Your data, handled with care and clarity.
This is a working privacy notice for the Averisq pilot. It will be reviewed by legal counsel before general availability.
Our principles
- • We collect only the data needed to deliver the platform.
- • We never sell customer data — to anyone, for any purpose.
- • Access is role-based and logged. Practice owners control who sees what.
- • Support staff access customer data only with explicit consent, scoped to the task, and recorded in the audit log.
Data handling
Storage & processing. Practice data is stored in Supabase (Postgres, file storage, authentication) within the EU region. All data is encrypted at rest and in transit.
Role-based access. Every read and write is checked against row-level security policies. Users see only the practices and records their role permits.
Audit logging. Sensitive actions — exports, downloads, sign-offs, role changes — are recorded with actor, timestamp, and scope.
AI processing. Clara's responses are generated using third-party AI providers via our gateway. Inputs are processed transiently and are not used to train provider models.
Your rights
- • Export. Practice owners can request a full export of their data at any time.
- • Correction. Inaccurate data can be corrected through the platform or via support.
- • Closure. Accounts can be closed on request. Data is retained for a short reactivation window, then permanently deleted.
- • Access requests. Subject access requests should be sent to the privacy contact below.
Retention
[Placeholder — pending legal review] Operational records are retained for the duration of your subscription plus a defined post-closure window. Audit logs and inspection evidence may be retained longer where required by regulation. Specific retention periods will be published before general availability.
Cookies
[Placeholder — pending legal review] The platform uses essential cookies for authentication and session management. We do not use third-party advertising trackers. A full cookie policy will be published alongside the production release.
Legal entity & contact
Legal entity: [Company name — to be confirmed]
Registered address: [Address — to be confirmed]
Privacy / DPO contact: [privacy@averisq.com — to be confirmed]
This privacy notice is a working draft for the pilot phase. Sections marked [placeholder] require formal legal review before publication.