Privacy Policy
Last updated June 2026
Paveo is decision-support software for specialty medication access teams. This policy explains what information we handle and how. We have built Paveo to require as little sensitive data as possible.
1. Synthetic and de-identified data only
Paveo currently operates on synthetic or de-identified data. We do not request or require protected health information (PHI) to evaluate or use the product.
Do not upload real, identifiable patient records until a Business Associate Agreement (BAA) is in place with Paveo. Until then, you are responsible for ensuring documents you submit are synthetic or de-identified.
2. Information we collect
When you request a demo or contact us, we collect the details you provide — such as your name, work email, organization, role, and message.
We may collect basic technical and usage information needed to operate and secure the website.
3. How we use information
We use the information you provide to respond to your request, communicate with you about Paveo, and improve the product and website. We do not sell your information.
4. Documents you submit to the product
Files you upload to a Paveo module are processed to produce the analysis you requested. On synthetic or demo data, these are not patient records.
Document content is processed transiently to generate your result and is not used to train third-party models.
5. Third-party processing
Paveo uses third-party AI infrastructure to analyze documents and generate outputs. Only synthetic or de-identified content is sent to these services until a BAA is in place.
6. Data retention and security
We apply reasonable safeguards appropriate to a pre-production pilot. Paveo is not yet operating as a HIPAA-covered production environment, which is why real PHI should not be submitted before a BAA.
7. Your choices and contact
To ask what information we hold, request deletion, or ask a question, email hello@paveohealth.com.
This page is a starting-point template for an early-stage pilot and is not legal advice. Have qualified counsel review it before relying on it in production or with real patient data.