Contents

  1. Who We Are
  2. What We Collect and Why
  3. Browser Extension Specific Data
  4. The Three Promises
  5. How Our Affiliate Model Works
  6. Who We Share Data With
  7. Data Retention
  8. Your Rights
  9. Children
  10. Security
  11. Browser Permissions Explained
  12. California & CCPA
  13. European Users & GDPR
  14. Changes to This Policy
  15. Contact

1 Who We Are

Alventis AI LLC is a Wyoming limited liability company. We operate a consumer savings platform that automatically finds and applies coupon codes at checkout and earns you cashback on purchases. Our backend API is at alventis.ai. Our website is at alventis.ai.

2 What We Collect and Why

DataWhy We Collect ItStatus
Account information
Email address, hashed password
To authenticate you and manage your account. We never store your password in plain text.Active
Coupon test results
Code tested, merchant, worked/failed
To improve code quality for all users. Not linked to your identity in any public-facing way.Active
Cashback transaction data
Merchant, estimated commission, date
To credit your wallet and process payouts. Financial records retained 7 years as required by law.Active
Referral data
Referral relationship
To credit your referral bonus when referred users complete their first purchase.Active
Authentication token
JWT stored in browser local storage
To keep you logged in between sessions. Stored only on your device. Expires after 24 hours.Active

What We Never Collect

3 Browser Extension Specific Data

Chrome and Edge

We store only your JWT authentication token in chrome.storage.local. No browsing history is stored. No purchase amounts are stored locally. The extension only activates on checkout pages of the 55 supported merchant domains.

Firefox

Identical to Chrome and Edge. We store only the JWT token in browser.storage.local. No browsing history. No purchase data. Activates only on the 55 supported merchant checkout pages.

Brave

Identical to Chrome. Uses chrome.storage.local. The same 15-domain restriction applies.

All browsers: We do not use cookies for authentication. We do not set tracking pixels. We do not collect data from any page outside the 55 supported merchant checkout pages. The full list of 55 supported domains is available at alventis.ai. Key examples include: amazon.com, walmart.com, target.com, nike.com, sephora.com, bestbuy.com, ebay.com, adidas.com, macys.com, homedepot.com, ulta.com, etsy.com, gap.com, nordstrom.com, greycordbeauty.com.

4 The Three Promises

These are the core commitments that define Alventis. They are enforced by how the extension is built, not by policy alone — the full pledge, including how to report a suspected violation, is published at alventis.ai/transparency.

Promise 1 — We Never Replace Creator Affiliate Links

If you clicked an affiliate link from a YouTube creator, blogger, influencer, or publisher before opening Alventis, that link and its commission belong to them. We will never replace, redirect, modify, or interfere with it. Not for any merchant. Not for any commission. Never.

Promise 2 — We Never Overwrite Affiliate Cookies

If an affiliate tracking cookie was set on your browser before you opened Alventis, we leave it completely untouched. We only place our own affiliate attribution when there is no prior attribution already present.

Promise 3 — We Never Suppress Better Coupons

Coupon codes are ranked purely by the savings amount they deliver to you. No merchant can pay us to hide a better code or promote a worse one. Our revenue comes from you saving money — suppressing savings would be self-defeating and we will never do it.

Verify these promises at: alventis.ai/transparency.

5 How Our Affiliate Model Works

When you use Alventis to make a purchase and there is no prior affiliate attribution present, Alventis earns a commission from the merchant through our affiliate network partnerships and shares a portion of it with you as cashback. There is no hidden data sale. There is no advertising network. There is no browsing profile built on your activity.

6 Who We Share Data With

Resend

Used to send transactional emails — account verification, password reset, payout notifications, and receipt emails. We do not use your email for marketing without your consent.

Affiliate networks

When you make a purchase through Alventis we share the minimum data required to track the affiliate commission — typically a click ID and the merchant domain. We do not share your name, address, or full purchase details.

Law enforcement

We will share data with law enforcement if required by a valid legal process. We will notify you if legally permitted to do so.

We never share your data with: Advertisers · Data brokers · Analytics companies · Marketing platforms · Any third party for their own commercial purposes.

7 Data Retention

Data TypeRetention Period
Account informationLife of account + 90 days after deletion
Coupon test resultsRetained indefinitely, anonymized after 90 days
Financial records7 years (accounting and tax compliance)
Authentication tokens24 hours — exist only on your device
Audit logs2 years

8 Your Rights

Access

Request a copy of all data we hold about you. Email privacy@alventis.ai. We respond within 30 days.

Correction

Update your email in account settings. For other corrections email privacy@alventis.ai.

Deletion

Delete your account directly from the Alventis app or browser extension (Settings → Delete Account). You can also request deletion by emailing privacy@alventis.ai. Financial records are retained 7 years as required by law.

Portability

Request a JSON export of your data. Email privacy@alventis.ai.

Clear local extension data

Go to your browser's extension manager, find Alventis, and clear its storage — this removes your stored JWT token and logs you out of the extension.

9 Children

Alventis is not intended for users under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account email support@alventis.ai and we will delete it immediately.

10 Security

11 Browser Permissions Explained

PermissionWhy It Is Required
storageSaves your JWT token and extension settings (auto-apply toggle, notification preferences) locally on your device. Nothing is sent to our servers through this permission.
activeTabAllows the extension to read the URL of your current tab to detect whether you are on a supported store checkout page. Only active while you interact with the extension.
tabsLets the service worker listen for tab navigation events to detect when you move to a checkout page and update the toolbar badge showing available coupon count.
scriptingRequired to inject the coupon tester script into the active checkout tab. Used only on the 55 supported merchant domains — never on any other site.
notificationsAllows the extension to show a browser notification when a coupon is successfully applied — only if you have not disabled this in settings.
alarmsPeriodically refreshes our coupon database in the background (every 60 minutes) so you always see up-to-date availability.
Host permissions
(55 specific domains)
Grants permission to inject a lightweight script into checkout pages on the 55 supported stores only. The extension has no access to any other website you visit. Domains: amazon.com, walmart.com, target.com, nike.com, sephora.com, bestbuy.com, ebay.com, adidas.com, macys.com, homedepot.com, ulta.com, etsy.com, gap.com, nordstrom.com, greycordbeauty.com.

12 California Residents & CCPA

If you are a California resident, the CCPA as amended by the CPRA grants you: the right to know, the right to delete, the right to correct, the right to opt-out of sale or sharing (we do not sell data), and the right to non-discrimination.

To submit a verifiable consumer request email privacy@alventis.ai with "CCPA Request" in the subject line. We respond within 45 days.

In the past 12 months we have collected: store domain of the active tab on supported merchant sites. We have not sold or disclosed personal information for business purposes to third parties.

13 European Users & GDPR

Legal Basis for Processing

Processing ActivityLegal Basis
Coupon lookup using your current store domainLegitimate interests — providing the core service you installed the extension to use
Storing extension settings locallyLegitimate interests — preserving your preferences
Account creation and managementPerformance of a contract
Cashback trackingConsent — cashback is earned automatically when you use the extension on supported merchant checkout pages

International Data Transfers

Our servers are located in the United States. If you access Alventis from the EEA or UK, your data will be transferred to the US. We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers.

Data Protection Contact

Email privacy@alventis.ai for GDPR requests (access, rectification, erasure, restriction, portability, objection). We respond within 30 days.

14 Changes to This Policy

We will notify you of material changes via email and by updating the Last Updated date on this page.

15 Contact

Alventis AI LLC
General: support@alventis.ai
Privacy & data requests: privacy@alventis.ai
alventis.ai  ·  Wyoming, United States