Data Protection Policy

1. Policy Overview

AVYRO maintains comprehensive safeguards and governance measures to protect personal, professional, and organizational data across its platform. Our goal is to provide clients with operational efficiency while upholding user data rights and privacy.

2. Data Collection & Processing
  • Data is collected based on relevance to platform functionality – recruitment, onboarding, HR documentation, productivity, and payroll.

  • Information is only processed upon a valid legal basis: consent, contract, legal obligation, or legitimate interest.

3. Data Storage and Retention
  • Secure Cloud Environments: Hosted in data centers with redundant backup and geo-fencing

  • Data is retained only for the minimum duration necessary for business or legal purposes, after which it is securely purged.

4. Security Measures
  • AES 256-bit encryption in transit and at rest

  • Daily integrity checks and automated vulnerability patching

  • Zero trust architecture with routine third-party penetration testing

5. Data Subject Rights

Users and clients may:

  • Access their data through dashboards or upon written request

  • Modify or correct errors in personal details

  • Revoke previously granted consent

  • Request account and data deletion unless legal retention applies

6. Third-Party Processing & Transfers
  • Data shared with partners or service providers includes binding contractual clauses

  • Cross-border transfers are governed by approved safeguards such as Standard Contractual Clauses.

7. Breach Response
  • Breaches are managed via our Incident Response Plan

  • Stakeholders receive detailed breach reports within the 72-hour regulatory timeframe

8. Contact Information

For questions or concerns regarding this policy, please contact us at info@057.b18.myftpupload.com.