Legal
Sub-processors
Last updated: June 18, 2026
To run Avos, we rely on vendors that may process personal data on our behalf. Below are our sub-processors, their purpose and where processing happens. Before sending data to AI providers, structured personal identifiers are stripped.
Provedor de IA (OpenAI-compatível)
Purpose: Text generation and AI assistant
Data: HR context (no personal identifiers — redacted before sending)
Location: Depends on the configured AI provider
Provedor de e-mail (SMTP)
Purpose: Transactional email delivery (payslips, notices)
Data: Recipient name, email and payslip content
Location: Depends on the configured SMTP provider
Provedor de pagamento
Purpose: Subscription and add-on billing
Data: Account owner name, email and country
Location: Depends on the payment provider
Telegram
Purpose: Internal contact and sales notifications
Data: Name, email and message submitted in public forms
Location: Cloud (multiple regions)
Meta Platforms (Facebook/Instagram)
Purpose: Ad measurement (Meta Pixel) on the public pages
Data: Page visited, conversion event, charge amount and browser identifiers (cookie and IP). From the server (Conversions API), also the email as a SHA-256 hash, never in clear text. No payroll, employee or company data
Location: United States
Infraestrutura e banco de dados
Purpose: Application hosting and database
Data: All platform data
Location: Depends on the hosting provider's region
Questions
For questions about sub-processors or to request a DPA: privacy@useavos.app