/privacy

Privacy Policy

Effective September 11, 2026. This policy covers avi.nyc, every application on an avi.nyc subdomain, and any other application that links here.

This Privacy Policy describes how Work in Play LLC ("we", "us", or "our") collects, uses, and protects information when you use avi.nyc, any site or application hosted on a subdomain of avi.nyc, and any other application we build that links to this policy (together, the "Services").

Who we are

The Services are built and operated by Work in Play LLC, the company of Avi Flombaum, based in New York, NY. You can reach us at [email protected].

Information we collect

Information you provide

If you contact us, subscribe to updates, or fill out a form, we collect what you submit, such as your name, email address, and message.

Information from sign-in providers

Some Services let you sign in with a third-party account such as Google, LinkedIn, or X. When you do, we receive basic profile information from that provider, typically your name, email address, profile picture, and a unique account identifier. We only request the minimum scopes needed for the feature you are using. We never receive or store your password for those services, and we never post to those services on your behalf. Each provider's own privacy policy governs what they share with us.

Information collected automatically

Like most websites, the Services collect standard technical information such as your IP address, browser type, device type, referring page, pages visited, and timestamps. This is collected through server logs and analytics tools.

Cookies

The Services use cookies and similar technologies for essential functions such as keeping you signed in, remembering preferences like light or dark theme, and protecting against abuse. Analytics cookies, where used, are described below.

How we use information

We use the information we collect to:

  • Provide, operate, and improve the Services
  • Authenticate you and maintain your session
  • Respond to messages and requests
  • Send updates you have asked for
  • Understand how the Services are used so we can make them better
  • Detect, prevent, and address abuse, security issues, and technical problems
  • Comply with legal obligations

How we share information

We do not sell your personal information. We do not share it with third parties for their own marketing.

We share information only with service providers who help us run the Services, and only as needed to do so. These currently include:

  • Amazon Web Services for application hosting and infrastructure
  • Amazon Simple Email Service for transactional email
  • Cloudflare for networking, security, and file storage
  • Google Analytics, PostHog, or a self-hosted instance of Umami for usage analytics, depending on the Service
  • Google, LinkedIn, and X for sign-in, when you choose to use them

We may also disclose information if required by law, to protect the rights, property, or safety of us, our users, or others, or as part of a merger, acquisition, or transfer of the Services.

Google API Services

Where a Service uses Google sign-in or Google APIs, its use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read your data except with your consent, for security purposes, or to comply with the law.

Data retention

We keep personal information only as long as needed for the purposes above. Account information is retained while your account is active. Server logs and analytics are retained for a limited period and then deleted or aggregated. You can ask us to delete your data at any time.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise any of these rights, email [email protected]. We will respond within a reasonable time and in any case within the period required by applicable law.

You can disconnect a third-party sign-in at any time through that provider's account settings. Doing so may prevent you from using parts of the Services.

Security

We take reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

International users

The Services are operated from the United States. If you access them from elsewhere, your information will be transferred to and processed in the United States.

Changes to this policy

We may update this policy from time to time. We will post the revised version here and update the effective date. Continued use of the Services after changes take effect means you accept the revised policy.

Contact

Questions about this policy or your data: [email protected]. See also our Terms of Service.