Your information · Updated October 19, 2026
Understand what you share.
Know what Aevyra collects, why it needs it and how to ask us to stop access or remove information.
At a glance
- Aevyra checks the services and websites you authorize. The public demo uses simulated evidence.
- Saved evidence and reports can contain business-sensitive details. Share only what is needed for your assessment.
- Disconnecting a service, deleting saved information and canceling billing are separate actions.
- For privacy, export or deletion requests, email david@tiptoptechknowlogy.com.
Who operates Aevyra
Aevyra is provided by David W Pershall, doing business as TipTopTechknowlogy, in Manlius, New York, United States. This notice describes the hosted Aevyra application and its account and support workflows. If your organization self-hosts Aevyra, it controls its own storage and deployment; information sent to us for support is still subject to this notice.
Information involved in your account and assessment
| Information | Why it is used |
|---|---|
| Account and business details | Your email address, business name, password verification information or supported sign-in identity, and business context you supply help us verify access and personalize your workspace and report. |
| Connected-service authorization | Provider account or tenant identifiers, approved role and connection details, and Microsoft authorization tokens allow the selected connector to operate within the access you approve. Aevyra does not need your AWS or Microsoft account password. |
| Assessment evidence and reports | Authorized resource names and identifiers, regions, security settings, key and certificate metadata, policy or AI evidence, public website TLS/HTTPS observations, uploaded technical exports and resulting findings support your assessment. The exact information depends on the source, permissions and selected capability. |
| Billing and purchase records | Stripe customer and subscription references, plan and payment status, usage allowances and purchase-terms acceptance support billing and access. Payment details are entered in Stripe-hosted Checkout or its customer portal. |
| Service and support records | Requests may include IP addresses, browser/request details, timestamps, error and security logs, and information you send us for support. These help operate the service, investigate problems and prevent misuse. |
Use supported technical exports rather than private documents or raw AI conversations. Do not upload passwords, private keys, payment-card information or unnecessary personal information. Regulated or especially sensitive information may require a separate agreement before processing.
How information is used and shared
We use information to provide authorized assessments and reports, maintain accounts and billing, protect the service and resolve support requests. Under the Customer Agreement, we do not sell Customer Data, use it to train a general-purpose AI model or use identifiable evidence for unrelated marketing without a separate express agreement.
Necessary service providers may process information to deliver the service, under protective obligations. Stripe processes payments. Cloud/storage and email-delivery providers support hosting, authorized storage and account communications. When you connect AWS or Microsoft, the selected provider also processes authorization and API requests under its own terms. Processing can occur in the United States and in locations used by the relevant provider; this page does not promise a particular data-residency region. Contact us before connecting if you require a specific provider list, location commitment or data-processing agreement.
Authorized personnel may access information when needed to operate, secure or support the service. We may retain or disclose information where required by law or necessary to address misuse and protect legal rights, subject to applicable obligations. Your own sharing of a downloaded report is under your control.
Browser storage and third-party pages
The app uses browser session storage for sign-in and workflow continuity, and may remember source selections or unfinished work. Signing out clears the current app session, but does not erase saved server-side evidence, all browser history or downloads. Stripe and cloud-provider sign-in pages have their own privacy and storage practices.
Retention, export and deletion
Saved account information, connection records, assessment evidence and reports can remain in the service after a check finishes. Signing out, revoking provider access or canceling a subscription does not by itself erase these records. There is no fixed automatic purge interval promised for saved customer evidence.
To request access, correction, an export, account closure or deletion, email david@tiptoptechknowlogy.com from your verified account address. Identify the workspace and the scope of your request; do not attach raw assessment evidence. We verify your authority before changing or releasing workspace information and confirm what can be removed and what must be retained.
Applicable billing, purchase-consent, security and legal records may need to be retained. Backup copies are separate from active service copies and may not be removed at the same time. This notice does not promise immediate erasure or a fixed automatic deletion interval. If a specific retention or backup-deletion deadline is required, agree it with us before submitting information. The accepted Customer Agreement governs its post-termination export rights and any separately agreed retention terms.
Stop access to a connected service
For immediate control, revoke Aevyra's authorization at the provider. Ask your AWS administrator to review and remove the Aevyra evidence role or CloudFormation stack for the affected workspace, and your Microsoft administrator to withdraw the applicable Aevyra consent/access in your tenant. Review the exact role or app before changing access, especially if several workspaces are connected.
Also use the disconnect option if offered in your workspace, or contact support to stop the saved connection. Revoking access prevents future authorized calls once revocation takes effect; it does not recall information already collected or necessarily interrupt a request already in progress. Removing cloud access does not delete saved reports or cancel a paid plan. See disconnection and cancellation help.
Questions and changes
Send privacy or security concerns to david@tiptoptechknowlogy.com. Applicable privacy rights depend on your circumstances; we will explain how a request can be handled after verifying it. Aevyra is offered for business use, not as a service directed to children.
The date above identifies this notice. Material changes will be communicated through appropriate service or account notices. A change to this page does not silently amend an accepted Customer Agreement or authorize a new use of Customer Data.