Avanty

Avanty represents a significant advancement in AI-powered data analysis, seamlessly integrating with Metabase to transform how users interact with their data. As businesses increasingly rely on robust analytics tools, Avanty stands out by combining powerful AI capabilities with user-friendly query generation, making complex database operations accessible to both technical and non-technical users alike. This comprehensive analysis examines Avanty's core features, data handling practices, and operational framework, providing insights into how this AI-driven tool is reshaping data analysis across organizations.

AI Query Generation Accuracy

Avanty's AI-driven query generation boasts 95% precision, although some users have reported occasional column recognition errors or misinterpretations of query intent. To optimize query generation, users should provide as much specific information as possible, including exact table names and column references. The tool can process up to 60 queries daily and offers helpful step-by-step explanations to assist users in learning SQL.

When generating new queries, users should clearly define table names and column references, especially in environments with similar-sounding table names. For editing existing queries, users should provide detailed error descriptions and specify desired outcomes, including requests for additional columns, aggregation functions, or data transformations.

The company supports users through email and Slack channels for paying subscribers, guaranteeing a 24-hour response time. For those seeking to improve their SQL skills, Avanty provides structured learning opportunities through its detailed query generation process and comprehensive error explanations.

Privacy Policy Overview

Avanty processes data through several key mechanisms while adhering to strict privacy standards. The company's primary data collection occurs via a Google Chrome extension that integrates directly with Metabase instances. During the registration process, users must provide basic information including their display name, email address, and password; alternatively, registration can be facilitated through third-party services like GitHub, which requires additional personal details such as profile ID and authentication token.

The extension employs a minimalistic approach to data collection, running only a five-line code check on visited websites to determine if they contain a Metabase instance. For security and privacy, users maintain granular control over which specific sites the extension can access, requiring them to input precise root URLs without any path information. All data collection and processing operations strictly adhere to EU and US data protection regulations, with third-party handling by Stripe, Digital Ocean, and Render, Inc. ensuring compliance.

Data retention policies are designed to balance service functionality with user privacy, deleting most personal information upon service termination while maintaining basic metadata for statistical analysis. The company anonymizes all research data before sharing with third parties, including potential collaboration with employers for usage verification. Personal data storage occurs primarily through Digital Ocean Inc. in the USA, though the company reserves the right to change storage locations while maintaining equivalent data protection standards across its international operations.

Data Collection and Processing

The Avanty extension employs a dynamic monitoring mechanism that checks website code to detect Metabase instances, performing this process with a minimal footprint. During this initial interaction, the extension executes a five-line code check on each visited website to search for the presence of a Metabase instance. If the detection process is successful, the extension loads additional, more extensive code to activate Avanty.

To control access to user data, Avanty implements a granular URL authorization system. When users enable the extension, they can manually specify which websites it should monitor by inputting the exact root URL, including protocol and subdomains, but without any path information. This method ensures that the extension maintains limited access, only engaging with the explicitly permitted websites during the initial detection phase.

The data collection process requires browser permissions that may appear more extensive than necessary to users, though the actual functionality is more restrained. Current browser permissions indicate Avanty's capability to "read and change all your data on all websites," a level of access broader than its actual operational requirements. This approach allows for flexibility in future updates while maintaining robust baseline functionality for the extension.

Third-Party Partnerships

All data processing operations for Avanty are conducted through established partnerships with companies including Stripe, Digital Ocean, and Render, Inc., ensuring compliance with EU and US data protection standards. The Chrome extension processes and sometimes stores SQL queries and metadata about database schemas and stored charts in logs, but does not store or access customer data.

The data processing workflow begins with the Avanty Chrome extension, which employs a minimalistic approach to detection through a five-line code check on visited websites to identify Metabase instances. During registration, users provide basic information including their display name, email address, and password. For GitHub registration, additional personal information such as profile ID and authentication token is processed. The service handles up to 60 queries daily and requires all third-party processing to meet EU and US data protection standards.

User data storage occurs primarily through Digital Ocean Inc. in the USA, though the company reserves the right to change storage locations while maintaining equivalent data protection standards across its international operations. Data is typically deleted upon service termination, with exceptions for billing purposes and legal retention requirements. The company anonymizes all research data before sharing with third parties and does not store or access personal information from children under 16.

Active usage generates additional personal information, which Avanty uses for service improvements and preventing misuse/malfunctions. The company creates anonymized aggregated analyses for statistical information and evaluations, while maintaining strict controls to prevent inference to specific users. All third-party data processing operations require user consent, with US-based companies handling data under standard contractual clauses in accordance with GDPR requirements.

Revocation of User Consent

Revoking consent requires a clear declaration to Jaschu Ventures UG (haftungsbeschränkt) via email at support@avanty.app. Users must provide sufficient information to demonstrate their intention to withdraw consent, such as a detailed letter or email sent by post.

Once consent is revoked, the processing of data that has already occurred remains lawful and unaffected. The company maintains the right to process data for several purposes, including invoice generation and compliance with legal retention periods. Additionally, personal data may continue to be used in legal disputes or when responding to requests from authorities.

After consent revocation, Avanty continues to process data in accordance with applicable laws. This includes maintaining basic metadata for statistical analysis and ensuring compliance with data protection regulations. The company retains the ability to delete data upon service termination, though exceptions apply for billing purposes and legal retention requirements.