Cookie Policy

Effective Date: October 3, 2026 | AevArk, Inc.

What This Policy Covers

This Cookie Policy explains how AevArk, Inc. uses cookies and similar tracking technologies on our website (www.aevark.com) and platform. It describes what these technologies are, why we use them, and your rights to control their use.

1. What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) by websites you visit. They are widely used to make websites function properly, work more efficiently, and to provide information to website owners. Cookies can be “session” cookies (deleted when you close your browser) or “persistent” cookies (stored until they expire or you delete them).

In addition to cookies, we may use similar technologies such as web beacons (also called “pixels” or “tags”), local storage, and scripts.

2. Categories of Cookies We Use

We group what we use into three purposes, and they match the choices in Section 3. Only Essential Services are on by default; Data Analytics and Targeted Advertising stay off until you confirm a choice that turns them on.

2.1 Essential Services

These are required for our website and platform to work, and they cannot be switched off. They include cookies and browser storage that:

• Maintain your login session and authentication state (via Clerk).
• Enable secure payments and transaction processing (via Stripe).
• Remember your privacy choices, and whether you have closed or answered the Aev Insights sign-up.
• Mark a browser tab that has opened an invitation or access link, so that no analytics or recording starts in it.
• Remember interface preferences, such as your layout and which version of the app to show first.
• Ensure the technical security and stability of our platform.

2.2 Data Analytics

These help us understand how visitors use our public pages. We use Google Analytics, which we load only after you switch on Data Analytics. It sets a randomly generated identifier that persists across your visits in order to recognize a returning browser, and records the pages you view, the address you arrived from, your device and browser type, and an approximate location derived from your IP address. We review this information in aggregate; it is not anonymous at the point of collection, and we do not use it to identify you by name. We use this data to:

• Analyze website traffic and user behavior patterns.
• Identify and fix technical issues.
• Improve the structure and content of our website.

Data Analytics also covers session replay with FullStory, described in Section 2.4, and, in your account, the page activity described in Section 2.5.

Leaving it off stops this collection. To withdraw a choice you have already made, use Your Privacy Choices in Section 3. On our public marketing pages it takes effect immediately, with no reload, in the tab where you make the change and in other open tabs of those pages in the same browser. You can also opt out of Google Analytics across every site using Google's browser add-on.

2.3 Targeted Advertising

These are set by our advertising partner and let us measure and target our advertising. They include:

• Meta Pixel (Facebook): Loads on our public marketing pages once you switch on Targeted Advertising, and records that a page was viewed and, if you sign up for Aev Insights, that a sign-up happened. It sends nothing you type or submit, including your email address. Like any advertising pixel it does receive the web address of the page you are on, your IP address and browser details, and — if you reached us from one of our ads — that ad's click identifier, which Meta can match to your Meta account. This allows us to measure advertising performance and deliver relevant advertising. Meta's use of this data is governed by Meta's Privacy Policy.

These cookies may track your activity across different websites. You can also opt out of personalized advertising through Meta's Ad Preferences or the Digital Advertising Alliance's opt-out tool at optout.aboutads.info.

2.4 Session Replay

With your permission, and never before it, we use FullStory to record a replay of your visit. On our public marketing pages it runs only while Data Analytics is switched on. Once we switch the feature on for the signed-in owner and onboarding experience, a replay there will also need a separate permission we ask for in your account, and it stops if either is withdrawn. A replay captures the pages you viewed, where you clicked and scrolled, pointer movement, and text you type into fields that are not excluded. It is a record of your visit, not a usage statistic.

Our public marketing pages include an optional Aev Insights sign-up that asks for your email address. A replay on those pages can include text entered into fields that are not excluded from recording. The signed-in experience also asks about you and your companion. We configure the recorder to hide page text, form fields, and uploaded images by default, showing only the parts of a page we have chosen to reveal, but this masking is a setting, not a guarantee: a value we fail to mark can appear in a replay, and masking does not reach the web address of the page, its title, or information the page sends to our servers. We never call FullStory's identification API, so we do not attach your account identifier to a recording. That does not make the replay anonymous. Your permission covers only the recording described here; it is not permission to record anything this policy says we hide or exclude. Recording also never starts in a browser tab whose address has carried an invitation or access link.

Session replay never runs on our sign-in or sign-up pages, and never inside the professional workspace or its admin surfaces. If you leave Data Analytics off, or withdraw it or your account permission, no further replay is collected, and when a withdrawal takes effect depends on which one you use. Switching off Data Analytics in Your Privacy Choices in Section 3 stops recording immediately in the tab where you make the change, and in other open tabs of our site in the same browser as soon as they receive the change. Withdrawing your account permission stops recording immediately in the tab where you make the change; once it is saved to your account, other open tabs and devices stop on their next load. Withdrawing does not by itself delete replays already collected.

2.5 Account Page Activity

Data Analytics also covers a note of which pages you open in your account. Once we switch it on, and only while Data Analytics is on and you are signed in to your owner account, we note which of these pages you opened: your home page, the overview of a pet's results, and its Pillars, Resiliency and Insights pages. We keep only your most recent visit, meaning the pages you opened within about half an hour of each other, and when it was: not the order you opened them in, how long you stayed, what you clicked, or any result shown. It is kept on our own servers, linked to your account, so our team can see when you last looked at your home or your pet's results and support you. It sets no cookie and is not sent to Google, FullStory or Meta. It is removed after 90 days without a new visit, and deleted with your account.

Switching off Data Analytics stops further recording. It does not by itself delete what is already kept, which you can ask us to delete at privacy@aevark.com. Separately, as part of the service, your account remembers which of your pet's reports you have opened so it can mark new results; that does not depend on Data Analytics.

3. Your Privacy Choices

When you first visit, a notice at the bottom of the page asks about your privacy choices. Choosing Reject All keeps only Essential Services on; Data Analytics and Targeted Advertising stay off. Choosing Accept All switches both on, except Targeted Advertising where your browser sends a Global Privacy Control signal. Customize Settings lets you switch each one on or off. Where you have not yet answered, Customize Settings shows Data Analytics and Targeted Advertising pre-selected so you can accept them in one step, but pre-selected is only a suggestion: nothing is saved and neither is switched on until you press Confirm or Accept All, and closing the settings leaves both off. Targeted Advertising is never pre-selected where your browser sends a Global Privacy Control signal, and an answer you have already given is shown as you gave it. Signing up or agreeing to our Terms is not a choice. Your choice is saved in this browser. You can change it at any time here, from the Your Privacy Choices link in our website footer, or from Cookie choices in your account:

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of Targeted Advertising: Targeted Advertising is switched off in that browser and cannot be switched on while the signal is present. The signal does not change your Data Analytics choice.

You may also control cookies through your browser settings. Most browsers allow you to:

• View and delete existing cookies.
• Block all cookies or only third-party cookies.
• Receive a notification before a cookie is set.

Note that disabling certain cookies may impact the functionality of our website and services. If your browser does not let us save your choices, we tell you your choice was not saved and keep Data Analytics and Targeted Advertising off on the page you are on. Try again, or check that your browser settings let our site store data.

4. Third-Party Cookies

Some cookies on our site are set by third-party service providers. These third parties have their own privacy policies governing their use of cookies. We do not control third-party cookies. Key third parties whose cookies may be present on our site include:

• Google LLC (Google Analytics)
• Meta Platforms, Inc. (Meta Pixel)
• FullStory, Inc. (session replay)
• Stripe, Inc. (payment processing)
• Clerk, Inc. (authentication)
• Typeform S.L. (intake forms)
• Calendly LLC (appointment scheduling)
• Twilio Inc. / SendGrid (communications tracking)

5. Do Not Track

Some browsers include a “Do Not Track” (DNT) feature. Our website does not currently respond to DNT signals, as there is no industry-standard approach to DNT compliance. We do respond to Global Privacy Control, as described in Section 3.

6. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by updating the effective date above and, where appropriate, by displaying a notice on our website.

7. Contact Us

If you have questions about our use of cookies or this policy, please contact:

AevArk, Inc.
Email: privacy@aevark.com
Website: www.aevark.com