Privacy Policy

The data controller is AvenEU SRL, based in Brussels, Belgium. For privacy enquiries, contact info@aveneu.eu.

AvenEU SRL
Val des Seigneurs 9, boîte 11, 1150 Woluwe-Saint-Pierre, Brussels, Belgium
Enterprise & VAT number: BE 1040.525.433
Contact: info@aveneu.eu

• Account data: email address, full name.
• Organisation data: organisation name, type, country, sector, description.
• Project data: proposal content, budget information, project details.
• Usage data: pages visited, features used (via Microsoft Clarity and Google Analytics).
• AI interaction data: text submitted to the EUri AI assistant for analysis.

• Account, organisation, project and AI data: contract performance — Article 6(1)(b).
• Usage data: legitimate interest — Article 6(1)(f) — for product improvement.
• Legal obligation: Article 6(1)(c) where required by applicable law.

AvenEU uses a small number of carefully selected sub-processors to operate the Service. The infrastructure storing user data is located within the European Union. Where a sub-processor is a company incorporated outside the EU, its processing is nonetheless carried out on EU-based servers and, where relevant, covered by Standard Contractual Clauses.

• Supabase — database and authentication; stores all account, organisation and project data; EU region servers; provider incorporated in the United States, processing on EU infrastructure.
• Vercel — application hosting and serverless functions executed in Frankfurt, Germany (fra1); processes request data transiently and stores no proposal content; provider incorporated in the United States.
• Anthropic— AI processing for the EUri assistant; receives only the proposal-related content listed in Section 6; data processed on US servers under Standard Contractual Clauses and Anthropic's Data Processing Addendum, with no training on submitted content and a short retention window (currently 7 days).
• Resend — transactional email such as account confirmation and password reset; email address and name; EU region (Ireland).
• Microsoft Clarity — anonymised product analytics; no personal proposal content is recorded; provider incorporated in the United States. Loaded only after you grant analytics consent.
• Google Analytics — product analytics covering pages visited and features used; no proposal content is sent; provider incorporated in the United States. Loaded only after you grant analytics consent.
• Meta Platforms — advertising measurement via the Meta Pixel; no proposal content is sent; provider incorporated in the United States. Loaded only after you grant marketing consent.
• LinkedIn — advertising measurement via the LinkedIn Insight Tag; no proposal content is sent; provider incorporated in the United States. Loaded only after you grant marketing consent.
• Stripe — payment processing, VAT calculation, and invoicing; billing and payment data; Stripe Payments Europe (Ireland); PCI-DSS compliant.
• Upstash — rate-limiting of API requests; processes IP addresses and identifiers transiently; EU region; provider incorporated in the United States.
• Sentry — error monitoring; configured to capture errors only with personal data disabled by configuration; EU region (Germany).

Several sub-processors are companies incorporated in the United States even though the data they process is hosted within the EU. Under the US CLOUD Act, such companies may in principle be subject to US legal process. AvenEU mitigates this through EU data residency, data minimisation, and Standard Contractual Clauses under GDPR Chapter V where personal data is transferred to or accessible from outside the EEA.

Transfers to Anthropic in the United States are made under Standard Contractual Clauses and governed by Anthropic's Data Processing Addendum, available at anthropic.com/legal/data-processing-addendum.

AvenEU uses Anthropic's Claude models, via the Claude API, to power its AI proposal assistance features (EUri).

When you use AI-assisted features, the following content may be sent to Anthropic's API servers, which are located in the United States:

• text you have written in proposal sections, including the text of other sections in the same project used as context;
• your project title, summary, objectives, implementation and expected-results text;
• the free-text project idea you type into the funding-call discovery search;
• your organisation's type, country, size, experience level, themes, previous EU programmes and short description;
• the names, roles and countries of project partner organisations you have entered (used only in proposal-section analysis);
• your organisation's name, but only as the coordinator of your consortium during proposal-section analysis, so the assistant can write grounded text about your partnership — it is never used for funding-call matching or discovery.

The following is specifically NOT sent to Anthropic:

• your organisation's registration number, VAT number or other financial identifiers;
• the structured budget data you enter in the Budget tool — the euro figures and your per-partner budget allocations — which stays on our servers and is not sent to Anthropic. Budget analysis works only from the surrounding proposal text, so any euro amounts you type directly into a proposal section are sent to Anthropic as part of that section's text, like the rest of what you write there;
• your email address or full name;
• your account credentials or password;
• your payment information.

This transfer is made under Standard Contractual Clauses under GDPR Chapter V and covered by Anthropic's Data Processing Addendum. Anthropic does not use content submitted via the API to train its models. Submitted content is subject to a short retention window (currently 7 days), after which it is deleted, except where retention is required by law or to address misuse.

Enterprise customers may request additional data-handling arrangements, including Zero Data Retention and EU-only inference, by contacting info@aveneu.eu.

You can choose not to use AI-assisted features, in which case your proposal content is not transmitted to our AI sub-processor. All other platform features remain fully available without using EUri.

Content produced with EUri is AI-generated and is labelled as such within the Service, in line with Article 50 of the EU AI Act.

When you delete your account, your account and project data are deleted immediately, including your projects, proposal content, partner details, budgets, and matching data. Certain payment and invoicing records are retained in anonymised form for up to 7 years, as required under Belgian accounting and tax law; these records are no longer linked to your account. We do not operate a delayed-deletion grace period — deletion takes effect at once.

You have the right to access, rectify, erase, port, restrict, and object to the processing of your personal data. To exercise any of these rights, contact info@aveneu.eu. We respond within 30 days.

You also have the right to lodge a complaint with your national Data Protection Authority. For Belgium, this is the Autorité de protection des données (APD): www.dataprotectionauthority.be.

We use functional cookies for authentication, which are necessary for the Service to work. Beyond those, optional cookies are grouped into two categories and neither is set unless you consent to that category. Analytics cookies from Microsoft Clarity and Google Analytics load only after you grant analytics consent. Advertising cookies from Meta and LinkedIn load only after you grant marketing consent. If you decline a category, its scripts are never fetched. You can change or withdraw your choice at any time through the "Cookie settings" link in the footer or in your account settings.

AvenEU is intended for users aged 18 and above.

The EUri AI assistant provides suggestions only. No automated decisions with legal or significant effects are made about users. The user reviews and accepts or rejects all AI suggestions before any content is used or submitted.

Business and enterprise customers who require a Data Processing Agreement under Article 28 GDPR can request one by contacting info@aveneu.eu.

Users will be notified by email of material changes.

Questions about this policy or your data? Email info@aveneu.eu or visit our Contact page. The Service is operated by AvenEU SRL, Brussels, Belgium.