Privacy Policy

Version 2026-08-04-v1 · Effective August 4, 2026 · Issued by ALEVA TECHNOLOGIES INC.

1. Controller and scope

ALEVA TECHNOLOGIES INC. controls personal information processed through aleva.tech, iProbe pages, accounts, quotations, orders, repairs, buyer verification, support, and related business communications. This policy does not govern independent third parties acting under their own notices.

2. Information collected

• identity, contact, account, authentication, and communication information;
• organization, role, billing, shipping, tax, resale, facility, professional credential, licence, registration, and end-use information;
• product, quotation, order, payment status, invoice, delivery, warranty, return, repair, and support records;
• device, browser, consent, security, fraud-prevention, App Check, approximate network, and service-log information;
• optional analytics and preference information when consent is required and provided.

Do not submit patient records or protected health information. ALEVA does not intentionally collect clinical patient data through ordinary website, sales, or repair forms. Payment-card details are collected by Stripe; ALEVA does not intentionally store complete card numbers or security codes.

3. Purposes

ALEVA processes information to provide and secure accounts; respond to inquiries; prepare quotations; verify professional or business eligibility; screen fraud, sanctions, export, and regulatory risk; accept and reconcile payments; produce invoices; fulfill, ship, repair, and support products; administer warranties and returns; maintain audit and distribution records; improve services; comply with law; establish or defend claims; and send optional marketing where permitted.

4. Legal bases

Depending on jurisdiction, processing is based on performance of a contract or pre-contract request, compliance with legal obligations, ALEVA’s legitimate interests in secure B2B operations and regulatory review, consent where required, and protection or establishment of legal rights.

5. Disclosure and service providers

Information may be disclosed to payment, cloud, authentication, hosting, analytics, email, storage, shipping, professional-adviser, insurer, auditor, fraud-screening, credential-verification, regulatory, and government recipients as reasonably necessary. Current core services may include Stripe, Firebase/Google Cloud, Cloudflare, Google Workspace, and carriers. ALEVA may disclose information in a merger, financing, acquisition, reorganization, or asset transaction subject to appropriate safeguards.

6. Buyer-verification records

ALEVA may verify records with issuing bodies, public registries, employers, facilities, manufacturers, distributors, or regulators. Uploading evidence does not guarantee approval. Verification decisions, risk notes, and internal fraud or compliance analysis may be restricted from customer access where law permits.

7. Cookies and analytics

Strictly necessary technologies support authentication, security, preferences, App Check, payment routing, and service operation. Optional analytics are enabled only according to the Cookie Policy and applicable consent requirements.

8. Retention

Records are retained only as long as reasonably necessary for the stated purposes, applicable tax, accounting, medical-device distribution, complaint, recall, warranty, sanctions, security, limitation, and legal requirements. Retention periods vary by record and jurisdiction. ALEVA may preserve records subject to a legal hold and securely delete or de-identify records when no longer required.

9. International processing

Information may be processed in the United States and other countries where providers operate. Those countries may have different privacy laws. ALEVA uses contractual, technical, organizational, and other safeguards where required.

10. Security

ALEVA uses access controls, role separation, managed secrets, encryption in transit, restricted storage, logging controls, webhook verification, and other safeguards appropriate to the information. No system is guaranteed secure. Users must protect credentials and report suspected compromise promptly.

11. Privacy choices and rights

Subject to applicable law and exceptions, a person may request access, correction, deletion, restriction, portability, withdrawal of consent, or information about disclosures, and may appeal or complain to a regulator where the law provides. ALEVA may authenticate a request and retain information required by law or legitimate claims. Marketing can be declined without affecting ordinary transactional communications.

Requests may be sent to office@aleva.tech. ALEVA does not sell personal information for money. If a law defines “sale,” “sharing,” or targeted advertising more broadly, ALEVA will provide required choices where applicable.

12. Children and changes

Services are for business and professional users and are not directed to children. ALEVA may update this policy prospectively and will present material changes for renewed notice or consent where required.