Incomplete

This page is missing the information an imprint is supposed to contain. That is not an oversight — the operating legal entity has not been established, so there is no registered name, number or address to publish. Publishing a plausible one would be worse than publishing nothing. See Q1 and Q2.

Legal · imprint

Who is behind this.

A privacy product asking for trust should be findable. Here is everything we can say accurately today, and an honest list of the fields that are still blank.

What is true today

  • Avano is founder-led and self-funded. There are no outside investors, no venture capital, and no board. It is small by intention rather than by stage — being small and independent is part of the threat model: less to subpoena, less to acquire, less to lean on.
  • Contact: hello@avano.app. This address is real, monitored, and the same one published for security reports, press, legal requests and everything else. We use one address rather than a wall of them because an address that silently drops mail is worse than no address, and we can only vouch for the ones we have tested.
  • Website: avano.app. Machine-readable security contact: /.well-known/security.txt.
  • Source licence: AGPL-3.0-or-later. The repository is not yet published.

What is not settled, and therefore not stated

Registered company name and legal formPendingThe name “Aere Network” appears across this site and in the app. Whether that is the operating legal entity, and in what form, is not confirmed.
Country of establishmentPendingThis determines the governing law of the terms, which data-protection authority supervises us, which legal orders bind us directly, and whether a representative is required elsewhere. It is the first question on the counsel register for exactly that reason.
Registered addressPendingFollows from the above. An imprint without a postal address is incomplete in several jurisdictions that may apply to us.
Company registration number and VAT identifierPendingFollows from the above.
Managing director / responsible personPendingSeveral regimes require a named natural person responsible for published content. Whether we are in scope is unconfirmed.
Data protection officer, or EU representativePendingWhether either is required depends entirely on where the entity ends up and on how our processing is characterised.
Regulatory point of contactPendingIf online-intermediary rules apply to us we may owe a designated contact point and a notice-and-action process. Neither exists.

Why we are publishing the blanks

An imprint is one of the few pages where an incorrect entry is actively harmful: it tells a regulator, a court, or a person with a legitimate complaint where to go, and sending them somewhere wrong wastes their time and looks like evasion. It is also the page most often filled in with something approximately true.

The same rule governs this site as governs the code: do not claim what you have not checked. We have not checked, so this page says so. The table above turns into an imprint the day the entity exists, and not before.

Infrastructure, for the record

The website is served by a commercial hosting provider. The relays run on rented virtual machines from commercial providers in two different countries. Specific provider names and locations are deliberately not published for the relays: a relay's location is targeting information, and publishing the pairing of a provider and an address would hand an adversary, for free, exactly what such work otherwise costs them. What a relay host can and cannot do is described in full on what a relay sees, which is the part that actually affects you.