Privacy Policy

Last updated: October 5, 2026

Introduction

Averrow is operated by LRX Enterprises Inc. ("we", "us", "our"), a Canadian company. We are committed to protecting the privacy and personal information of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Averrow platform and related services.

By accessing or using Averrow, you consent to the collection and use of your information as described in this policy. If you do not agree, please do not use our services.

Information We Collect

We collect the following categories of information:

• Account Information: Your name, email address, and company name provided during registration.
• Scan Data: Domains you submit for scanning and the resulting threat intelligence reports. For public (free) scans we do not store the visitor's IP address, city, or coordinates, and we do not send the IP address to any third party for location lookup. At most, we record the approximate country of the request, as provided by Cloudflare from the connection; if the country cannot be determined, nothing is recorded.
• Monitoring Data: Threat feed matches, social media platform checks, and alert history associated with your monitored assets.
• Usage Data: Pages visited, features used, session duration, and interaction patterns collected to improve the platform experience. Your IP address is used only briefly for rate limiting (short-lived records that expire within about two hours) and is not stored with scan or assessment records.

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain the Averrow platform, including running scans, generating reports, and delivering alerts.
• Threat Intelligence: To analyse submitted domains against threat feeds, detect impersonation, phishing attempts, and brand abuse across platforms.
• Platform Improvement: To understand usage patterns, diagnose technical issues, and develop new features that better serve your needs.
• Communications: To send service notifications, security alerts, product updates, and respond to your inquiries or support requests.

Data Retention

• Active Account Data: Your personal information and scan history are retained for as long as your subscription remains active.
• Free Scan Results: Results of free scans are kept for 90 days and then deleted. The results link for a scan works until then.
• Report Requests: If you ask for the report after a free scan, we keep the email address, domain and company you give us until you ask us to delete them or we no longer need them.
• Account Deletion: Upon request, your account and all associated data will be permanently deleted within 30 days. To request deletion, contact us at privacy@averrow.com.

Third-Party Processors

We use the following third-party service providers to operate Averrow:

• Public DNS resolvers: To run a free scan, the domain you enter, and lookalike variations of it, are looked up through public DNS resolvers (Cloudflare and Google). These lookups contain the domain names only, not your IP address or email address.
• Cloudflare: Infrastructure, content delivery network (CDN), and edge compute services. Cloudflare processes requests on our behalf to ensure fast, secure delivery of the platform. Cloudflare also supplies the approximate country of a request.
• Resend: Transactional email delivery, including free-scan reports and confirmations sent to the email address you provide.
• AI Provider: We use an artificial intelligence provider for threat analysis, content classification, and risk scoring. Data shared with this provider is limited to what is necessary for analysis and is processed in accordance with our data processing agreements.

Your Rights

You have the following rights with respect to your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete personal information.
• Deletion: You may request the deletion of your personal information and account data.
• Data Export: You may request an export of your data in a structured, commonly used format.

To exercise any of these rights, please contact us at privacy@averrow.com. We will respond to your request within 30 days.

Canadian Privacy Law (PIPEDA)

LRX Enterprises Inc. complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy legislation. We adhere to the ten fair information principles set out in PIPEDA, including accountability, identifying purposes, consent, limiting collection, limiting use, disclosure, and retention, accuracy, safeguards, openness, individual access, and challenging compliance.

If you believe we have not handled your personal information in accordance with PIPEDA, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, providing additional notice through the platform or via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

LRX Enterprises Inc. operating as Averrow
Email: privacy@averrow.com