Workflow & Automation · avallon.aiAvallon AI
Graded against 809 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Privacy and data use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Describes the direct and passive methods by which personal information is collected, including online forms, uploads, cookies, web beacons, and similar tracking technologies, and explains the functional purposes of cookies such as session integrity and authentication.
Discloses that the company and its third-party service providers (including identity resolution and enrichment providers) collect online identifiers and behavioral data from marketing website visitors and may associate sessions with professional or firmographic information derived from third-party sources, identifying the role of subprocessors in data collection.
Enumerates the circumstances and categories of third parties with whom personal information may be shared, including service providers for hosting, analytics, security, billing, identity resolution, and AI infrastructure, and states that service providers are required to handle data in a specified manner — disclosing subprocessor relationships and imposing contractual requirements on those subprocessors.
How to read this page: Overall risk rates what Avallon AI's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 19 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 19 citationsLast captured 2026-07-19
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Enumerates specific categories of personal information collected, including account credentials, uploaded content such as claim documents and automation scripts, and workflow configurations — defining the scope of data subject to the policy's processing provisions.
" · General Personal Information: Name, username and password, business address, email address, phone number, and any other Personal Information requested for account creation, identity verification, and to comply with applicable laws. · In..."
Imposes an obligation that protected health information processed through the Services be handled in accordance with applicable HIPAA requirements and a BAA, and directs covered entities or business associates without a BAA to contact the Company before submitting PHI.
"PHI processed through the Services is handled in accordance with applicable HIPAA requirements and the terms of the applicable BAA. If you are a covered entity or business associate and have not executed a BAA with us, please contact us bef..."
Provides contact information — including an email address and mailing address — through which users may direct questions or comments about the Privacy Policy, establishing a communication channel for privacy-related inquiries.
" If you would like to contact us with questions or comments concerning our Privacy Policy, please e-mail us at team@avallon.ai , or write to us at: Avallon Labs, Inc. Attention: Privacy [INSERT ADDRESS]"
Places the legal obligation for obtaining required consents for automated calls, prerecorded voice messages, and call recordings on the customer using the Services, and disclaims the Company's responsibility for the customer's compliance obligations in connection with those voice communication features.
"This includes obtaining all legally required consents from end users prior to initiating or enabling automated calls, prerecorded voice messages, or call recordings through the Services. The Company acts as a technology platform and service..."
Discloses that the company and its third-party service providers (including identity resolution and enrichment providers) collect online identifiers and behavioral data from marketing website visitors and may associate sessions with professional or firmographic information derived from third-party sources, identifying the role of subprocessors in data collection.
"We collect this information to maintain security, ensure system reliability, prevent fraud, and improve the Services. · Marketing and Website Visitor Information: When you visit our marketing website, we and our service providers (includin..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" Directly. We collect Personal Information directly from you when you register for the Services, submit information in an online form, request information from us, upload content, or otherwise communicate with us or our support personnel. Passively. We and our service providers collect Personal Information from you passively through automatic data collection tools, including cookies, web beacons, and similar technologies. Cookies. A cookie is a small file placed on your device. Cookies and similar technologies help enable core functionality of the Services, maintain session integrity, authenticate users, and support security, analytics, and performance monitoring. You may disable cookies through your browser settings, though doing so may limit certain features of the Services. Web Beacons. Pages of our website or certain areas of the Services may contain small electronic files known as web beacons that permit the Company, for example, to count users who have visited those pages, measure engagement, and verify system and server integrity. Monitoring and Observability Tools. We use tools that collect logs and performance metrics (such as request metadata, IP address, device and browser information, and error traces) to maintain the security, availability, and reliability of the Services. From Customer-Enabled Integrations. If you configure the Services to connect with third-party systems (such as claims management systems, CRM platforms, document storage, or communication tools), we may receive information from those systems as directed by you. Such integrations are enabled at the customer’s direction and are subject to the third party’s own terms and privacy practices."Permalink to this finding →
Describes the direct and passive methods by which personal information is collected, including online forms, uploads, cookies, web beacons, and similar tracking technologies, and explains the functional purposes of cookies such as session integrity and authentication.
AI-generated interpretation, not legal advice.
"We collect this information to maintain security, ensure system reliability, prevent fraud, and improve the Services. · Marketing and Website Visitor Information: When you visit our marketing website, we and our service providers (including third-party identity resolution and enrichment providers) may collect online identifiers such as IP address, cookie and device identifiers, browser and device metadata, pages viewed, timestamps, and referrer parameters. In some cases, our service providers may associate your website session with professional or firmographic information derived from third-party professional data sources, such as your name, job title, company name, business email address, and company attributes. This information is used for sales and marketing purposes and is governed by our service providers’ own privacy practices. · Call Recordings, Transcripts, and Voice Communications: If you or your end users interact with our AI voice agents (including inbound call reception or outbound dialing features), we may record and transcribe those calls to provide the Services, generate claim data, and maintain audit logs. The Company’s AI voice features may involve the use of automated technology to initiate or receive telephone calls. Call recordings and transcripts are processed and stored in accordance with this Privacy Policy. You are solely responsible for ensuring that your use of the Company’s voice and calling features complies with all applicable laws, including the Telephone Consumer Protection Act (“ TCPA ”), applicable state telemarketing and mini-TCPA statutes, and federal and state recording and wiretapping laws. "Permalink to this finding →
Discloses that the company and its third-party service providers (including identity resolution and enrichment providers) collect online identifiers and behavioral data from marketing website visitors and may associate sessions with professional or firmographic information derived from third-party sources, identifying the role of subprocessors in data collection.
AI-generated interpretation, not legal advice.
" We may share your Personal Information with third parties under the following circumstances: · At your direction. We may share your Personal Information or Content at your express direction and with your authorization. · With service providers. We may share Personal Information with vendors and contractors who assist us with hosting, infrastructure, analytics, monitoring, security, billing, payment processing, customer support, identity resolution and firmographic enrichment for sales and marketing purposes, AI infrastructure and model serving, and related service operations. We require service providers to use Personal Information only as instructed and to implement appropriate security measures. · To comply with applicable law. We may share your information with appropriate authorities if we believe disclosure is required by applicable law. Where permitted by law, we will provide prompt notice of any such required disclosure so that you may seek a protective order or other appropriate remedy. · To protect the rights and property of the Company. We may share your Personal Information with third parties to protect the property and rights belonging to us or a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal, fraudulent, or legally actionable. · In connection with a sale or merger. In the event of a reorganization, merger, or sale, we may transfer your Personal Information to the relevant third party. We will continue to protect Personal Information as described in this Privacy Policy and will notify you of any material changes as required by law."Permalink to this finding →
Enumerates the circumstances and categories of third parties with whom personal information may be shared, including service providers for hosting, analytics, security, billing, identity resolution, and AI infrastructure, and states that service providers are required to handle data in a specified manner — disclosing subprocessor relationships and imposing contractual requirements on those subprocessors.
AI-generated interpretation, not legal advice.
" We may use Personal Information for the following purposes: · to create, manage, secure, and authenticate your account credentials and access to the Services; · to process purchases, subscriptions, and maintain transaction records; · to provide customer support and respond to inquiries; · to operate, maintain, secure, monitor, debug, and improve the Services; · to maintain system integrity, prevent fraud, detect security incidents, and protect against misuse; · to perform analytics and diagnostic activities to understand feature usage, performance, and reliability; · to develop de-identified or aggregated insights that do not identify you; · to operate AI-enabled features using your inputs and Content solely to provide the outputs and functionality you request; · to record, transcribe, and process voice interactions with our AI agents in order to generate structured claims data, automate workflow actions, and maintain records of claim-related communications; · to identify and engage with prospective customers using website visitor data and professional enrichment information, where you have visited our marketing website; · to send service-related communications, administrative notices, and product updates; and · to comply with legal obligations and enforce our agreements. We process Content only as necessary to provide, maintain, secure, and support the Services. We do not use customer Content or claim data to train AI models. We may use aggregated, de-identified operational data (such as system performance metrics) to maintain and improve the reliability of the Services. We do not sell Personal Information and do not share Personal Information for cross-context behavioral advertising or targeted advertising."Permalink to this finding →
Enumerates the specific purposes for which the Company may use personal information, including account management, transaction processing, customer support, service operation, security, analytics, and development of de-identified data — granting the Company permission to process data for each listed purpose.
AI-generated interpretation, not legal advice.
" The Services are not intended for, and may not be used by, individuals under eighteen (18) years of age. We do not knowingly collect Personal Information from anyone under 18. If we obtain actual knowledge that we have collected Personal Information from a minor, we will promptly delete such information in accordance with applicable law. If you believe that we may have collected Personal Information from a minor, please contact us at the address listed in Section XV below."Permalink to this finding →
Restricts use of the Services to individuals eighteen years of age or older, states the Company does not knowingly collect personal information from minors, and imposes an obligation to promptly delete such information if collected, while directing reporters of such incidents to a specified contact.
AI-generated interpretation, not legal advice.
" If you reside in a U.S. state that provides privacy rights under applicable data protection laws, you may have certain rights with respect to your Personal Information, subject to applicable limitations and exceptions. Depending on your state of residence, these rights may include: · Right to Access. You may request confirmation of whether we process your Personal Information and request access to, or a copy of, the Personal Information we maintain about you. · Right to Correction. You may request that we correct inaccuracies in Personal Information we maintain about you. · Right to Deletion. You may request that we delete Personal Information we have collected from or about you, subject to certain exceptions permitted by applicable law. · Right to Data Portability. You may request a copy of certain Personal Information in a portable and, to the extent technically feasible, readily usable format. · Right to Opt Out of Sale or Sharing. As described in Section X above, the Company does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising or targeted advertising. · Right to Appeal. If we deny your request, you may have the right to appeal our decision as permitted by applicable law. You have the right to exercise these rights without being subject to unlawful discrimination. To exercise any of the rights described above, please contact us at the address listed in Section XV below. We may take reasonable steps to verify your identity before responding to your request."Permalink to this finding →
Enumerates data subject rights available to residents of U.S. states with applicable privacy laws, including the right to access, correction, and deletion of personal information, subject to applicable limitations and exceptions — granting users enforceable rights over their personal data.
AI-generated interpretation, not legal advice.
" Cloud Infrastructure. Personal Information and Content are stored and processed using secure cloud infrastructure and vetted service providers located primarily in the United States. Certain customer deployments may be configured to store and process data within the European Union or other jurisdictions, depending on the applicable customer configuration and agreement. Service Providers. Personal Information may be processed by third-party service providers that support the operation, hosting, security, analytics, monitoring, and AI functionality of the Services. These providers process information on our behalf pursuant to written confidentiality, data protection, and security obligations. International Transfers. If you access the Services from outside the United States, your Personal Information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. By using the Services, you acknowledge that your Personal Information may be transferred to jurisdictions with data protection laws different from those in your country of residence. Cross-Border Safeguards. Where required by applicable law, including the General Data Protection Regulation (“ GDPR ”) and applicable UK data protection law, we rely on recognized legal transfer mechanisms for cross-border transfers of Personal Information, which may include standard contractual clauses approved by the European Commission or other appropriate safeguards. Customers subject to GDPR or UK data protection law may be required to execute a separate Data Processing Agreement (“ DPA ”) with the Company prior to processing personal data of data subjects located in the European Economic Area or United Kingdom through the Services."Permalink to this finding →
Discloses that personal information and content are stored on cloud infrastructure primarily in a named jurisdiction, that certain deployments may be configured for storage within other jurisdictions depending on customer agreement, and that third-party service providers process information in support of platform operations — addressing data residency and subprocessor processing locations.
AI-generated interpretation, not legal advice.
" We may collect information that identifies, relates to, describes, or could reasonably be linked to an identifiable individual (“ Personal Information ”) in the following key categories:"Permalink to this finding →
Defines 'Personal Information' as information that identifies, relates to, describes, or could reasonably be linked to an identifiable individual, and signals the categorical framework used throughout the policy.
AI-generated interpretation, not legal advice.
" · General Personal Information: Name, username and password, business address, email address, phone number, and any other Personal Information requested for account creation, identity verification, and to comply with applicable laws. · Information You Upload: Any content you provide, submit, generate, or upload using the Services (“ Content ”), including but not limited to claim documents, workflow configurations, automation scripts, integration data, API credentials, and documents or reports generated through the Services. Because the Services include free-form uploads and configurations, Content may contain sensitive information depending on what you choose to include. You are responsible for the content you upload. · Payment Information: We may collect information related to fees we charge for use of our Services. Payment card information is processed by third-party payment processors and is not stored directly by the Company, except as provided to us by such processors. We may retain transaction records associated with your account. · Device and Usage Information: Information about how you access and use the Services, including IP address; device type, operating system, and application version; browser type; login and authentication events; feature usage events (e.g., workflow executions, API calls, automation triggers, AI feature interactions); crash logs, error reports, and performance metrics; and timestamps associated with activity. "Permalink to this finding →
Enumerates specific categories of personal information collected, including account credentials, uploaded content such as claim documents and automation scripts, and workflow configurations — defining the scope of data subject to the policy's processing provisions.
AI-generated interpretation, not legal advice.
" Avallon Labs, Inc., a Delaware corporation (“ Avallon, ” “ Company, ” “ we, ” “ us, ” or “ our ”), is committed to protecting the privacy and security of Personal Information. This Privacy Policy (“ Privacy Policy ”) describes and governs the manner in which the Company collects, uses, maintains, discloses, and otherwise processes information about you when you visit or use our AI-powered claims operations platform, including agentic workflows, AI voice agents, document parsing, email orchestration, and related software, APIs, tools, dashboards, and integrations (collectively, the “ Services ”), and any other online services that link to this Privacy Policy. Please read this Privacy Policy carefully before using the Services. By accessing or using the Services, or by clicking to accept these terms, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by it, as well as by our Terms of Use (the “ Terms of Use ”), which are incorporated herein by reference. If you do not agree to this Privacy Policy or the Terms of Use, you must not access or use the Services."
Defines the corporate entity, establishes its commitment to protecting personal information, and defines the scope of 'Services' covered by this Privacy Policy, including agentic workflows, AI voice agents, document parsing, and related tools — setting the definitional boundary for all downstream data-processing provisions.
AI-generated interpretation, not legal advice.
"PHI processed through the Services is handled in accordance with applicable HIPAA requirements and the terms of the applicable BAA. If you are a covered entity or business associate and have not executed a BAA with us, please contact us before submitting any PHI through the Services."Permalink to this finding →
Imposes an obligation that protected health information processed through the Services be handled in accordance with applicable HIPAA requirements and a BAA, and directs covered entities or business associates without a BAA to contact the Company before submitting PHI.
AI-generated interpretation, not legal advice.
" Our goal is to keep Personal Information accurate and up-to-date. If you find that your Personal Information is not accurate, please contact us. We will use reasonable efforts to investigate your concerns and make the necessary corrections, additions, or deletions."Permalink to this finding →
States the Company's goal to keep personal information accurate and up-to-date and commits to using reasonable efforts to investigate concerns and make corrections, additions, or deletions upon request — imposing a best-efforts accuracy obligation.
AI-generated interpretation, not legal advice.
" The security of your Personal Information is important to us. We employ administrative, technical, and physical safeguards appropriate to the nature of the Personal Information, including encryption in transit and at rest where applicable, access controls, and least-privilege practices across our infrastructure and with service providers. No method of electronic storage or transmission is fully secure, and we cannot guarantee absolute security."Permalink to this finding →
Describes the administrative, technical, and physical safeguards employed to protect personal information, including encryption in transit and at rest, access controls, and least-privilege practices, while disclaiming the ability to guarantee absolute security.
AI-generated interpretation, not legal advice.
" To protect your privacy and security, we may take reasonable steps to verify your identity before responding to your request. If you submit a request through an authorized agent, we may require proof of the agent’s authority and may also require you to verify your identity directly with us. We may decline or limit requests where permitted by applicable law, including where we are required to retain information to: · complete a transaction or provide the Services requested by you; · comply with legal obligations; · detect or prevent fraud, abuse, or security incidents; · enforce our agreements; or · protect our rights or the rights and safety of others."Permalink to this finding →
Describes the verification and authorization procedures the Company may require before responding to privacy rights requests, and identifies circumstances — including legal obligations, fraud prevention, security, and enforcement of agreements — where the Company may decline or limit requests.
AI-generated interpretation, not legal advice.
" You may choose whether to provide certain Personal Information to us; however, some features of the Services may not function properly without it. If you receive service-related or administrative communications from us, you may not opt out of those communications. You may opt out of non-essential communications (such as promotional emails) by following the unsubscribe instructions included in those communications or by contacting us at the address listed in Section XV below. Call Recording and Transcription. Where the Company’s AI voice agent features are used, end users interacting with those features may be presented with an option to opt out of call recording and transcription, where that option has been enabled and configured by the applicable customer. The availability of this opt-out depends on customer configuration and applicable law. You are responsible for ensuring that your deployment of the Services provides appropriate notice and opt-out mechanisms to end users in compliance with applicable recording and wiretapping laws."Permalink to this finding →
Describes user choices regarding provision of personal information, the non-optional nature of service-related communications, the ability to opt out of promotional emails, and the obligation to notify end users of call recording and transcription where AI voice agent features are used — imposing disclosure and notification obligations on the Company and customers.
AI-generated interpretation, not legal advice.
" We reserve the right, at our sole discretion, to change, modify, add, or remove any portion of this Privacy Policy at any time. Notification of changes will be posted on our website. Amendments to this Privacy Policy will be effective when posted. Your continued use of the Services following the posting of any amendment constitutes your acceptance thereof."Permalink to this finding →
Reserves the Company's right to modify this Privacy Policy at its sole discretion at any time, establishes that notification will be posted on the website, and deems continued use of the Services after amendments to constitute the user's acceptance of changes.
AI-generated interpretation, not legal advice.
" If you would like to contact us with questions or comments concerning our Privacy Policy, please e-mail us at team@avallon.ai , or write to us at: Avallon Labs, Inc. Attention: Privacy [INSERT ADDRESS]"
Provides contact information — including an email address and mailing address — through which users may direct questions or comments about the Privacy Policy, establishing a communication channel for privacy-related inquiries.
AI-generated interpretation, not legal advice.
"This includes obtaining all legally required consents from end users prior to initiating or enabling automated calls, prerecorded voice messages, or call recordings through the Services. The Company acts as a technology platform and service provider with respect to voice communications and is not responsible for your compliance obligations as the party directing use of these features. · Inferences: We may make inferences based on the information we collect for marketing and sales purposes, such as associating website sessions with a person or company and enriching with professional or firmographic details. We do not use claim content or customer data for this purpose. · Information from Third-Party Sources: We may receive limited information from service providers or publicly available sources as necessary for fraud prevention, security, or compliance purposes. We do not purchase consumer marketing profiles for personal or household purposes. · Sensitive and Regulated Information: The Services are designed for use by insurance carriers, third-party administrators, and their partners in connection with claims operations. In that context, the Services may process information that constitutes protected health information (“ PHI ”) as defined under the Health Insurance Portability and Accountability Act of 1996 (“ HIPAA ”). Where required, the Company enters into Business Associate Agreements (“ BAAs ”) with covered entities and business associates prior to processing PHI through the Services. "Permalink to this finding →
Places the legal obligation for obtaining required consents for automated calls, prerecorded voice messages, and call recordings on the customer using the Services, and disclaims the Company's responsibility for the customer's compliance obligations in connection with those voice communication features.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Avallon AI's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Avallon AI's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Avallon AI's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Avallon AI requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Avallon AI's published policies yet.
What the policies actually cover
0 topicsNone of Avallon AI's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause appears to reserve or claim ownership rights for the platform.
“We reserve the right, at our sole discretion, to change, modify, add, or remove any portion of this Privacy Policy at any time. Notification of changes will be posted on our website. Amendments to this Privacy Policy will be effective when posted. Your continued use of the Services following the posting of any amendment constitutes your acceptance thereof.”Open source citation
The clause permits sale of personal data or information.
“We may use Personal Information for the following purposes: · to create, manage, secure, and authenticate your account credentials and access to the Services; · to process purchases, subscriptions, and maintain transaction records; · to provide customer support and respond to inquiries; · to operate, maintain, secure, monitor, debug, and improve the Services; · to maintain system integrity, prevent fraud, detect s...”Open source citation
The clause permits sale of personal data or information.
“If you reside in a U.S. state that provides privacy rights under applicable data protection laws, you may have certain rights with respect to your Personal Information, subject to applicable limitations and exceptions. Depending on your state of residence, these rights may include: · Right to Access. You may request confirmation of whether we process your Personal Information and request access to, or a copy of, t...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“We collect this information to maintain security, ensure system reliability, prevent fraud, and improve the Services. · Marketing and Website Visitor Information: When you visit our marketing website, we and our service providers (including third-party identity resolution and enrichment providers) may collect online identifiers such as IP address, cookie and device identifiers, browser and device metadata, pages v...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“Directly. We collect Personal Information directly from you when you register for the Services, submit information in an online form, request information from us, upload content, or otherwise communicate with us or our support personnel. Passively. We and our service providers collect Personal Information from you passively through automatic data collection tools, including cookies, web beacons, and similar techno...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 4 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 1 |
| Team / Business | subprocessors data sharing | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: platform claims or reserves rights on privacy data use
“We reserve the right, at our sole discretion, to change, modify, add, or remove any portion of this Privacy Policy at any time. Notification of changes will be posted on our website. Amendments to this Privacy Policy will be effective when posted. Your continued use of the Services following the posting of any amendment constitutes your acceptance thereof.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We collect this information to maintain security, ensure system reliability, prevent fraud, and improve the Services. · Marketing and Website Visitor Information: When you visit our marketing website, we and our service providers (including third-party identity resolution and enrichment providers) may collect online identifiers such as IP address, cookie and device identifiers, browser and device metadata, pages viewed, timestamps, and referrer parameters. In some cases, our service providers may associate your website session with professional or firmographic information derived from third-party professional data sources, such as your name, job title, company name, business email address, and company attributes. This information is used for sales and marketing purposes and is governed by our service providers’ own privacy practices. · Call Recordings, Transcripts, and Voice Communications: If you or your end users interact with our AI voice agents (including inbound call reception or outbound dialing features), we may record and transcribe those calls to provide the Services, generate claim data, and maintain audit logs. The Company’s AI voice features may involve the use of automated technology to initiate or receive telephone calls. Call recordings and transcripts are processed and stored in accordance with this Privacy Policy. You are solely responsible for ensuring that your use of the Company’s voice and calling features complies with all applicable laws, including the Telephone Consumer Protection Act (“ TCPA ”), applicable state telemarketing and mini-TCPA statutes, and federal and state recording and wiretapping laws.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Directly. We collect Personal Information directly from you when you register for the Services, submit information in an online form, request information from us, upload content, or otherwise communicate with us or our support personnel. Passively. We and our service providers collect Personal Information from you passively through automatic data collection tools, including cookies, web beacons, and similar technologies. Cookies. A cookie is a small file placed on your device. Cookies and similar technologies help enable core functionality of the Services, maintain session integrity, authenticate users, and support security, analytics, and performance monitoring. You may disable cookies through your browser settings, though doing so may limit certain features of the Services. Web Beacons. Pages of our website or certain areas of the Services may contain small electronic files known as web beacons that permit the Company, for example, to count users who have visited those pages, measure engagement, and verify system and server integrity. Monitoring and Observability Tools. We use tools that collect logs and performance metrics (such as request metadata, IP address, device and browser information, and error traces) to maintain the security, availability, and reliability of the Services. From Customer-Enabled Integrations. If you configure the Services to connect with third-party systems (such as claims management systems, CRM platforms, document storage, or communication tools), we may receive information from those systems as directed by you. Such integrations are enabled at the customer’s direction and are subject to the third party’s own terms and privacy practices.”Open timeline citation
Latest stance: sale or sell on privacy data use
“We may use Personal Information for the following purposes: · to create, manage, secure, and authenticate your account credentials and access to the Services; · to process purchases, subscriptions, and maintain transaction records; · to provide customer support and respond to inquiries; · to operate, maintain, secure, monitor, debug, and improve the Services; · to maintain system integrity, prevent fraud, detect security incidents, and protect against misuse; · to perform analytics and diagnostic activities to understand feature usage, performance, and reliability; · to develop de-identified or aggregated insights that do not identify you; · to operate AI-enabled features using your inputs and Content solely to provide the outputs and functionality you request; · to record, transcribe, and process voice interactions with our AI agents in order to generate structured claims data, automate workflow actions, and maintain records of claim-related communications; · to identify and engage with prospective customers using website visitor data and professional enrichment information, where you have visited our marketing website; · to send service-related communications, administrative notices, and product updates; and · to comply with legal obligations and enforce our agreements. We process Content only as necessary to provide, maintain, secure, and support the Services. We do not use customer Content or claim data to train AI models. We may use aggregated, de-identified operational data (such as system performance metrics) to maintain and improve the reliability of the Services. We do not sell Personal Information and do not share Personal Information for cross-context behavioral advertising or targeted advertising.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We may share your Personal Information with third parties under the following circumstances: · At your direction. We may share your Personal Information or Content at your express direction and with your authorization. · With service providers. We may share Personal Information with vendors and contractors who assist us with hosting, infrastructure, analytics, monitoring, security, billing, payment processing, customer support, identity resolution and firmographic enrichment for sales and marketing purposes, AI infrastructure and model serving, and related service operations. We require service providers to use Personal Information only as instructed and to implement appropriate security measures. · To comply with applicable law. We may share your information with appropriate authorities if we believe disclosure is required by applicable law. Where permitted by law, we will provide prompt notice of any such required disclosure so that you may seek a protective order or other appropriate remedy. · To protect the rights and property of the Company. We may share your Personal Information with third parties to protect the property and rights belonging to us or a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal, fraudulent, or legally actionable. · In connection with a sale or merger. In the event of a reorganization, merger, or sale, we may transfer your Personal Information to the relevant third party. We will continue to protect Personal Information as described in this Privacy Policy and will notify you of any material changes as required by law.”Open timeline citation
Latest stance: sale or sell on privacy data use
“If you reside in a U.S. state that provides privacy rights under applicable data protection laws, you may have certain rights with respect to your Personal Information, subject to applicable limitations and exceptions. Depending on your state of residence, these rights may include: · Right to Access. You may request confirmation of whether we process your Personal Information and request access to, or a copy of, the Personal Information we maintain about you. · Right to Correction. You may request that we correct inaccuracies in Personal Information we maintain about you. · Right to Deletion. You may request that we delete Personal Information we have collected from or about you, subject to certain exceptions permitted by applicable law. · Right to Data Portability. You may request a copy of certain Personal Information in a portable and, to the extent technically feasible, readily usable format. · Right to Opt Out of Sale or Sharing. As described in Section X above, the Company does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising or targeted advertising. · Right to Appeal. If we deny your request, you may have the right to appeal our decision as permitted by applicable law. You have the right to exercise these rights without being subject to unlawful discrimination. To exercise any of the rights described above, please contact us at the address listed in Section XV below. We may take reasonable steps to verify your identity before responding to your request.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-19· verified 2026-07-19verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
21 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Avallon AI's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Avallon AI's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Avallon AI's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.