avenTelli Testing — interim privacy notice

Interim privacy notice — for testing, under legal review

avenTelli Testing (the test platform) Aventelli Group · 6 Nov 2026 (updated) · Questions: privacy@aventelli.com

This temporary notice says what avenTelli Testing, run on Amazon Web Services in Ohio, US, does today. Use made-up details only. This is not an emergency line: in an emergency, call your local emergency number.

Your account

You sign in with your email, a password and, if your account uses one, a two-step code from an authenticator app (admin and staff accounts must). The first time, you use an invite code or your Telli tester key; we check a key with Telli once and never store it. While we switch over, signing in with a Telli key alone may still work.

Email

no-reply@aventelli.com sends your sign-up code, password-reset code, a note if someone tries to make a second account with your address, and a note when your two-step sign-in is changed or reset or a recovery code is used (it never contains a code), through Amazon SES (Ohio, US). Our email is in Amazon's starter mode: it reaches only addresses registered with Amazon first, so we register yours and Amazon emails you a link to confirm it (it stays registered with Amazon until we remove it). Invite codes are not emailed; the person who invites you passes yours on. When set up, team alerts and digests go the same way: urgent alerts hold no report text; digests list tester ticket numbers and titles, and customer reports only as counts. We send no marketing.

Tester profile

You can add and change your country, languages, devices and how you joined. We use this to match you with test cases, including "Give me a 5-minute case". We take no payment details. "Notify me" stores only you and the product.

Runs

Each run records the case, build, your tester id, platform, device, browser (filled in for you as, for example, "Chrome 130 on Android", and you can change it; if you leave it empty we keep your browser's own description, up to 160 characters), step results and notes, the result, active time and pauses, the conditions (your "weak signal" tick, phone or computer, screen size, and the connection type and speed where your browser says it), and Telli's figures (time, cost, tokens; never conversation text). Other testers see only the case, build, result, times and counts of your runs, not your tester id, notes, device, browser or conditions.

From Telli's test-run banner

Switched on for admins only today. Telli's steps panel and "Capture & report" send step results, notes, the final result, conditions, reports and screenshots, and, only if you choose to share it with a report, an excerpt of the conversation (up to 4,000 characters, masked), from your browser straight to us; Telli's server never sees them. We mask the text again before storing it (emails, phone and long numbers, addresses, some names), keep only your browser family, screen size, colour theme and language, and drop your country setting. Screenshots are not masked.

Saved on your device

While you type in a form, this browser tab keeps what you typed for up to 30 minutes so nothing is lost if the form closes (never passwords or codes; cleared when you save, discard or sign out; it is not sent to us). With no signal, the bench page keeps step results, finishes, notes and reports (with pictures) in this browser until they are sent: up to 7 days, then listed for you to copy; anything that fails to send is removed 7 days later. Sign out warns you, then deletes them from the device.

Tickets and screenshots

A ticket holds what you write, plus the case, step, run, device and browser. You, leads and admins can see it. Screenshots (up to 3 per ticket): we make them smaller (at most 1600 pixels) and strip hidden details such as camera and time data, but not what the picture shows, so blur private things first. "Whole screen or window" can capture other apps. Pictures are stored privately, encrypted, and deleted after 90 days, and open through 5-minute links only for people who may see the ticket.

Suggestions

Named suggestions show your name to admins. An anonymous one stores no account, name, email, internet address, browser or exact time, only the date. A daily-changing tag, gone within two days, limits how many you send. A private follow-up code, stored scrambled, lets you read replies. Anonymity cannot hide your writing style, details only you know, or timing on a quiet day. The storage service keeps the exact time a screenshot file was saved, and our server logs note that a suggestion was sent, and when, without your name, for 30 days. Wording that suggests an emergency or misconduct is flagged urgent for our team; any alert carries no text or sender.

The Telli assistant

Switched off. When on, your question and bench context (guide, open case, round status, approved help notes) go to a test copy of Telli, which uses the outside services in notice A.

Phone line and voicemail

Not live yet. When live, callers will hear that calls may be recorded. Amazon Transcribe turns voicemails into text. Recordings and transcripts are deleted after 90 days. For outage calls, the last 4 digits of your number are kept for one hour. A ticket made from a voicemail also drops its transcript and your number after 90 days.

Who can see what

Keeping and deleting

Accounts, runs, tickets, suggestions and the audit log have no end date yet; we are deciding how long to keep them. To have your data removed, write to privacy@aventelli.com. An admin then disables your account and clears your details, profile, settings and two-step codes; clears notes, device and conditions from your runs (results stay); and removes your name from tickets and named suggestions (open tickets keep masked text needed for a fix; closed ones lose the text). The record shows that it was done and how many items, not what. We then delete your Cognito account by hand. Screenshots still end after 90 days. Removed access stays on record. The database is backed up continuously for 35 days, and a one-off backup was made on 5 Nov 2026 before an upgrade. Server logs (tester id, page, time; no typed text) last 30 days. We are reviewing all of this.