Legal
Privacy Policy
Last updated: 2 November 2026
Draft: this text is not final until it has been reviewed by a lawyer.
Note for the legal review
DRAFT. This text must not be published before a lawyer reviews it. Update it once the company details, the website's hosting provider, the email provider and the technical delivery path of the demo form are settled. Product statements (product data stays on each clinic's own server, support access is permitted and logged, our role when we connect for support) must match the final licence agreement and data processing agreement word for word; use the word 'processor' only after counsel confirms it.
This policy briefly explains how we handle your privacy on the avlusoft.com website and when you contact us. For the full legal information, see our KVKK privacy notice.
In short
- This site has no analytics, advertising or tracking tools.
- We process only what you send us yourself and the server's essential technical logs.
- We do not sell your data.
What we receive
- Demo form: your name, clinic name and email address; optionally the app you would like to start with, your team size, a time that suits you and your WhatsApp number. The form sends these details to our own server, which emails you a personal login to our demo (fictional data, 14 days) and sends us a copy. We keep the request for 12 months, then anonymise it. If sending from the page is not possible, the form prepares an email (or, once our WhatsApp number is published, a WhatsApp message) in your browser instead, which reaches us only if you send it.
- Partner form: your name, company and role, email address, phone number, optionally your country and city, and how you know clinics. It works the same way: our server emails you the programme summary and sends us a copy; we keep the request for 12 months, then anonymise it.
- If you write on WhatsApp or by email: your message and contact details.
- Server logs: IP address, browser details and time of access, for security and for a short time.
Third-party services
- Fonts load from Google Fonts. When they do, your browser connects to Google's servers and your IP address reaches Google.
- When the site shows a WhatsApp link and you press it, you move to Meta's WhatsApp service, where Meta's own privacy terms apply.
- We add no other third-party code to our pages.
Clinics that use the product
This website stores no product data. Avlu runs on each clinic's own server, bought and paid for by the clinic in its own name; the clinic's patient data stays on that server, and the clinic is the data controller for it.
We connect to a clinic's server for support only with the clinic's permission. Every connection is logged, and we act under the data processing agreement signed with the clinic.
For clinics that use Avlu WhatsApp (team inbox), messages pass through Meta's infrastructure; for clinics that use Avlu Calls, calls pass through CloudTalk's (in the clinic's own CloudTalk account). Our product has no AI, and patient conversations are never sent to any AI company. Details are on the Security and KVKK page.
Security
The site is served over HTTPS. Only the people whose job is to reply can access what you send us.
Your rights
To use your rights under KVKK Art. 11, write to info@avlusoft.com. If you are in the European Union or the United Kingdom, you can use the same address for your rights under the GDPR.
Changes
If we change this policy, we publish the current version on this page with its date. If we ever add an analytics tool, we will ask for your explicit consent first.
Questions: info@avlusoft.com