Your Data, Held in Confidence.

When you engage with Aven Advisors and the FEQ Assessment platform, we collect the information you provide directly: your name, professional email address, company affiliation, and the responses you submit through the diagnostic questionnaire.

We may also collect technical information about your interaction with our platform, including device type, browser, IP address, and session activity. This data is used solely to ensure the integrity and performance of the assessment environment.

Your information is used exclusively to deliver the FEQ Assessment service: generating your diagnostic report, providing multi-stakeholder aggregation for company-level insights, and communicating your results and advisory recommendations.

We do not sell, license, or share your personal information with third parties for marketing or commercial purposes. Aven Advisors operates as a fiduciary in matters of data stewardship, consistent with our obligations to our clients.

Individual assessment responses are aggregated and anonymized before inclusion in any company-wide report. No individual respondent's answers are attributable by name in shared results — only the collective synthesis is surfaced to designated account holders.

Owners and administrators of an enterprise account are able to view aggregate, anonymized scores. They are not granted access to individual-level response data under any circumstances.

We employ bank-grade encryption standards for data in transit and at rest. Our infrastructure is hosted on enterprise-class cloud platforms with SOC 2 compliance, regular security audits, and role-based access controls limiting internal access to authorized personnel only.

In the event of a data incident, we will notify affected clients promptly and in accordance with applicable law, providing full transparency on scope, impact, and remediation steps taken.

Assessment data is retained for the duration of your engagement with Aven Advisors and for a period of five years thereafter to support longitudinal analysis and advisory continuity. Upon written request, we will delete your personal data in accordance with applicable law.

Anonymized, aggregated statistical data derived from assessments may be retained indefinitely as part of our research methodology, as it is no longer attributable to any individual or enterprise.

Your assessment progress is not tied to a cookie or an authenticated session. It is tied to the unique, private link (token) sent to your email — that link is what identifies your assessment as you move through it.

We do use a small number of functional cookies: a signed-in session cookie for Aven Advisors staff accessing the admin dashboard, and, while the platform is in pre-launch, a preview-access cookie that grants early visibility to invited reviewers. We do not use advertising cookies, cross-site tracking technologies, or analytics cookies of any kind.

You may disable cookies in your browser settings; however, doing so will prevent Aven Advisors staff and pre-launch reviewers from signing in, and will not affect your ability to complete an assessment through your private link.

We rely on a small number of trusted service providers to operate the platform: Google Cloud / Firebase for application hosting and our database, Resend for delivering transactional email (such as assessment invitations and results notifications), and Cloudflare for bot protection (Turnstile) on our forms.

Each provider processes data solely to perform these functions on our behalf and is bound by its own data protection obligations. We do not permit these providers to use your data for their own marketing or analytics purposes.

For questions regarding this Privacy Policy, data access requests, or data deletion inquiries, please contact our Data Governance team at privacy@avenadvisors.com. We respond to all inquiries within five business days.

Aven Advisors is committed to resolving privacy concerns promptly and transparently. If you believe your privacy rights have not been honored, you have the right to contact the relevant data protection authority in your jurisdiction.