Collaboratory's Privacy Policy

Last Updated: July 29, 2025

At Avviato, Inc. (“Avviato”), we are committed to supporting community engagement through our online software solutions, including, but not limited to, Collaboratory and LlamaSite. Our platforms are designed to help organizations organize, report, and track their work, engagement, impact, and collaborations.

We understand that your privacy is important. Any information or data collected through our services is used solely to support and enhance the work you do and is limited to the purposes for which Avviato has been engaged.
 
This Privacy Policy explains how we collect, use, and disclose information through our websites and services, as well as any personal data obtained from our social media platforms. Please note that this policy does not apply to third-party websites or services that may be linked to or recommended by our platforms or staff.
 
We encourage you to read this Privacy Policy carefully to understand how we handle your personal data and to learn about your rights and choices regarding your information.
 
 
By submitting personal data to Avviato and/or by using our website, you give your consent that we may process all personal data submitted by you in the manner and for the purposes described below.
 
If you do not want Avviato to process your personal data, please do not provide it. However, note that you may not be able to fully utilize our software and services as a result.
 
 
1. Personal Data Avviato Collects Directly from You
Avviato collects personal data when we market our software and services, interact with our users, store users’ data, and provide our software and services. For example, Avviato may collect personal data from you when you request a demo or evaluation, sign up for newsletters, enter promotions, interact with us on our social media channels, order software and services, submit content, or send us feedback. When you sign up for an account, Avviato may collect your name, email address, user name, password, alternative forms of payment, address book information for individuals or organizations with whom you may choose to volunteer, your hours spent volunteering, and other details that you choose to maintain in your account. Avviato may also collect any personal data you share with Avviato through online forms, email, facsimile, live chat, telephone, or social media channels.
 
When you submit personal data, you are transferring such personal data into the United States, and you hereby consent to such transfer.
 
 
2. Personal Data Avviato Collects from Other Sources
Avviato may collect information about you from other sources, including third parties, and combine this information with the personal data you provide. This helps us to update and expand our records, offer services that may be of interest to you, and identify potential new customers. In particular, Avviato may collect business contact information, including mailing address, job title, email address, phone number, and social handles.

Avviato may also collect personal data about you from public sources, such as news sites or social media platforms, or private sources, including direct interactions with other users. This allows our users to track collaborations and volunteer work. Avviato may add this personal data to the information Avviato collects on you.
 
In some cases, Avviato is provided with personal data from an organization that uses Single Sign-On (SSO) services with us. This allows us to create and provision accounts, enabling organizational login credentials to be used for signing into our services without the need for individual account creation. This data can include name, title, job function, business name, business address, business e-mail address, business phone number, and/or electronic signatures.
 
 
3. Device and Usage Data
a. Log files. As is true of most websites, Avviato gathers certain information automatically and stores it in log files. This information includes Internet Protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data.
b. Software and services use. Avviato may use technologies to automatically collect personal data from you when you use our software and services, including how you use our software and services and your search queries. Avviato collects this personal data to provide you with information and to perform benchmarking based on users’ usage of the software and services.
c. Device information. Avviato collects personal data about the device you use to access our website and our software and services, including the hardware model, operating system and version, unique device identifiers, and mobile network information. Avviato may associate your device identifiers and phone number with the account(s) you open with us.
d. Location information. When you use our software and services, Avviato may collect and process personal data about your actual location. Avviato may use IP addresses, beacons, GPS, and other sensors that provide information about nearby devices, Wi-Fi access points, and cell towers.
e. Local storage of information. Our Software and Services may collect and store personal data locally on your device, including browser web storage, local drive storage, and application data caches.
 
 
4. Use of AI-Powered Features
Avviato software, such as Collaboratory and LlamaSite, offers optional AI-powered features to assist with data entry, discovery, and reporting. These features may process information submitted by users or sourced from public websites to generate summaries, suggestions, or structured content.
 
Third-party service providers, including OpenAI, power these features. Avviato does not use customer data to train third-party models. Per OpenAI’s enterprise policies, prompts and outputs are not used to improve OpenAI’s systems. Avviato may retain user inputs and AI-generated outputs internally for quality review, feature refinement, and institutional support.
 
Institutions may choose to opt out of AI-powered features at any time by contacting support@cecollaboratory.com for users of our Collaboratory product and support@avviato.com for all others. Institutions may also request deletion of data generated by these features, subject to any legal or operational limitations.
 
 
5. Use of APIs
Collaboratory offers institutions access to an API to facilitate the secure exchange of data between Collaboratory and institutional systems. Personal data shared via the API is handled in accordance with this Privacy Policy and applicable agreements. Institutions control the data they transmit or retrieve and are responsible for managing access to their API credentials.
 
 
6. Cookies and Other Tracking Technologies
Avviato or service providers working on Avviato’s behalf may use technologies such as cookies, beacons, tags, and scripts to analyze trends, administer the software and services, track users’ movements around the website, and gather demographic information about our user base as a whole. Avviato may receive reports based on the use of these technologies by these companies on an individual and aggregated basis. Avviato uses cookies to help us provide you with a more personalized experience.
 
Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our website; however, please note that you may not be able to fully utilize our software and services as a result.
 
 
7. How Avviato Uses the Information Avviato Collects
Avviato may use personal information to provide the services you’ve requested, including services that display customized forms, documents, reports, and newsletters. Avviato may also use personal information for auditing, research, and analysis to operate and improve our website and services. Avviato may use your personal data to inform you about our software and services and to otherwise perform marketing activities.

Avviato may use third parties to assist us in processing your personal information, and Avviato requires that such third parties comply with our Privacy Policy and any other appropriate confidentiality and security measures. Avviato may use certain other information collected from you to help diagnose technical problems, administer our website, and improve the quality and types of services delivered.

Avviato may also share your personal data with third parties who conduct marketing studies and data analytics on our behalf and perform advertising services. These third parties may combine your information with that of other consumers for the purpose of conducting these studies and/or analytics. For instance, Avviato uses Google Analytics to analyze site traffic on our website, including the gender, age, and interests of visitors, and adapt our content to better reflect their needs. Although this information is collected through your Google Ad Settings, it is not provided to us in a personally identifiable format.

You may nevertheless opt out of the Google Analytics reporting features by following the instructions at this link: https://tools.google.com/dlpage/gaoptout/.
 
Any information Avviato collects is not shared with or sold to other organizations for commercial purposes, except to provide products or services you’ve requested, when Avviato has your permission, or under the following circumstances:
  • As required by law, such as to comply with a subpoena, legal proceedings, or similar legal process.
  • When Avviato believes in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
  • In certain situations, Avviato may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
  • To investigate potential violations of Avviato’s Acceptable Use Policy.
  • To any other third party with your prior consent to do so.
  • If Avviato is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

Avviato may also use your personal data to deliver enhanced functionality through AI-powered features or to facilitate secure and automated data transfer via API. When doing so, we rely on sub-processors such as OpenAI that are contractually obligated to handle your data according to strict confidentiality and security requirements.

 

8. “Do Not Track” Requests
Your internet browser and mobile device may allow you to adjust your browser settings so that “do not track” requests are sent to the websites you visit. Avviato does not process “do not track” (DNT) signals. Our third-party service providers also may not respond to DNT signals.

 

9. Third-Party Websites and Service Providers
Our website may include links to other websites whose privacy practices may differ from those of Avviato. If you submit personal information to any of those sites, your information is governed by their privacy policies. Avviato encourages you to read the privacy policy of any website you visit carefully.

In addition, certain features within our software and services may rely on third-party service providers to process data on our behalf. For example, we may use providers such as OpenAI to enable AI-powered functionality, including the generation of summaries or insights from public or user-submitted content. These service providers are contractually obligated to use your information only as necessary to deliver services to Avviato and must adhere to strict confidentiality and data security standards.

These providers do not have permission to use your information for their own commercial purposes. Avviato does not sell or otherwise share your personal information with third parties except as described in this Privacy Policy.

 

10. Social Media Features
Our software and services may include social media features or provide direct links to our social media channels. These features may collect your IP address and the page you are visiting on our site, and may set a cookie to enable the feature to function properly. Avviato may also link to our software and services from within social media, allowing you to access and further share our software and services, and post to other websites using your social media login credentials. Social media features and widgets are either hosted by a third party or hosted directly on our software and services. Your interactions with these features are governed by the privacy policy of the company providing them.

 

11. Preferences and Opting Out
Our software and services offer users the option to opt out of receiving specific types of communications from Avviato. Suppose you have previously signed up to receive information about our software and services. In that case, you may unsubscribe or opt out of all future marketing communications from us that do not relate to software and services you have already accessed by sending an email to support@aavviato.com or by clicking the unsubscribe link on any email marketing communication you receive.

 

12. Accessing and Updating Personal Data
Upon request, Avviato will provide you with information about whether Avviato holds, or processes on behalf of a third party, any of your personal information. When you use our website or services, Avviato makes good faith efforts to provide you with access to your personal information and either to correct this data if it is inaccurate or to delete such data at your request if it is no longer needed for legitimate business purposes. You can update your account information by logging in to your account. When requests are made to Avviato regarding personal information, Avviato requires individual users to identify themselves and the information they wish to access, correct, or have removed before processing such requests. Avviato may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup tapes), or for which access is not otherwise required. Avviato retains and uses your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. In any case where Avviato provides information access and correction, Avviato performs this service free of charge, except if doing so would require a disproportionate effort. Avviato will respond to these requests within a reasonable timeframe. Avviato will retain your information for as long as your account is active or as needed to provide you with services.

Avviato will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

 

13. Family Educational Rights and Privacy Act
Use of our website does not affect your rights under the Family Educational Rights and Privacy Act (“FERPA”). Pursuant to FERPA, any school that receives funds under an applicable program of the U.S. Department of Education is required to protect the privacy of student education records. In a nutshell, FERPA requires schools to obtain written permission from parents or students prior to disclosing a student’s records. However, certain exceptions allow schools to disclose information internally, and for certain specified reasons, without obtaining consent. For more information on FERPA, please visit http://www.ed.gov/policy/gen/guid/fpco/ferpa/index.html.

Avviato maintains strict standards with regard to personally identifiable information about students (“Student PII”) to ensure compliance with FERPA. Avviato will not share or sell FERPA-protected information, or re-use it for any other purposes, except as directed by you or permitted by FERPA. In addition, Avviato has implemented security policies and procedures reasonably designed to protect Student PII from inappropriate disclosure, destruction or modification. Avviato staff have been specifically trained to ensure the security and confidentiality of such records. If you believe Student PII contained on our website is incorrect or inappropriately displayed, or if you would like to gain access to Student PII stored on our website belonging to you or your children, please email us at support@avviato.com.

 

14. Data Provided by Educational Entity
Notwithstanding anything in this Privacy Policy to the contrary, the following provisions shall apply to data of whatever type provided directly by an educational agency (“Educational Entity Data”), school, or university (each an “Educational Entity”). All Educational Entity Data containing Student PII or records that were the property of the student prior to its transfer to our website shall continue to be the property of the student under the control of the Educational Entity.

Avviato will hold all Educational Entity Data in the strictest confidence and will not disclose any such data except as provided in any agreement between the Educational Entity and Avviato or in connection with a qualified research project or scholarly pursuit. In addition, Avviato will notify any Educational Entity in writing (to the extent legally permissible) prior to the disclosure of any Educational Entity Data required by a court of competent jurisdiction or an administrative body

Avviato will not transmit or store Educational Entity Data outside the United States without the consent of the Educational Entity. All Education Entity Data will be stored, processed, and maintained solely on designated target servers. At no time will such data be processed on or transferred to any portable or laptop computing device or any portable storage medium, unless that storage medium is in use as part of our backup and recovery processes.

Avviato will use Educational Entity Data solely for the purposes expressed in any agreement between the Educational Entity and Avviato or for research and purely scholastic endeavors. Such Data will not be distributed, repurposed, or shared across other Avviato applications, environments, or business units. In addition, except in the case of research and purely scholastic endeavors, Educational Entity Data will not be transmitted, exchanged, or otherwise passed to other vendors or interested parties except on a case-by-case basis as specifically agreed to in writing by the Educational Entity.

In the event of an unauthorized release of Educational Entity Data that requires notification of the affected individuals, Avviato shall assume responsibility for informing all such individuals in accordance with applicable law.

 

15. California Privacy
If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your Personal Data by Avviato or its affiliates to a third party for the third party’s direct marketing purposes. To make such a request, email us at support@avviato.com.

The California Consumer Privacy Act (CCPA), as amended, requires us to disclose how we handle your Personal Data. We do not sell your Personal Data.

We may share certain Personal Data (such as identifiers and internet activity) with authorized partners and service providers to collect Personal Data under strict contractual limits, or when you direct us to do so.

For our business operations (e.g., security, marketing, support), we may disclose the following categories of Personal Data:

  • Identifiers
  • Commercial information
  • Internet activity information
  • Financial information
  • Professional and employment-related information
  • Education information
  • Geolocation data
  • Audio and visual data
  • Limited protected characteristics (where allowed by law)
  • Inferences drawn from the above

 

16. Compliance with the Children’s Online Privacy Protection Act
As a business service, Avviato does not target its software or services toward, and does not knowingly collect any personal data from, users under 13 years of age.

 

17. Security
Avviato takes reasonable and appropriate measures to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into due account the risks involved in the processing and the nature of the personal data. However, no method of transmission over the internet or method of electronic storage, is 100% secure. Therefore, Avviato cannot guarantee its absolute security. Avviato has put in place procedures to deal with any suspected breach of personal data, and Avviato will notify you and any applicable regulator of a breach where Avviato is legally required to do so. If you have any questions about our security, please contact us at support@avviato.com.

 

18. Privacy Policy Changes
Avviato may update this Privacy Policy to reflect changes to our privacy practices. If Avviato makes any material changes, Avviato will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this website before the change becomes effective. Avviato encourages you to periodically review this page for the latest information on our privacy practices.

 

19. How You May Contact Us
If you have any questions or concerns regarding this Privacy Policy, please email us at support@avviato.com.

 

Processing...
Thank you! Your subscription has been confirmed. You'll hear from us soon.
Connect with Us!
ErrorHere