Privacy statement
Version 1.1, 8 November 2026. This statement covers avalhealth.ca and demo.avalhealth.ca.
Who we are
Aval Health builds Aval, a technology adoption platform for Canadian hospitals. We are in Toronto, Ontario. Questions, corrections and requests about your information go to info@avalhealth.ca; we answer within thirty days.
What this site collects, and why
The front door. To read about Aval you tell us your name, your work email address, your hospital or organization, your role and your province, and whether you want to hear from us beyond your request. We keep the time, your browser's description and a salted hash of your network address, never the address itself. We use this to reply to you, to send the demo link you ask for, and to know who is interested in Aval. Personal mailboxes are refused at the door because we need to know which organization we are talking to.
Email. Your request gives us implied consent under Canada's anti-spam law to write to you about it for six months. If you tick the box, you give express consent to hear about Aval Health until you say stop; reply to any email with the word stop, or write to info@avalhealth.ca, and we stop.
The demo. A personal link opens the demo after you acknowledge, in your own name, that what you see is confidential. We keep that acknowledgment (the name you typed, the version of the text, the time, your browser's description and the hashed address) for the record, and which screens of the demo you opened for a year. The demo holds a fictional hospital and no real person or patient.
Cookies. Three, all set by us and none for advertising or analytics: an access cookie after the password or a personal link (thirty days), an interest cookie that remembers your front-door details (ninety days), and on the demo host a visitor cookie that names your personal link. No third-party trackers run on this site.
Where it is kept, and by whom
The site runs on Vercel and its database is Supabase, both in the Montréal region. Email is sent through Resend. Aval Health staff read what you sent us, and nothing is sold or shared for marketing. When our staff ask an AI assistant to help draft a reply to you or summarize their notes of a conversation, your name, title and those notes are processed by Claude: on Amazon Bedrock in Canada once we have switched that on, and until then by Anthropic in the United States. Neither uses them to train its models. Your front-door details are kept until you ask us to remove them.
Hospitals using the platform
The platform itself holds no patient-level information by design, and a hospital's records belong to the hospital. The security and privacy posture a privacy office needs, including subprocessors and data residency, is a separate document we hand to hospitals on request.
Your rights
You may ask what we hold about you, have it corrected, or have it removed. Write to info@avalhealth.ca. If we change this statement, the version line above changes with it.