Privacy in Avantgarde Fieldsales

App notice · version 2026-11-05.1

Who is responsible?

Avantgarde Fieldsales is provided by AVAGA HOLDING AS, Norwegian organization number 829 544 482. Contact rl@avaga.no.

Avaga is responsible for its own account and business administration, billing, support and security. Your employer or customer company is responsible for its employee, customer and prospect records. Avaga processes those company records on the company's instructions. The company must provide its own privacy information and establish the grounds for its use. We do not sell your personal information.

Information and purposes

Account name, email, user identifier, company, roles and sign-in information support authentication and the correct workspace access.
IP addresses, technical requests, sign-in events and support case information support security, troubleshooting and responding to requests.
Company address lists, contact information, notes, visits, offers, sales and commission records support the features your company chooses to use. Signing and document delivery also involve signatures, contract documents and delivery status. Access depends on roles and address assignment. Do not put sensitive or unnecessary personal information in notes.
Company and billing details and payment status support subscriptions, accounting and access control. Card information is entered with Stripe. Payment status can open or restrict workspace access; contact Avaga if it is incorrect or you want a review.

Information comes from users, company administrators, company imports and records, relevant public address or business registers and payment status from Stripe. US workspaces use their own imported address lists and coordinates; importing a list does not establish permission to contact the people listed.

Location, maps and your device

With device permission, foreground location can show you on the map. Sharing with coworkers is a separate choice through the company's private Live channel. The app does not request background location. Turn sharing off in Live or revoke location permission in your device settings. Employers must assess the lawfulness of employee monitoring; a switch in the app is not a complete legal assessment.

Maps outside the standard Norwegian map service use OpenFreeMap (OpenStreetMap data). Map tile providers receive technical requests including your IP address and the requested map area. The app identifies itself and may send its website origin with map requests. The libraries used by this packaged app are bundled locally. Norwegian address and enrichment services are used for Norwegian address workflows. Opening an external directions or lookup link passes the selected destination or search to that service.

The app keeps sign-in information in device secure storage and stores necessary preferences and supported records awaiting synchronization. Sign out on shared devices. Do not clear app data or reinstall while records are queued. Server deletion does not automatically remove your screenshots, exported documents or copies in your email app.

The guest demo uses public addresses and fictional people and activity. Demo business activity is kept in memory and resets when the demo restarts. It does not send actual offers, orders or payments. Map requests still reach the map provider.

Service providers and international processing

Supabase provides the database and authentication; the project database is in Stockholm, Sweden. Netlify provides hosting and server functions; the server functions operate in the United States. The separate recovery journal is in Frankfurt, Germany. Resend provides email delivery; the configured sending region is Ireland, while Resend states that data is stored in the United States. Stripe provides payments and acts independently for some processing.

A database region does not mean all provider, support and account processing stays in that region. Provider agreements govern processing and international transfers, including EU standard contractual clauses and the EU–US Data Privacy Framework where its conditions apply. Contact Avaga for the relevant transfer information and safeguards. Company administrators and other authorized users can access records according to their permissions.

Retention

Accounts and profiles remain while in use. Deactivation can be reversed. Permanent personal account deletion removes sign-in and profile information after review; returning afterward requires a new account.

Company sales, commissions, contracts and signatures are assessed separately from personal sign-in. The company must document each category's purpose, necessary content and retention period or ending event. Retention must be necessary for the agreement, a specific legal obligation or a documented legal claim; there is no blanket entitlement to keep all sales data. Records retained under a separate identifier may still be personal information.

Actual accounting records follow the applicable statutory retention rules. Those rules do not automatically set the same period for all contacts, notes or signatures. Support and security records are kept while the case is investigated and followed up. After closure, excess attachments and personal information are removed through review. Further retention needs a documented purpose and a new review or ending date. Avaga reviews its retained case information at least quarterly. Providers' logs and backups also have their own retention cycles.

A minimal deletion receipt without name, email or account ID is retained for no more than twelve months after deletion, reviewed quarterly and removed earlier when unnecessary. A separate recovery journal retains the account ID, account creation time, case ID and necessary status until all registered backups capable of restoring the account have expired or been deleted and the case is resolved; it is then removed after review. Restored backups must be checked for deleted accounts before normal use.

Your requests

You can contact Avaga or the responsible company to request access, correction, deletion and other rights available under the law that applies to you. Avaga coordinates requests concerning company customer and employee records with that company. We verify identity without asking you to send passwords or one-time codes. Requests are answered within the applicable legal period.

Use Delete my account on My page or email rl@avaga.no. You do not need an active paid subscription to contact us. Deletion requests are reviewed before execution; submission does not confirm deletion. A last administrator or subscription owner needs to resolve responsibility transfer or company closure. We explain the outcome and any retained information, grounds and retention rule.

Personal account deletion, account deactivation and cancellation of a company subscription are separate actions. At the end of a company service, return and deletion of company records are agreed with the responsible company. Unresolved questions do not justify indefinite retention.