Privacy Policy

Who we are

Avyrix is the publisher of this service, a virtual assistant for care sector facilities, installed on the client facility's website to answer questions from families, patients and visitors. For any question about this policy or your data, you can contact us at contact@avyrix.be.

What data we process

Depending on your relationship with Avyrix, the following data may be processed:

• ·Client facility account : facility name, email address, password (stored in hashed form, never in plain text), contact details.
• ·Institutional information : the general information the facility provides to power its assistant (visiting hours, pricing, admission process, activities, etc.). The facility commits to never including personal data about a specific person in its care.
• ·Messages exchanged with the assistant : the content of questions asked by visitors and the generated replies. If a visitor voluntarily mentions personal information, it is not retained beyond the technical processing of the conversation.
• ·Technical data : IP address and session identifier, used solely for security and to limit abusive use.
• ·Billing data : payment data is processed directly by our payment processor Stripe, never passing through our servers. We only keep the Stripe customer ID and payment history.

Why we process this data

• ·To provide and operate the service (account creation, assistant configuration, generating replies).
• ·To ensure the security of the service and prevent abuse.
• ·To communicate with the client facility (account confirmation, activation, support).
• ·To bill the subscription.

Third-party providers

To operate, Avyrix relies on the following providers, who process data on our behalf :

These providers only use the data to carry out the services requested by Avyrix.

Retention period

Account data is kept for as long as the account is active, then deleted within a reasonable period after termination, unless a longer legal retention obligation applies. Conversations with the assistant are kept for a period set by the professional concerned: 90 days by default, or 30 or 365 days if they choose otherwise. They are then deleted automatically.

Your rights

In accordance with the GDPR, you have a right of access, rectification, erasure, restriction and objection regarding your data, as well as a right to portability. To exercise these rights, contact us at contact@avyrix.be. You also have the right to lodge a complaint with the Belgian Data Protection Authority.

Cookies and local storage

Browsing this website sets no cookie at all: no advertising cookie, no third-party tracker, no analytics. The only cookie Avyrix sets is the one for signing in to its administration, and it appears only at the moment an administrator signs in. Here is what may be kept in your browser:

• ·Your display language : fr, nl or en, kept in your browser’s local storage under the key avyrix_lang. This is not a cookie: it never leaves your browser and is sent to no server. It holds nothing but those two letters: no identifier, no personal data, and it cannot be used to recognise you from one website to another.
• ·A session cookie : set only when someone signs in to the Avyrix administration, access to which is restricted. It is strictly necessary for the sign-in to work, expires after four hours of inactivity, and is not accessible to the page’s scripts.

You can clear either one at any time from your browser settings. The website remains usable and will simply reopen in your browser’s language.

Security

Exchanges with the site are encrypted (HTTPS) and passwords are stored in hashed form. We limit access to data to only the processing necessary for the service to function.

Changes

This policy may evolve along with the service. The last update date is shown at the top of this page.