Updated 19 October 2026
Account privacy.
Avrel uses your name, company and verified email to provide your pilot account. Each verified address gets its own account; entering a company name does not grant access to another person’s account. Avrel’s operator receives your name, company and verified email in a notification when your account is created. This version does not invite teammates or merge accounts by email domain.
Signing in
Verification links expire after 15 minutes, work once and are tied to the browser that requested them. Link secrets and browser session secrets are stored as hashes. Sessions use essential HttpOnly, SameSite cookies, expire after seven days and can be ended by signing out. There are no analytics scripts on these account pages.
Keys and usage
API keys are shown only when created. We retain their hashes, labels, creation and expiry times, and revocation status. API usage and request metadata are counted separately from charges; billing is disabled. API requests, including retries and validation errors, count toward your allowance. Dashboard visits do not.
The existing API retains saved search responses for 24 hours and request metadata for 90 days; cleanup runs at startup and hourly while the service is running. Search responses can contain query context. Use public or redacted requirements; this pilot does not accept private BOM or document uploads.
Email delivery and providers
When live email is enabled, Resend processes your address and verification message; its free plan currently retains delivery data for 30 days. The API runs on Render and stores account data in Neon Postgres. Apple iCloud Mail handles support emails to jamie@getavrel.com. No email is sent by the local review inbox.
Expired verification records, sessions and hashed email/IP rate-limit buckets are deleted at startup and hourly while running. Challenge records live for 15 minutes, session records for seven days and rate-limit records for up to 31 days. Account profiles, key history and operator audit are retained while the pilot account exists. Deletion is currently a manual support process; backups may retain earlier copies.
Your account
Contact jamie@getavrel.com to request access, correction, account closure or deletion. We do not sign you up for marketing through this form.