Privacy Policy

We do not use advertising or analytics cookies on this site. If you email us, we process your name, email address and message to reply to you (legal basis: our legitimate interest in responding to enquiries, Art. 6(1)(f) GDPR), and keep that correspondence for up to 12 months.

Roles. The consultancy or legal practice you are contacting (the “Practice”) is the data controller. Advena acts as the Practice's data processor under a written data-processing agreement, processing your data only on the Practice's instructions.

What is processed. Your phone number and display name, the messages you exchange with the Practice on WhatsApp, and your answers to a short set of questions the assistant asks about your enquiry (for example: which service you need, your preferred language, basic facts needed to route your request). The assistant does not request passport numbers, national ID numbers, home addresses, medical information, document scans or bank statements.

Why. To acknowledge your enquiry, identify the service you need, ask the Practice's initial questions, and route your conversation to the right person with a summary: steps taken at your request before a service agreement (Art. 6(1)(b) GDPR) and in the Practice's legitimate interest in managing enquiries (Art. 6(1)(f)). The lawful basis is determined by the Practice as controller.

What the assistant does not do. It does not give legal or immigration advice, assess eligibility, answer case-status or document questions, or make decisions about your matter. Those are always handled by a person at the Practice.

You are talking to an assistant. The assistant identifies itself as an assistant in its first message. When a person at the Practice replies, the assistant stops responding in that conversation. You can ask for a human at any time.

Who receives your data. The Practice, and the service providers needed to run Advena: WhatsApp (Meta Platforms Ireland Ltd) for message transport; Fly.io (application hosting, EU region); Supabase (database and file storage, EU, Frankfurt region); and Anthropic (language-model processing of minimised message excerpts to classify and summarise conversations), under a data-processing agreement with standard contractual clauses and no use of your data to train models. Your data is not sold and is not used for advertising.

How long. If you do not become a client of the Practice, your enquiry data is deleted no later than 90 days after your last message (6 months if you were qualified for a service but did not proceed). If you become a client, retention follows the Practice's own policy. Security logs are kept for up to 12 months and contain no message content.

Your rights. You may request access, correction, deletion, restriction, or a copy of your data, or object to processing: send the message “DELETE MY DATA” in the chat for deletion, or email admin@getadvena.com for any request; we forward requests to the Practice and assist with the response. See how to delete your data for details: getadvena.com/policies/data-deletion — you may also complain to a supervisory authority (in Poland: Urząd Ochrony Danych Osobowych, uodo.gov.pl).

Security. Data is encrypted in transit and at rest, hosted in the EU, isolated per Practice, and accessible only to named team members. The assistant can be disabled on a Practice's number within minutes.

Changes. We will post updates to this page with a new “last updated” date.