Exercise your rights
Who we are
AEVI Data LLC ("AEVI Data", "we", "us") operates aevidata.com. We are a data broker: we sell personal information about consumers we do not have a direct relationship with. We are not a consumer reporting agency and do not provide data for decisions about credit, insurance, employment, or housing.
Notice at collection
The table lists the categories of personal information that may appear in datasets we license. Each category is sold to business customers for the purposes described in How we use and disclose it, and kept for the periods in Retention and security.
| Category | Examples | Sources | Sold or disclosed to |
|---|---|---|---|
| Identifiers | Name, postal address, email address, phone number | Data providers, public records | Business customers, service providers |
| Professional information | Employer, job title, business contact details | Data providers, published business information | Business customers, service providers |
| Characteristics and demographics | Age range, household composition, homeownership | Data providers | Business customers, service providers |
| Commercial information and inferences | Purchase interests, modeled preferences and segments | Data providers | Business customers, service providers |
Where data comes from
We license data from established marketplaces, including AWS Data Exchange, Datarade, and Snowflake Marketplace, and directly from data providers. Providers collect it from sources such as public records, published business information, and consumer-facing services that disclose sharing at the point of collection.
Before a dataset with personal information is offered for sale, we record the provider, how the data was collected, the consent or legal basis the provider relies on, and whether the provider's license allows resale. Datasets that cannot meet these checks are not resold.
How we use and disclose it
- Sale to business customers for marketing, audience analysis, business development, market research, and fraud prevention, under a written data license agreement and our acceptable use policy.
- Service providers that host and process data on our behalf under contract, including Amazon Web Services (data storage) and Vercel (website hosting). They may not use the data for their own purposes.
- Legal reasons, when required by law, legal process, or to protect the rights and safety of others.
- Compliance, including honoring opt-outs and deletion requests and keeping the records the law requires.
Every buyer must identify their organization, describe their intended use, and agree that they will not:
- use the data to determine anyone's eligibility for credit, insurance, employment, or housing;
- transfer it to, or allow access by, anyone in a country restricted under U.S. bulk sensitive data rules; or
- contact people without following the consent rules for calls, texts, and email.
Sensitive information
We do not knowingly buy or sell precise geolocation, health, biometric, or genetic information about identifiable individuals, Social Security or financial account numbers, or information about a person's racial or ethnic origin, religion, sex life, sexual orientation, citizenship, or immigration status. Mobility data we license is aggregated so that no individual device can be followed.
This website
When you submit a form, we collect what you enter: your name and contact details, and, if you are a buyer, your company, country, and intended use. We use it only to answer you and to keep a record of the request. We do not sell or share information collected through this website.
This website uses no advertising, analytics, or third-party tracking cookies. The only cookie is a session cookie used to sign in to our internal back office. Because we do not sell or share website visitor data, browser opt-out signals such as Global Privacy Control have nothing further to stop here; to opt out of our datasets, use the opt-out form.
Your rights
Residents of California, Colorado, Connecticut, Oregon, Texas, Virginia, and other states with consumer privacy laws have rights over their personal information. We extend the following to everyone, wherever you live:
- Know and access: the categories and specific pieces of personal information we hold about you, where they came from, and who we sold them to.
- Delete: have your personal information removed from our datasets.
- Correct: fix information that is inaccurate.
- Opt out: stop the sale or sharing of your personal information, including for targeted advertising.
- Non-discrimination: we will not treat you differently for using any of these rights.
Making a request
Use our privacy request form. We confirm receipt immediately and respond within 45 days. If we need more time, we will tell you why, up to the additional period the law allows.
- Opt-outs take effect as soon as you submit and do not require identity verification.
- Access, deletion, and correction requests are verified by matching the details you give us against the details we hold. We never ask for more information than we need to verify you, and we use it only for verification.
- Authorized agents may submit requests for you. We will ask for proof that you authorized them, and may ask you to confirm your identity directly.
- Appeals: if we decline your request, you can appeal by submitting the form again and writing "Appeal" with your reference number in the details field. We respond to appeals within 60 days. If you are not satisfied, you may contact your state attorney general.
California residents can also send one deletion request to every registered data broker through the California Privacy Protection Agency's Delete Request and Opt-out Platform (DROP). We process DROP requests on the schedule the law requires.
How opt-outs and deletions work
When you opt out or we delete your information, we add a one-way hash of your email address and phone number to a suppression list. We check every dataset and every delivery against that list, including data we buy later, so you are not added back by a new source. The hash cannot be turned back into your contact details.
State notices
Texas
The entity maintaining this website is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website. Texas residents may exercise their rights under the Texas Data Privacy and Security Act using the privacy request form above.
California
AEVI Data is a data broker under California law. In the past 12 months, we have sold the categories of personal information listed in the notice at collection to business customers. We do not offer financial incentives for personal information. Under California's "Shine the Light" law, you may ask which third parties received your personal information for their direct marketing; use the request form and choose "Tell me what you hold about me".
Vermont and Oregon
AEVI Data is a data broker under Vermont and Oregon law and honors the same rights for residents of those states.
Nevada
Nevada residents may opt out of the sale of covered information using the opt-out form.
Request metrics
California law requires data brokers to publish, by July 1 each year, the number of access, deletion, and opt-out requests received in the previous calendar year, how many were complied with or denied and why, and the median and mean days to respond. AEVI Data began operating in October 2026. Our first report, covering 2026, will be published on this page by July 1, 2027.
Retention and security
- Licensed datasets are kept only for the term of our license from the provider and deleted after it ends.
- Records of privacy requests are kept for at least 24 months, as California regulations require.
- Suppression entries are kept indefinitely so opt-outs and deletions stay in effect.
- Buyer request records are kept for the life of the customer relationship plus the period needed for legal and tax obligations.
Data is encrypted at rest and in transit, access is limited to the people who need it, and administrative actions are recorded in an audit log. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.
Children
We do not knowingly buy, sell, or share personal information about anyone under 16. If we learn that a dataset contains such information, we remove it.
Changes and contact
We review this policy at least once a year and update the date at the top when it changes. For questions about this policy, use the privacy request form and describe your question in the details field, or reach us through our contact page.