Privacy
Last updated: October 27, 2026
This is a translation. The version that applies is the Spanish one; if they differ, the Spanish text prevails.
aval stores your documents so you can keep them in order. This page explains, in plain language, what data is stored, where, and who can see it.
What we store
- Your account: the name, email and identifier that Google, LinkedIn or GitHub give us when you sign in. We neither see nor store your password for those services.
- Your documents: the files you upload or scan, their versions and their thumbnails.
- The text of your documents: the text the PDF already has or that aval recognizes on scanned pages, so you can search and copy it.
- What’s needed for it to work: folders, preferences, and technical server logs (date, IP address and the page requested) used to detect failures and abuse.
- If you use aval Workspace without an account: the same as above, except your name and email, for 24 hours. If you sign in with Google, LinkedIn or GitHub within that time, it moves to your account; if not, everything is deleted.
- If you sign up on aval.site (so we let you know when aval Verifica or paratrope opens): your email, the product and the language. We only use it for that notice; to have it deleted, write to us.
- aval.site visits: how many times each page was viewed per day, and which site the visit came from. Your IP address isn't stored and no cookies are used to count them.
We don’t use your documents to train artificial intelligence models, we don’t show ads and we don’t sell data to anyone.
How we protect it
- Files are stored encrypted (AES-256-GCM) with a key of each account’s own. The text used for searching is stored in the server’s database, which can’t be reached from the internet.
- The whole connection goes over https.
- Text recognition, document checks and contract fact sheets are done on our server: the content isn’t sent to other services to be processed.
- Each account sees only its own documents.
No system is infallible. If there were ever an incident affecting your data, we would let you know.
Where it is
On our own server hosted on Oracle Cloud, in the Santiago, Chile region.
Who it’s shared with
- Google, LinkedIn or GitHub, only to sign in: they know you signed in to aval with your account.
- Google Fonts: the page’s typefaces are downloaded from Google, which receives your IP address when they load.
- Oracle Cloud hosts the server; documents are encrypted on its disk.
- We would only hand over data to an authority under a valid court order.
Cookies
We use only the cookies that keep your session open. The browser also stores some interface preferences (for example, list or tile view, or the language). There are no advertising or tracking cookies.
How long
- Your documents stay until you delete them. The ones you mark as temporary delete themselves when their time runs out.
- For each document, the first version, the current one and the ones you mark are kept; intermediate ones lose their file after 7 days.
- There are daily backups (files stay encrypted in them) that are replaced after 7 days. Whatever you delete disappears from them within that time.
- Without an account, everything is deleted 24 hours after you started.
Your rights
You can view, download and delete your documents whenever you want from the app, even all of them at once. You can also ask us for access to your data, to correct it or to delete your whole account, by writing to the contact below.
These rights are recognized by Law 25,326 on the Protection of Personal Data of the Argentine Republic. The Agency for Access to Public Information, the supervisory authority for that law, handles complaints and claims for non-compliance.
Contact
Write to us at contact@aval.site.
If we change this policy, we’ll update the date above and, if the change is important, let you know in the app.
Español · English · Українська · Русский