Privacy Policy — Itemize

Ava Research LLC · Last updated: October 14, 2026

This policy covers Itemize (the "Service"), a connector that helps a contractor or small shop turn a pasted job description into a structured quote draft through Muse. The defining rule of the Service: Itemize drafts; the owner quotes. Itemize prepares a quote draft for the owner to review — it never sends anything to anyone, ever.

What we store, and why

• Account ID: an internal ID from your sign-in, used to keep your data separate from everyone else's. Sign-in is handled by Microsoft Entra External ID with a one-time code sent to your email — there is no password, and it asks for nothing but your email address. The Service itself never stores your email address.

• Job descriptions you paste: normalized into a structured quote — client name, line items, totals, terms — only when your own text actually stated them. A price never appears unless your text named one; otherwise the line reads "price to confirm."

• Clients: a client name and the quotes linked to them, built automatically only when a client name was actually stated in a job description — never invented, never pre-populated.

• Shop profile: business name, contact info, standard terms, default expiry, and tax rate — only if you explicitly set them.

• Technical logs: request type, outcome, and timing. Logs never contain job-description contents, client details, or sign-in tokens.

What we don't collect

The Service only accepts the fields above. We don't ask for or store payment card or bank account numbers, government ID numbers, precise location, photos, or health information. Itemize doesn't process payments at all, and it takes pasted text only — no image bytes, no vision processing.

Raw text is never kept

The job description text you paste is never persisted as text — only its SHA-256 hash, used so a re-pasted description doesn't re-run extraction a second time, and the structured fields extracted from it. The hash cannot be used to reconstruct your original message.

No third-party services

Itemize runs entirely on Ava Research's own infrastructure. There are no external data providers, no third-party AI/model API calls, no API keys, and no secrets — nothing leaves our systems to produce a draft.

Permissions Muse asks for

One permission, Itemize.ReadWrite: it lets Muse read and update your quotes, clients, and shop profile on your behalf. That's all it can touch.

Who can see it

• You, through your own account.

• Meta's Muse, if you connect it, acting on your behalf with the permission above.

• Service providers that host and run the Service (Microsoft Azure, East US 2 region) and handle sign-in (Microsoft Entra External ID), bound by their own security and confidentiality commitments.

• No one else. We don't sell, rent, or share your data with advertisers or data brokers.

How we protect it

Your data is isolated by account — no owner can read another owner's quotes, clients, or profile. Access to the underlying systems is limited to what each part of the Service needs to do its job, and administrative access is limited to Ava Research LLC personnel who need it to operate the Service.

Data retention

• Quotes, clients, and your shop profile: kept until you delete them or your account.

• Technical logs: 30 days.

Delete your data

Deletion is self-service — ask Muse directly, no email required:

• One quote: ask Muse to delete it, for example "Delete that fence quote." This permanently removes every version of it. This can't be undone.

• Everything: ask Muse to delete your data, for example "Delete all my Itemize data." This permanently removes your shop profile, every quote you've drafted, and every client record. This can't be undone.

• Disconnect: remove Itemize from your connectors in Muse. Disconnecting stops Muse's access but doesn't delete your data — use the self-service deletion above first if you want it gone.

Children's privacy

The Service is not directed at children, and we don't knowingly collect information from anyone under 13.

Changes to this policy

If we make a material change, we'll update the date at the top of this page and, for significant changes, make a reasonable effort to notify active users.

Contact us

Ava Research LLC
privacy@avaresearchllc.com