Privacy Policy

1. Information We Collect

Alora collects the information described below, so that organizations can run their events.

2. Account Information

• Your name, email address and mobile number.
• Your password, which is stored only as a cryptographic hash and is never readable by us.
• One-time verification codes, stored only as hashes and only until they are used or expire.
• Optional profile details, such as a photo and your timezone.
• The date you accepted these documents.

3. Organization Information

• Organization name, logo, address, contact details and preferences such as timezone and currency.
• Membership records: who belongs to an organization, their role and status.
• Invitations, including the email address invited and who invited them.

4. Event-Related Information

As event features are released, organizations will use Alora to hold information about their events and the people attending them, such as registrations, attendance, seating and payment records.

For that information, the organization decides what is collected and why; Alora processes it on the organization's behalf in order to provide the service.

5. Technical and Log Information

• Sign-in history: the time, IP address and browser used, which helps you and your organization spot unauthorized access.
• An audit trail of important actions, such as changes to members, roles and organization settings.
• Delivery records for emails we send, which hold the recipient, subject and delivery status — never the message body, codes or links.
• Standard server logs needed to operate and secure the service.

6. How We Use Information

• To provide, maintain and improve Alora.
• To authenticate you and keep accounts and organizations secure.
• To send service email: verification codes, password resets, invitations and account notices.
• To investigate suspected abuse, security incidents or breaches of our terms.
• To meet legal obligations.

We do not sell your personal information.

7. Service Providers

We use service providers to run Alora, such as hosting and email delivery. They may process information on our behalf and only as needed to provide their service to us.

8. Security

• Passwords are hashed, and verification codes and invitation tokens are stored only as hashes.
• Stored mail credentials are encrypted.
• Access to an organization's information requires an active membership in it.
• Important actions are recorded in an audit trail.

No service can promise perfect security, and we make no certification or compliance claims in this document.

9. Data Retention

• Account and organization information is kept while the account or organization exists.
• Sign-in history is kept for a limited period and then deleted automatically.
• Registrations that are never verified are removed automatically after a short period.
• Some records may be kept longer where we are required to do so, or to resolve disputes.

10. Your Rights

Depending on where you live, you may have rights over your personal information, including to:

• access the information we hold about you;
• correct information that is inaccurate — much of it you can edit in your profile;
• ask for your account to be deleted, which you can also do from your profile;
• object to or restrict certain processing.

If information was given to an organization using Alora, please contact that organization first, as it decides how that information is used.

11. Contact

For privacy questions or requests, contact support@alora.ph.