AVG AntiVirus & Security

"Device Data includes information about the operating system; hardware; city/country location of device; IP address, device error logs; browser; network; applications running on the device, including the Avast products; and Service Data includes information about product usage and events relating to use of our product by you."

AVG collects extensive device data including all applications running on the device, hardware information, network details, and error logs — much of which goes beyond what antivirus core functionality requires.

"Device Data includes information about the operating system; hardware; city/country location of device; IP address, device error logs; browser; network; applications running on the device, including the Avast products."

AVG collects city/country location data from devices along with IP addresses, enabling ongoing geolocation tracking of users.

"We reserve the right to revise or modify this Privacy Policy. In addition, we may update this Privacy Policy to reflect changes to our data practices. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account), product notification or by means of a notice on this website prior to the change becoming effective."

AVG reserves the right to unilaterally change the privacy policy at any time. While they promise notification for material changes, continued use after changes constitutes acceptance.

"To enable the ad, we embed a software development kit ("SDK") provided by an advertising company into the product. The SDK collects Personal Data in order to personalize ads for you. Only few of our free products serve third-party ads. You will be asked for consent during the installation process of any such product."

AVG embeds third-party advertising SDKs that collect personal data directly from users' devices, and shares data with a large ecosystem of analytics providers including Google Analytics, Firebase, Facebook Analytics, Mixpanel, Amplitude, Hotjar, Adobe Analytics, and others.

"After the uninstallation, we will continue to process your Product Data for statistical purposes for up to six years. We have measures in place to ensure compliance with data protection laws, including pseudonymization. The rolling deletion periods for Product Data are not longer than six years."

AVG retains product data for up to six years even after users uninstall the product, and billing data is kept for seven years. The retention periods are extremely long for consumer software.

"We are a global company that processes personal data in many countries. As part of our business, we may transfer data across the Gen group, its subsidiaries and affiliates, and third-party vendors of Gen located worldwide, including Avast, Avira, LifeLock and Norton entities. Billing data includes... device fingerprint ID."

AVG collects device fingerprint IDs and shares personal data across the entire Gen Digital family of brands (Avast, Avira, LifeLock, Norton), enabling cross-service user profiling and tracking.

"You have the right to erasure of your Personal Data, but only in specific cases stipulated by law, e.g., if there is no legally recognized title on our part for further processing of your Personal Data (incl. protection of our legitimate interests and rights). The customer account remains valid until you actively delete it in the user administration section of the account. You can also contact our support or DPO in case you would like to delete your account."

The right to erasure is hedged with broad exceptions including AVG's own 'legitimate interests,' and account deletion may require contacting support or the DPO rather than a simple self-service process.