Legal
Privacy policy
The short version
- We collect an email address, a display name, and the practice answers and preferences you generate by using AlveoAI.
- Your chat history stays in your browser. We do not store your conversations on our servers, which also means we cannot recover them for you.
- The text of a question is sent to our AI provider so it can be answered, and to public research databases when a literature search runs. Do not put patient-identifying information into it.
- We never see your card number. Payments are handled entirely by Stripe.
- You can export or delete your data from Settings, or by emailing support@alveoai.ca.
Scope
This policy covers alveoai.ca and the AlveoAI application, operated by Alveo Labs from Québec, Canada. It applies to people who visit the site and to people who hold an AlveoAI account.
AlveoAI is an educational product for individuals. It is not a clinical record system, and we do not act as a processor of patient records on behalf of a dental practice. If you enter information about a real patient, you are doing so as an individual user and you remain responsible for it under whatever professional obligations apply to you.
What we collect
Information you give us
- Account — email address, display name, an optional avatar image, and a password, which is stored only as a bcrypt hash and is never readable by us.
- Study profile — the answers you give during onboarding, such as your stage of training, the exam you are preparing for and your region. These shape how answers are written for you.
- What you type or upload — questions you ask, images you attach, and notes you dictate or write in Scribe.
- Support and contact — anything you send through the contact form or by email.
Information generated by using the product
- Practice record — which ADAT questions you answered, what you chose, whether it was correct, and how long you spent. This is what your progress dashboard is built from.
- Account security — sign-in attempts and session records, kept so accounts can be protected against unauthorised access.
- Subscription — your plan, its status, and Stripe's identifiers for your customer and subscription records.
What stays on your device
Chat conversations are stored in your browser, not on our servers, under a key tied to your account. They are not synchronised between your devices, they are cleared when you sign out, and if you clear your browser data they are gone. We cannot read them and we cannot restore them. Scribe note drafts work the same way.
Voice
Scribe's dictation uses your browser's own speech recognition. The audio is handled by your browser and its operating system, subject to that vendor's privacy terms — Alveo Labs does not receive, store or transmit the audio. What reaches us is only the text you keep, and only if you save it.
How we use it
- To provide the product: answer questions, serve practice questions, and keep your progress record.
- To personalise explanations to your stage of training and exam.
- To operate accounts, verify email addresses and protect against unauthorised access.
- To take payment and manage subscriptions.
- To fix faults and improve the product, using aggregate patterns rather than reading individual accounts.
We do not sell personal information, and we do not use your content to train our own models. The third-party model providers named below operate under their own terms, which we do not control.
What happens when you ask a question
This is the part most worth understanding, so it is set out plainly. When you send a message:
- The text of your message, and your study profile, are sent to our AI provider to generate an answer.
- For substantive questions, the text is also sent to public research databases — PubMed, OpenAlex and Semantic Scholar — to find papers to cite. These are public services with their own privacy terms.
- The answer is returned to you and kept in your browser.
Because the text of your question leaves our systems, do not enter names, dates of birth, health-card numbers, photographs of identifiable people, or anything else that identifies a patient. Describe the clinical situation without identifying the person.
Who else processes your information
We use the following providers. Each receives only what it needs to do its job.
| Provider | Purpose | What it receives |
|---|---|---|
| Groq | AI chat responses | Your message text and study profile |
| Google (Gemini) | Image and document features | The content you submit to those features |
| PubMed, OpenAlex, Semantic Scholar | Finding papers to cite | The text of your question |
| Tavily | Web search where a feature uses it | The search terms |
| Stripe | Payments and subscriptions | Your email and payment details, entered directly with Stripe |
| Brevo | Verification and account email | Your email address |
| Supabase | Database hosting | Your account and practice record |
| Vercel | Website and application hosting | Request logs, including IP address |
We also disclose information where the law requires it, or to establish or defend a legal claim. If Alveo Labs is ever transferred to another owner, account information would transfer with it and you would be told before that took effect.
Where your information goes
Alveo Labs operates from Québec. Several of the providers above process data in the United States and other countries, which means your information is processed outside Canada and is subject to the laws of those countries, including lawful access by their authorities. By using AlveoAI you accept that processing. We name each provider above so you can read their terms before deciding.
How long we keep it
| Information | Kept for |
|---|---|
| Account and study profile | Until you delete your account |
| Practice record | Until you delete it or close your account |
| Chat history and note drafts | On your device only, until you sign out or clear it |
| Billing records | As long as tax and accounting law requires |
| Sign-in and security logs | A limited period, for account protection |
Security
Passwords are hashed with bcrypt. Sessions use signed tokens sent over HTTPS. Database access is restricted, and administrative functions — including the question bank, its answer keys and unpublished drafts — are limited to administrator accounts and enforced on the server rather than only hidden in the interface.
No system is perfectly secure. If we discover a breach that presents a risk of serious injury, we will notify affected users and the Commission d'accès à l'information as Law 25 requires. If you believe you have found a vulnerability, email support@alveoai.ca and please give us a reasonable opportunity to fix it before disclosing it publicly.
Your rights
Under Québec's Law 25 and Canada's PIPEDA you may ask us to:
- Give you a copy of the personal information we hold about you.
- Correct anything inaccurate.
- Delete your account and the information attached to it.
- Stop using your information for a particular purpose.
- Provide your information in a structured, portable format.
Chat export and deletion are available directly in Settings. Anything else, email support@alveoai.ca and we will respond within 30 days. If you are not satisfied with our answer you may complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
Cookies
We use a single cookie, which holds your sign-in session. It is required for the product to work and it is removed when you sign out. We do not use advertising cookies and we do not track you across other websites.
Your browser's local storage is also used to keep your chat history, note drafts and interface preferences on your device, as described above. That is not a cookie and it is never sent to us.
Children
AlveoAI is built for dental students, exam candidates and clinicians, and is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has created an account, email us and we will remove it.
Changes
When this policy changes we will update the date at the top, and for changes that materially affect your rights we will tell account holders by email before they take effect.
Contact
Alveo Labs, Québec, Canada — support@alveoai.ca. Write to us with any question about this policy, or to exercise any of the rights above.