AVAAL Privacy Policy
1. Who we are and what this Policy covers
1.1 This Policy explains how AVAAL Technology Solutions Inc. (Canada) and AVAAL Inc. (United States) (“Avaal“, “we“, “us“) collect, use, disclose and protect personal information.
1.2 It covers personal information about:
- visitors to avaal.com;
- prospects and customer contacts;
- users of our software and mobile apps;
- course participants; and
- applicants for regulatory filings and bonds.
1.3 Data our customers put in our software. Business customers use our software (including AFM and AED) to manage their own operations. When they enter personal information about their drivers, employees, contractors or their own customers, the customer controls that information. We process it only on the customer’s behalf, as their service provider, under our agreement with them. If you are a driver or employee of one of our customers, please contact that company about its privacy practices. We will help it respond.
1.4 Our Terms of Service govern how we handle Customer Data. If this Policy and the Terms conflict on Customer Data, the Terms prevail.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Contact and account | Name, title, company, email, phone, address, login details | You |
| Billing | Billing contact, payment method details (processed by our payment provider) | You |
| Software and app data (processed for our customers) | Driver and employee names and contacts; licence and safety records; vehicle and load data; GPS location (including background location when the employer enables tracking); photos and documents (e.g., bills of lading); hours-of-service and ELD records; payroll and settlement data (which may include government identifiers and bank details); eManifest crew details (date of birth, citizenship, travel-document numbers) | Our customers and their users; integrations they enable |
| Regulatory filings and bonds | Company, officer and owner information; registration numbers; documents required by the authority or surety | You |
| Courses | Name, contact details, attendance, assessments, certificates | You |
| Communications | Support requests, chat messages, emails and calls | You |
| Usage and device | IP address, device and browser type, pages and features used, logs, error reports | Collected automatically |
| Cookies | See Section 10 | Collected automatically |
3. How we use personal information
We use personal information to:
- provide, operate, secure and support our Services;
- create and manage accounts, and bill and collect payment;
- prepare and submit filings and bond applications that you ask for;
- deliver courses and issue certificates;
- communicate with you about your account, the Services, security and changes;
- send marketing to business contacts where we have consent, which you can withdraw at any time (Section 11);
- improve our website and Services using Usage Data;
- detect and prevent fraud and abuse; and
- comply with the law, and establish or defend legal claims.
What we don’t do:
- We do not sell personal information.
- We do not use Customer Data for advertising.
- We do not use Customer Data to train AI models, other than to provide the Services to that customer.
4. How we share personal information
We share personal information only as described below:
| With | Why |
|---|---|
| Service providers that host, operate and support our Services (for example data centres, SMS and email delivery, payment processing, e-signature, customer-support and website analytics tools) | To perform services for us, under written obligations to protect the information and use it only for that purpose |
| Integrations and parties a customer directs (for example QuickBooks, ELD providers, mapping providers, and other network users a customer chooses to share with) | Because the customer enabled or requested the exchange |
| Government authorities, as part of a service you request (for example CBSA and CBP for eManifests, and transportation or registration agencies for filings) | To deliver that service |
| Sureties and insurance intermediaries | To process a bond you apply for |
| AVAAL Technology Solutions Inc. and AVAAL Inc. | To provide and support the Services, under this Policy |
| Legal and safety | To comply with law, court orders or binding government requests, and to protect rights, safety and security |
| Business transfers | In a merger, financing, acquisition or sale of assets, under confidentiality obligations; we will give notice before personal information becomes subject to a different policy |
| With consent | For any other purpose you agree to |
SMS: Mobile numbers, SMS opt-in data and consent are not shared with any third parties or affiliates for their marketing or promotional purposes.
5. Where information is stored and processed
5.1 Our Services are hosted in North America.
5.2 Our support personnel access Customer Data only with the customer’s permission, or where needed to keep the Services secure and running or to comply with law. Our personnel may be located outside your province, state or country.
5.3 Information stored or accessed outside your province, state or country is subject to the laws of that place. It may be accessible to that jurisdiction’s courts, law-enforcement and national-security authorities.
6. How long we keep information
6.1 We keep personal information only as long as necessary for the purposes described in this Policy. This includes meeting legal, tax, accounting and reporting requirements, resolving disputes, and enforcing our agreements. After that, we delete, destroy or anonymize it under our retention practices.
6.2 Customer Data is handled as set out in our Terms of Service:
- the customer may access and export it while the subscription is active;
- after cancellation, the customer may reactivate to regain access to data we still hold;
- after the subscription ends, we may delete it at our discretion; and
- backups are overwritten in the ordinary course.
7. Security
7.1 We use administrative, technical and physical safeguards consistent with generally accepted industry practices for hosted software. These include:
- North American data centres;
- access limited to authorized personnel; and
- regular backups.
7.2 No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7.3 You are responsible for keeping your password confidential.
7.4 If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals, customers and regulators as the law requires.
8. Your rights and choices
8.1 Everyone. Subject to legal exceptions, you may:
- ask for access to your personal information;
- ask us to correct it;
- withdraw consent, which may limit the Services we can provide; and
- unsubscribe from marketing.
8.2 Quebec residents also have the right to:
- data portability;
- de-indexation where the law provides; and
- be informed of any decision made exclusively by automated processing.
We do not make decisions about individuals based exclusively on automated processing.
8.3 US residents. Depending on your state of residence, you may have the right to know, access, correct or delete personal information, and to opt out of its sale, sharing for targeted advertising, or profiling. We do not sell personal information or share it for targeted advertising. We will not discriminate against you for exercising your rights.
8.4 How to make a request.
- Email admin@avaal.com.
- We may need to verify your identity.
- We respond within the time the law requires.
If your information is in a customer’s account (see Section 1.3), we will refer your request to that customer.
8.5 Complaints. You may contact the Office of the Privacy Commissioner of Canada, Quebec’s Commission d’accès à l’information, your provincial commissioner, or your state attorney general.
9. Mobile apps
Our apps may request the following device permissions:
- location, including in the background when your employer enables trip tracking;
- camera and photos, for documents and proof of delivery; and
- notifications.
You can change these permissions in your device settings, but some features may then stop working. If you use our apps as an employee or contractor, your employer is responsible for informing you of its monitoring practices.
10. Cookies and similar technologies
We and our service providers use cookies and similar technologies on our website and Services for essential functions (such as login and security), preferences, analytics, live chat and performance. The specific technologies and providers we use may change over time.
Non-essential cookies are used only with your consent, which you can give or withdraw through the cookie banner. You can also block cookies in your browser settings. For Quebec residents, non-essential tracking is off by default.
11. Marketing communications
We send commercial emails and texts only with consent as required by law, including Canada’s Anti-Spam Legislation. Every message includes an unsubscribe option. Service and account messages continue after you unsubscribe from marketing.
12. Children
Our Services are intended for businesses and adults. They are not directed to anyone under 18, and we do not knowingly collect personal information from children.
13. Changes to this Policy
We may update this Policy and will post the new version with its date. For material changes, we will notify you by email or through the Services before they take effect.
14. Contact us — Privacy Officer
Privacy Officer
Mailing addresses for AVAAL Technology Solutions Inc. and AVAAL Inc. are published at avaal.com
admin@avaal.com
(1-877) 995-1313
