Privacy Policy

The data controller is AvenEU SRL, based in Brussels, Belgium. For privacy enquiries, contact info@aveneu.eu.

• Account data: email address, full name.
• Organisation data: organisation name, type, country, sector, description.
• Project data: proposal content, budget information, project details.
• Usage data: pages visited, features used (via Microsoft Clarity).
• AI interaction data: text submitted to the EUri AI assistant for analysis.

• Account, organisation, project and AI data: contract performance — Article 6(1)(b).
• Usage data: legitimate interest — Article 6(1)(f) — for product improvement.
• Legal obligation: Article 6(1)(c) where required by applicable law.

AvenEU uses a small number of carefully selected sub-processors to operate the Service. The infrastructure storing user data is located within the European Union. Where a sub-processor is a company incorporated outside the EU, its processing is nonetheless carried out on EU-based servers and, where relevant, covered by Standard Contractual Clauses.

• Supabase — database and authentication; stores all account, organisation and project data; EU region servers; provider incorporated in the United States, processing on EU infrastructure.
• Vercel — application hosting and serverless functions executed in Frankfurt, Germany (fra1); processes request data transiently and stores no proposal content; provider incorporated in the United States.
• Anthropic— AI processing for the EUri assistant; receives only the proposal-related content listed in Section 6; data processed on US servers under Standard Contractual Clauses and Anthropic's Data Processing Addendum, with no training on submitted content and a short retention window (currently 7 days).
• Resend — transactional email such as account confirmation and password reset; email address and name; EU region (Ireland).
• Brevo — marketing and re-engagement email where you have opted in; email address, name and preferences; EU (France).
• Microsoft Clarity — anonymised product analytics; no personal proposal content is recorded; provider incorporated in the United States.
• Viva.com — payment processing for paid plans; billing and payment data; EU (Greece), PCI-DSS compliant.
• Upstash — rate-limiting of API requests; processes IP addresses and identifiers transiently; EU region; provider incorporated in the United States.
• Sentry — error monitoring; configured to capture errors only with personal data disabled by configuration; EU region (Germany).

Several sub-processors are companies incorporated in the United States even though the data they process is hosted within the EU. Under the US CLOUD Act, such companies may in principle be subject to US legal process. AvenEU mitigates this through EU data residency, data minimisation, and Standard Contractual Clauses under GDPR Chapter V where personal data is transferred to or accessible from outside the EEA.

Transfers to Anthropic in the United States are made under Standard Contractual Clauses and governed by Anthropic's Data Processing Addendum, available at anthropic.com/legal/data-processing-addendum.

AvenEU uses Anthropic's Claude models, via the Claude API, to power its AI proposal assistance features (EUri).

When you use AI-assisted features, the following content may be sent to Anthropic's API servers, which are located in the United States:

• text you have written in proposal sections, including the text of other sections in the same project used as context;
• your project title, summary, objectives, implementation and expected-results text;
• the free-text project idea you type into the funding-call discovery search;
• your organisation's type, country, size, experience level, themes, previous EU programmes and short description;
• the names, roles and countries of project partner organisations you have entered (used only in proposal-section analysis);
• your organisation's name, but only as the coordinator of your consortium during proposal-section analysis, so the assistant can write grounded text about your partnership — it is never used for funding-call matching or discovery.

The following is specifically NOT sent to Anthropic:

• your organisation's registration number, VAT number or other financial identifiers;
• the actual euro figures in your budget and your per-partner budget allocations, which never leave our servers (budget analysis works only from the surrounding proposal text);
• your email address or full name;
• your account credentials or password;
• your payment information.

This transfer is made under Standard Contractual Clauses under GDPR Chapter V and covered by Anthropic's Data Processing Addendum. Anthropic does not use content submitted via the API to train its models. Submitted content is subject to a short retention window (currently 7 days), after which it is deleted, except where retention is required by law or to address misuse.

Enterprise customers may request additional data-handling arrangements, including Zero Data Retention and EU-only inference, by contacting info@aveneu.eu.

You can choose not to use AI-assisted features, in which case your proposal content is not transmitted to our AI sub-processor. All other platform features remain fully available without using EUri.

Account data is kept for as long as your account is active, plus 30 days after a deletion request. Project data is deleted when your account is deleted.

You have the right to access, rectify, erase, port, restrict, and object to the processing of your personal data. To exercise any of these rights, contact info@aveneu.eu. We respond within 30 days.

You also have the right to lodge a complaint with your national Data Protection Authority. For Belgium, this is the Autorité de protection des données (APD): www.dataprotectionauthority.be.

We use functional cookies for authentication and Microsoft Clarity cookies for analytics. We do not use advertising cookies. Clarity cookies are loaded only after you accept cookie consent.

AvenEU is intended for users aged 18 and above.

The EUri AI assistant provides suggestions only. No automated decisions with legal or significant effects are made about users. The user reviews and accepts or rejects all AI suggestions before any content is used or submitted.

Business and enterprise customers who require a Data Processing Agreement under Article 28 GDPR can request one by contacting info@aveneu.eu.

Users will be notified by email of material changes.

Questions about this policy or your data? Email info@aveneu.eu or visit our Contact page. The Service is operated by AvenEU SRL, Brussels, Belgium.