Privacy Policy

Last updated: August 21, 2026

AvastorX is a cloud backup service from Oyen Digital, a Minnesota, USA company. This policy describes what we collect when you use AvastorX, where it is stored, and how it is retained and deleted.

What we collect

• Account information. Your email address, an optional display name, and your password. Passwords are stored only as a bcrypt hash — we cannot read them.
• Your files. The files you back up or upload, together with their metadata (names, sizes, types, checksums, timestamps) and, for images and video, thumbnails and previews we generate so you can browse your library.
• Desktop app data. To run backups, the desktop app records your computer's name, the names and capacities of drives you back up, the folder paths you choose as backup sources, and logs of backup runs.
• Sign-in and security data. Each signed-in session records your IP address, approximate country, and browser or app identifier, so you can review and revoke your devices from Settings. Failed sign-in attempts are recorded (IP address plus a hashed identifier) for rate limiting and are automatically deleted after about an hour.
• Billing data. If you purchase storage, we store your Stripe customer and subscription identifiers and invoice summaries (storage used and amount charged). Your card details are collected and held by Stripe — they never touch our servers and we store no card numbers.
• Activation data. Redeeming a drive activation card links that serial number to your account. Activation codes are stored only as a bcrypt hash.
• Sharing data. If you share files or request files from someone, we store the link settings you choose and, if you provide them, the recipient's email address and your message. Downloads of a shared file are counted; we do not record the identity of people who download from your links.

Cookies and tracking

AvastorX uses one essential cookie: a session token that keeps you signed in (up to 90 days if you choose "keep me signed in", otherwise 1 day; HTTP-only). During early access an additional short-lived site-access cookie is used. Your theme preference is kept in your browser's local storage. We run no advertising and no third-party analytics — there are no tracking scripts or pixels in the product. The landing page loads its fonts from Google Fonts and the oyendigital.com content network, which receive standard web-request data (such as your IP address) when the fonts load.

Where your data lives

Everything is stored in the United States: your files in Backblaze B2 cloud storage (US East region), account and metadata records in a managed PostgreSQL database hosted by Supabase on AWS (Ohio), the application on Vercel, and background processing on Fly.io (Virginia).

Encryption

Every transfer between your devices and AvastorX, and between AvastorX and cloud storage, runs over an encrypted TLS connection. Files are stored encrypted at rest with AES-256 (server-side encryption on the storage bucket).

Service providers

AvastorX sends your data only to the providers that run the service: Backblaze (file storage), Stripe (payments), Resend (transactional email delivery), Vercel (hosting), Supabase (database hosting), Fly.io (background processing), and Inngest (background job coordination). We send transactional email only — account verification, password reset and password-change notices, share and file-request notifications, and download notifications — from noreply@oyendigital.com.

Retention and deletion

• Files you delete go to Trash and are permanently purged after your chosen retention period (10 or 30 days), or immediately if you empty the trash yourself. Purging removes both the database records and the stored objects.
• File version history is kept by count (your setting of 0, 2, 4, or 10 versions per file), not by time; older versions past the cap are removed, and versions are deleted along with their file.
• You can delete your account from Settings. This removes your files, folders, shares, entitlements, sessions, and account record from our systems.
• Resetting your password signs out every session on every device.

Your controls

From the app you can review and revoke signed-in devices, set your trash retention and version-history preferences, revoke any share link instantly, manage billing through the Stripe customer portal, and delete your account.

Contact

AvastorX is built and operated by Oyen Digital. You can reach us through the contact options at oyendigital.com.

Back to avastorx.com · Terms of Service