Privacy Policy
Last updated: June 12, 2026
How Aviato Studio collects, uses, and protects your personal data, and the rights you have under the GDPR.
1. Who we are
Aviato Studio is operated by RivTech (SASU), a company registered in France (RCS Paris 878 511 336), with its registered office at 66 avenue des Champs-Élysées, 75008 Paris, France. For the purposes of the EU General Data Protection Regulation (GDPR), RivTech is the data controller for the personal data described in this policy.
Questions about this policy or your data can be sent to privacy@aviatostudio.com. We have not appointed a Data Protection Officer; data-protection requests are handled by the contact above.
2. Scope
This policy covers our public website (https://www.aviatostudio.com) and the Aviato Studio application (the “Service”). Where you use the Service on behalf of an organisation, that organisation is the controller of the data you upload, and we act as its processor — see our Data Processing Agreement.
3. What we collect
From the website
- Contact / demo requests: name, work email, company, and any message you send.
- Newsletter & waitlist: your email address (and company, for the waitlist).
- Blog comments: the name and comment text you submit.
- Technical data: your IP address, processed transiently to apply rate limits and protect the forms from abuse. We do not use analytics or advertising cookies. A theme preference may be stored locally in your browser (localStorage); it is never sent to us.
From the application
- Account data: name, email, and authentication credentials.
- Project data: the CAD geometry, meshes, case configuration, and simulation results you upload or generate.
- Usage & billing data: GPU-minutes consumed, storage used, job history, and related metadata.
4. Why we use it & legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Provide and operate the Service | Performance of a contract |
| Respond to contact / demo requests | Legitimate interest; pre-contractual steps |
| Send the newsletter | Consent (withdrawable at any time) |
| Secure our forms and infrastructure (rate limiting) | Legitimate interest |
| Billing, accounting, and legal compliance | Legal obligation; performance of a contract |
5. Cookies
This website does not set tracking, analytics, or advertising cookies, and shows no consent banner because none is required. The only client-side storage is a strictly-necessary theme preference kept in your browser.
6. Who we share it with (sub-processors)
We do not sell your personal data. We share it only with the service providers needed to run Aviato Studio, each bound by a data-processing agreement:
| Provider | Purpose | Location |
|---|---|---|
| Modal | On-demand GPU compute (running simulations) | United States |
| Amazon Web Services (S3) | Storage of geometry, meshes, and simulation results | France (eu-west-3, Paris) |
| Neon | Application database (accounts, metadata, form submissions) | United States (AWS us-east-1) |
| Vercel | Website hosting and content delivery | United States (global edge network) |
We may also disclose data where required by law or to protect our rights.
7. International transfers
Your simulation geometry and results are stored in the European Union (AWS Paris region). Some providers — Modal, Neon, and Vercel — process data in the United States. Those transfers are protected by the European Commission’s Standard Contractual Clauses together with appropriate technical safeguards (encryption in transit and at rest).
8. How long we keep it
- Marketing & prospect data (contact, newsletter, waitlist, comments): up to 3 years from your last interaction with us, then deleted or anonymised.
- Account & project data (geometry, results, account): deleted within 30 days of account closure, except where we must retain certain records (e.g. invoices) to meet legal obligations.
- Billing records: retained for the period required by French accounting and tax law (generally 10 years).
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- data portability;
- withdraw consent at any time (e.g. unsubscribe from the newsletter).
To exercise any of these, email privacy@aviatostudio.com. You also have the right to lodge a complaint with the French supervisory authority, the CNIL.
10. Security
We protect your data with encryption in transit and at rest, tenant isolation, and least-privilege access controls. See our Security page for details.
11. Children
Aviato Studio is a professional tool not directed at children, and is not intended for anyone under 16. We do not knowingly collect their data.
12. Changes
We may update this policy from time to time. Material changes will be announced on this page, with the “last updated” date revised above.
13. Contact
RivTech (SASU), 66 avenue des Champs-Élysées, 75008 Paris, France — privacy@aviatostudio.com.