Privacy at Four Avance

Who this policy covers

Four Avance is a software company operating from Kerala, India and the UAE. This policy covers fouravance.com — this website, and the enquiries you send us through it.

It does not cover our products. When your school runs Learnatio, your clinic runs Cliniva, or your business runs Unnatio, Chatori or Marqeva, the records inside that system belong to your organisation: your organisation decides what goes in and who may see it, and we handle that data on its instructions under the agreement we sign with it. Those obligations live in that agreement, not in this policy.

How this website is built

Every page on fouravance.com is generated ahead of time and served as a static file. There is no application server processing your visit, no database behind the pages, no login and no account to create.

That is not a security claim, it is a description: for most of what you do here — reading a product page, opening the calculator, taking a product tour — nothing you do is transmitted to us at all, because there is nowhere on this site for it to go.

What we collect when you contact us

The contact, demo-request and configurator forms are the only places on this site where you give us information. They ask for what we need to reply: your name, your email address, and whatever you choose to write in the message — plus, on some forms, your company name, your country and which product you are asking about.

There are two ways a submission reaches us, and the form tells you which one ran. When our form-relay service is configured, the form posts your submission to that service, which forwards it straight to our business inbox. When it is not configured, the form opens a prefilled draft in your own email app: nothing has left your device at that point, and nothing reaches us until you press send in your own mail client, through your own email provider.

We never ask for payment card details, bank details, passwords, government identity numbers or health information anywhere on this website, and there is no field on it for any of them. Please do not put them in a message either — an email inbox is the wrong place for that, and we would only have to ask you to send it another way.

Analytics

If analytics is switched on for this site, we use a cookieless, privacy-first product analytics tool — Umami or Plausible, either of which may be self-hosted by us. Both count page views and a small number of events (which buttons get clicked, whether a calculator was used, how far a tour got). Neither sets cookies, neither stores anything in your browser, neither records an identifier that follows you between websites, and neither builds a profile of you.

The events we record are deliberately shaped so they cannot carry content. When someone searches our answers library, for example, we record the length of the query and how many results came back — never the query itself.

Analytics is enabled at build time, not at runtime. When it is not configured, no analytics script is loaded, no measurement request is made, and there is nothing to opt out of.

Cookies

This website sets no cookies. There is no advertising network on it, no retargeting pixel, no social media tracker, no session cookie and no consent-management platform — which is why you were not stopped by a banner asking you to accept anything.

What is stored in your browser

A handful of small values are saved in your browser's local storage so the site remembers your preferences between visits. These are not cookies: they are never attached to a request, they are never transmitted to us or to anyone else, and nothing on this site reads them back to a server. They exist only on the device you are reading this on.

• fa-chaathan-mem — the site mascot's memory: how many times you have visited, when you last visited, and which of its lines you have already seen, so it does not repeat itself at you.
• fa-industry — the industry you picked from the industry ribbon or the suite configurator, so the site can lead with examples from your sector.
• fa-industry-ribbon-done — a flag recording that you have already answered or dismissed the industry ribbon, so it stays gone.
• fa-festival-<festival>-<year> — a flag recording that you dismissed a seasonal greeting ribbon, so that greeting does not come back at you again that season.
• fa-egg-konami-done — a flag recording that you already found one of the hidden bits of the site.
• fa-runner-hs — your best score in the small in-page game.

Clearing what the site remembers

You can delete all of it at any time by clearing site data for fouravance.com in your browser settings, or by browsing in a private window, in which case nothing is kept after you close it. Nothing on this site breaks when those values are missing — the mascot simply meets you for the first time again.

Server logs

Like any website, this one is delivered by a hosting and content-delivery provider, and that provider keeps short-lived technical request logs — the IP address a request came from, the time, the page requested and the browser's user-agent string — to deliver pages and to defend against abuse. We do not use those logs to identify visitors, to build profiles or to feed marketing, and we do not combine them with anything you send us through a form.

WhatsApp, email and other links out

Several pages offer a WhatsApp link. That link does nothing on its own: it opens WhatsApp with a first message already written, and you decide whether to send it. If you do send it, the conversation happens on WhatsApp, which means Meta's own terms and privacy policy apply to it alongside this one — how Meta handles your message, your phone number and your metadata is governed by Meta, not by us. What we hold is our side of the conversation, which we treat like any other enquiry described here.

The same applies to email links: choosing to email us puts the message through your own email provider and ours. And where we link to another company's website, that site has its own privacy policy and we do not control what it does.

Why we are allowed to process this

For an enquiry you send us: because you chose to send it. Filling in a form and submitting it, or messaging us on WhatsApp, is your consent to us reading it and replying, and it is also the step needed to take things further at your request.

For technical logs and cookieless analytics: because we have a legitimate interest in keeping the website available, secure and worth reading, and because these are the least intrusive ways we know of to do that — no cookies, no identifiers, no profiling.

Under India's Digital Personal Data Protection Act 2023, the consent you give by contacting us is limited to what this notice describes and can be withdrawn. Under the UAE's Federal Decree-Law No. 45 of 2021 on Personal Data Protection, we rely on your consent, and on the necessity of processing to respond to a request you made and to pursue our legitimate interests where those do not override your rights.

How long we keep it

Enquiries stay in our business inbox while we are answering you and for a period afterwards, so that when you come back to a conversation months later we know what was said. Where a conversation turns into a proposal or a contract, the related correspondence is kept for as long as we are required to keep business and tax records in India and the UAE.

We are not going to print a tidy number of months here that we have not committed to. If you want your enquiry deleted, ask us and we will delete it, and we will tell you what we deleted.

Who else sees it

We do not sell personal data. We do not share it with advertisers, data brokers or lead marketplaces, we do not use it to train machine-learning models, and no third party is paid for access to it.

A small number of service providers process data on our behalf, purely to run the site and our own correspondence:

• A website hosting and content-delivery provider, which serves the pages and keeps the technical logs described above.
• A form-relay service, which receives a form submission and forwards it to our inbox — used only when the site's form key is configured; otherwise your own email client does this job and no relay is involved.
• Our business email provider, which stores our inbox and therefore your correspondence with us.
• A cookieless analytics provider, only if analytics is enabled for the site.

Where your information goes

Four Avance operates from Kerala, India and from the UAE, so an enquiry you send may be read and stored in either country, and by colleagues in both. The service providers listed above may process data in other countries, as any internet service does.

Where a transfer out of your country is involved, we rely on your consent for the enquiry you chose to send us, and on the contractual terms we have with each provider for the rest. If cross-border handling is a decision point for you — as it often is for clinics, schools and government-adjacent buyers — raise it with us before you send anything sensitive, and we will tell you plainly where things sit.

Your rights

Whether you are in India, the UAE or elsewhere, you can ask us to do all of the following, and we will do them without making it difficult:

• Tell you whether we hold anything about you, and what.
• Give you a copy of it.
• Correct anything that is wrong or out of date.
• Delete it, unless a law requires us to keep a specific record.
• Withdraw a consent you gave us — as easily as you gave it, and without affecting anything lawfully done before you withdrew it.
• Object to, or ask us to restrict, a particular use of it.
• Nominate someone to exercise these rights on your behalf if you die or become unable to — a right the Indian DPDP Act gives you specifically.
• Complain to a regulator: in the UAE, the UAE Data Office under the Personal Data Protection Law; in India, the Data Protection Board established under the DPDP Act. You do not need to come to us first, though we would rather you did, because we can usually just fix it.

How to make a request

Email business@fouravance.com with "Data request" in the subject line and tell us what you want done. Write from the address you contacted us on if you can — it is the simplest way for us to be sure we are acting for the right person, and if we cannot match your request to anything we hold, we may have to ask you a question or two rather than hand your data to a stranger.

We deliberately do not publish a response-time promise here. We would rather answer you quickly than commit in a policy document to a number we have not yet proven we can hold to.

Children

This website is meant for businesses and the people who run them. It is not directed at children, we do not knowingly collect personal data from children through it, and there is nothing on it that a child would need to submit.

Learnatio, our school platform, does hold information about students — but that information is entered by the school, under the school's control and its agreement with us. It is not collected through this website, and this policy is not the document that governs it.

Keeping it safe

The site is served only over HTTPS, with strict transport security and a set of browser security headers applied to every page. Because there is no database behind the website, there is no store of visitor records here to be breached — enquiries live in our business inbox, protected by the access controls of our email provider and our own accounts.

If we ever discover a breach affecting personal data we hold about you, we will tell you and the relevant authority as the law requires, and we will tell you what we actually know rather than a version tidied up for comfort.

Changes to this policy

When this policy changes we will update the date shown at the top of it. If a change materially affects what we do with information you have already given us, we will say so rather than let it slide past in a version bump.

Questions about any of this go to business@fouravance.com, and a person will answer them.