Privacy policy
Who we are. This site is operated by Avexis AI LLC.
First-party visitor tracking. Only after analytics permission is saved, and trusted hosting information identifies a US location, we store a random visitor ID in your browser and record pages viewed, contact-button clicks, scroll depth, device/browser information, referring site, campaign tags and approximate location. Unknown or non-US locations are excluded from this collection. IP addresses are hashed, not stored in raw form.
Enquiries. When you submit a form we store your name, email, company, phone and message. We connect permitted visit history from the same browser only if you separately check the optional inquiry permission box and tracking consent remains active. This is a browser association, not verified identity. We use an AI model to score and prioritise the enquiry and draft a reply for our team.
CRM and partners. This site does not identify anonymous visitors through outside identity networks or share browsing history with advertisers. External CRM sync, when connected, sends only minimal contact details and honors opt-outs; permission to link an inquiry does not authorize partner sharing. Investor inquiries remain separate from customer demand reporting.
Consent withdrawal. Rejecting tracking detaches this browser from inquiries and removes its page events. Sale/share opt-out or deletion requests also stop contact matching and CRM sharing. A new browser visit cannot restore withdrawn history. Administrative and account pages are excluded from visitor tracking.
Consent management. Analytics, advertising and company-identification choices are separate. Receipts record the notice version, purposes, origin, time, privacy signals and a random consent identifier, not your email or raw IP. Choices renew after 180 days. No identity or advertising provider is connected; granting a purpose does not activate an unapproved partnership. Browser Global Privacy Control or Do Not Track disables optional first-party collection.
Cookie-free site measurement. Our consent banner passes your analytics choice to Google Consent Mode. Clicks and form/assessment actions are held back until analytics is accepted; Global Privacy Control blocks those interactions even after acceptance. Page visits, time on page, loading speed and errors are recorded for every visitor without cookies or identifying anyone, including when optional analytics is declined. Your browser saves purpose choices for up to 12 months; Avexis requires its separate consent receipt to renew after 180 days.
Lovable records pages visited, referring sources, country, browser, operating system, device type, time on page, loading performance, errors, clicks, assessment starts/completions and inquiry/investor form actions. It stores nothing on the visitor’s device, does not keep IP addresses and does not identify visitors. Detailed data is retained for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.
Accounts and service providers. Lovable Cloud stores account, inquiry, consent and privacy-request records; account sessions use browser storage to keep you signed in. Inquiry scoring processes submitted inquiry information through our AI service. Site fonts are requested from Google Fonts, which receives the network request. We do not use these services as an anonymous visitor identity network.
Operating scope. Avexis currently targets the US. This does not establish a legal exemption from regulations elsewhere; future international targeting, monitoring or identification requires a separate legal and provider review.
Privacy Center — opt out of sale or sharing, or request access to or deletion of your data.
Privacy questions
Does operating in the US exempt Avexis from GDPR?
No exemption has been established. US traffic filtering does not prove residency or determine legal applicability. Avexis does not currently resolve anonymous people through a licensed provider. International targeting, monitoring and provider residency exclusions require legal review.
Do state privacy laws apply?
Applicability varies by state, business activities, revenue, data volumes and other conditions. Revenue alone is not a sufficient exemption test. Avexis retains privacy choices rather than restricting them to California.
Can I access, delete or correct my information?
Use Privacy Center for access, deletion and opt-out requests. Requests are recorded for manual review; verification and fulfillment are not automated. Account holders can edit their name and location in Account Settings. For other corrections, sensitive-use limitations or an appeal, describe the request in the access form; a dedicated verified workflow is not yet implemented. Do not submit passwords, financial credentials, tax records or other sensitive documents.
Does visiting the site authorize marketing?
No. A visit, analytics consent or inquiry-matching permission does not authorize marketing messages or unrestricted partner sharing. Advertising and identity providers remain unconnected.
Are vendor contracts and security certifications complete?
Partner records do not establish an executed data protection agreement. Privacy/security review, appropriate contracts and verification are required before a new integration. Avexis is not represented as SOC 2 Type II certified.
This notice describes current implementation, not legal advice or a compliance attestation. See California’s official privacy guidance; legal review is required for Avexis’s specific activities.