them: editing, deactivation and export.

Changes

This policy is updated when the service changes; the date above says when.