Privacy, Terms & HIPAA

Alora ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our services.

Information we collect

When you sign up for our waitlist or contact us, we may collect your name, email address, practice name, phone number, practice size, and information about your current phone solution. We collect this information solely to evaluate fit for our founding cohort and to communicate with you about our services.

How we use your information

We use the information we collect to: process waitlist signups, communicate about our product and services, improve our website and offerings, and comply with legal obligations.

Data sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with service providers who assist us in operating our website and business, subject to confidentiality agreements.

Cookies and tracking

Our website uses first-party analytics to understand aggregate usage: Vercel Analytics (page views), Vercel Speed Insights (performance data), and our own lightweight page-view counter. These tools may set cookies to count unique visitors and measure page performance. We do not use advertising trackers. No patient or caller information ever flows through this website.

Data retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

By accessing or using the Alora website and services, you agree to be bound by these Terms of Service.

Use of services

You agree to use our services only for lawful purposes and in accordance with these Terms. You are responsible for maintaining the confidentiality of any account credentials.

Intellectual property

All content, features, and functionality on our website — including text, graphics, logos, and software — are owned by Alora and protected by intellectual property laws.

Limitation of liability

Alora is provided on an "as is" basis. We make no warranties regarding the availability, accuracy, or reliability of our services. To the fullest extent permitted by law, we disclaim all liability for damages arising from use of our services.

Changes to terms

We reserve the right to modify these terms at any time. Continued use of our services after changes constitutes acceptance of the new terms.

Alora is actively working toward full HIPAA compliance. We have not completed it yet, and we will not represent that we have. As we finish the compliance chain — business associate agreements, security assessments, and independent review — we will publish our compliance status here.

How we’re building toward it

Our architecture is designed from the ground up with HIPAA requirements in mind:

• Encryption in transit for all communications and data
• Access controls and audit logging for every interaction
• PHI kept out of logs, analytics, and third-party tools
• Business Associate Agreements (BAAs) available as we complete the chain

Data handling

Alora processes patient information solely for the purpose of scheduling appointments and handling patient communications. We are designing the platform so that patient data stays with your practice, and we will publish a detailed data-handling description as part of our compliance documentation.

Questions

For questions about our HIPAA compliance status or to request a BAA, please reach out to our team.