Privacy Policy

AVQ Muse is an enterprise creative automation platform operated by AveQue ("we", "us", "our"). This Privacy Policy describes how we collect, use, disclose, and safeguard information about your organization and its authorized users when you access AVQ Muse through our web dashboard or Figma plugin.

AVQ Muse is an invite-only enterprise product. There is no public signup. All users are onboarded through an authorized organizational administrator under a formal enterprise agreement.

Account and Identity Data

• Name and corporate email address (provided at invite)
• Encrypted password credentials (you create these; we never store plaintext passwords)
• Role assignment within your organization (Super Admin, Org Admin, Manager, or Designer)
• Organization membership and team assignments

Usage and Activity Data

• Banner generation events (template used, status, timestamp)
• Asset access logs (which product images or brand assets were loaded)
• Plugin login events and session activity
• Dashboard access timestamps

Organization Configuration Data

• Brand templates, fonts, and naming conventions configured by your organization admin
• Asset library references (URLs, file identifiers — not the asset files themselves unless explicitly uploaded)
• Organization-specific settings and preferences

• To authenticate users and enforce role-based access control
• To load your organization's configuration into the Figma plugin upon login
• To generate and track banner creation events for reporting and analytics
• To send password reset and account invite emails
• To provide account support to authorized administrators
• To detect and prevent unauthorized access or abuse
• To maintain audit logs as required by your enterprise agreement

We do not sell, rent, or share your personal data or organization data with third parties for marketing purposes.

Each organization on AVQ Muse operates in a completely isolated environment. Your organization's users, templates, assets, analytics, and banner history are logically and technically separated from all other organizations on the platform.

Organization-level isolation is enforced at the authentication layer, API level, and database level. No user of Organization A can ever access, view, or query data belonging to Organization B, and vice versa.

• All data is transmitted over encrypted connections (TLS/HTTPS)
• Passwords are hashed using industry-standard algorithms and are never stored in plaintext
• Authentication tokens are cryptographically signed and expire on logout
• Access to production infrastructure is restricted to authorized AVQ personnel
• Audit logs capture all administrative actions for accountability
• Data is stored on infrastructure with physical security controls and access monitoring

We retain account data for the duration of your organization's active subscription with AveQue. Upon termination of an enterprise agreement:

• User accounts are deactivated immediately
• Organization data is retained for 30 days to allow export if requested
• After 30 days, data is permanently deleted from our systems
• Audit logs may be retained for up to 12 months for compliance purposes

AVQ Muse uses backend infrastructure services to operate the platform. These services process data on our behalf under confidentiality agreements and are not permitted to use your data for any purpose other than providing services to AveQue. We do not disclose the specific providers publicly but will share this information with enterprise clients upon request as part of our due diligence process.

Authorized Organization Admins may contact us to:

• Request an export of organization data
• Request deletion of user accounts within their organization
• Request correction of inaccurate account data
• Request access to audit logs for their organization

To exercise these rights, contact: [email protected]

AVQ Muse uses browser local storage (not cookies) to:

• Store your authentication token during an active session
• Remember your UI theme preference (dark/light mode)

We do not use tracking cookies, analytics cookies, or advertising cookies. The Figma plugin similarly stores only your authentication token locally, which you can clear by logging out.

We may update this Privacy Policy from time to time. We will notify Organization Admins of material changes via email at least 14 days before the changes take effect. Continued use of AVQ Muse after the effective date constitutes acceptance of the updated policy.

For privacy-related inquiries, please contact: