Privacy Policy – StrataCM

This Privacy Policy explains how Alora Technologies LLC ("Alora Technologies," "we," "us," or "our") collects, uses, and shares information when you use StrataCM, including our website, mobile applications, and related services (collectively, the "Service").

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We may collect the following categories of information:

1.1 Information You Provide Directly

• Account information: Name, email address, password, role, company name, and similar information when you sign up, accept an invitation, or update your profile.
• Project and jobsite data: Information about projects, jobs, tasks, schedules, time entries, and logs created or submitted within the Service.
• Communication: Messages, feedback, and other information you provide when you contact us or communicate through the Service.
• Preferences: Notification preferences and other settings you choose.

1.2 Information We Collect Automatically

When you use the Service, we may automatically collect:

• Usage data: Log data about how you access and use the Service, such as pages viewed, features used, timestamps, and interactions.
• Device and technical data: IP address, browser type, operating system, mobile device identifiers, app version, and similar technical information.
• Cookies and similar technologies: We may use cookies, web beacons, and similar technologies to remember settings, understand usage, and improve performance. You can usually control cookies through your browser settings, but disabling them may affect certain features.

1.3 Information from Customers and Third Parties

If you use StrataCM through a company or organization (a Customer), your employer or project admin may provide your name, email address, role, and other relevant details to invite you to the Service.

We may receive information from third-party services integrated with StrataCM (for example, identity providers, communication tools, or analytics tools) where permitted by their terms and your settings.

2. How We Use Information

We may use the information we collect for the following purposes:

• To provide and operate the Service: Including creating and managing accounts, enabling project workflows, recording time and activity, and delivering notifications.
• To communicate with you: Sending transactional emails (account creation, password resets, project invitations, job updates, security alerts) and, where permitted, product updates and marketing communications.
• To customize and improve the Service: Analyzing usage to improve features, performance, and user experience.
• To maintain security and prevent abuse: Detecting and preventing fraud, unauthorized access, and other harmful activities.
• To comply with legal obligations: Meeting regulatory requirements, responding to lawful requests, and enforcing our Terms of Use.
• For business operations: Including internal reporting, accounting, and planning.

Where required by law, we rely on your consent, the performance of a contract, our legitimate interests, or compliance with a legal obligation as our legal bases for processing personal information.

3. How We Share Information

We may share information as follows:

3.1 With Customer Organizations

If you use the Service under a Customer (e.g., your employer):

• Your information (such as name, email, role, time entries, logs, and project activity) may be visible to that Customer's admins and other authorized users.
• The Customer may export, manage, or request deletion of data associated with your account in accordance with their policies.

3.2 With Service Providers

We may share information with trusted third-party service providers who help us operate the Service, such as:

• Hosting and infrastructure providers.
• Email and communication providers (including OneSignal).
• Analytics and monitoring tools.
• Payment processors (if applicable).

These providers are authorized to use personal information only as necessary to provide services to us and are bound by contractual obligations to protect it.

3.3 For Legal and Safety Reasons

We may disclose information if we believe in good faith that it is reasonably necessary to:

• Comply with applicable law, regulation, legal process, or governmental request.
• Enforce our Terms of Use or other agreements.
• Protect the rights, property, or safety of Alora Technologies, our users, Customers, or the public.

3.4 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of all or a portion of our business, personal information may be transferred as part of that transaction, subject to continued protection as described in this Policy.

3.5 Aggregated or De-Identified Data

We may use and share aggregated or de-identified data (that cannot reasonably be used to identify an individual) for research, analytics, benchmarking, and improving the Service.

4. Email Communications & Preferences

We use email to:

• Deliver transactional messages such as account invitations, password resets, project notifications, and security alerts.
• Send service-related communications about changes to the Service, policies, or technical issues.
• Send optional marketing and product updates, where permitted by law and subject to your consent.

You can:

• Opt out of marketing and non-essential emails by clicking the unsubscribe or manage preferences link in those emails.
• Adjust certain communication preferences in your account settings (where available).
• Contact us at aloratechnologies.st@gmail.com to request changes to your communication preferences.

You cannot opt out of important transactional emails that are necessary to provide the Service (such as security alerts or critical account notices), except by deactivating your account.

5. Data Retention

We retain personal information for as long as needed to:

• Provide the Service to the Customer.
• Comply with legal obligations.
• Resolve disputes and enforce our agreements.

We may retain certain logs and records for a reasonable period of time after the end of a subscription or account closure, unless otherwise required by law or contract. Data that has been aggregated or de-identified may be retained indefinitely.

If a Customer requests deletion of data associated with your account, we will process that request in accordance with our agreement with the Customer and applicable laws.

6. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

7. International Transfers

Our systems and service providers may be located in the United States and other countries. By using the Service, you understand that your information may be transferred to, stored, and processed in countries that may have data protection laws different from those in your jurisdiction.

Where required, we take appropriate measures to ensure that international transfers comply with applicable data protection laws.

8. Children's Privacy

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13 (or under the minimum age in their jurisdiction) without appropriate consent, we will take steps to delete it. If you believe a child has provided us information, please contact us at aloratechnologies.st@gmail.com.

9. Your Rights & Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as:

• The right to access, correct, or update your information.
• The right to request deletion of your personal information.
• The right to restrict or object to certain processing.
• The right to data portability.
• The right to withdraw consent (where processing is based on consent).

If you use the Service through a Customer, many requests must be directed to that Customer (e.g., your employer), because they are the controller of your data in the Service. We may refer your request to the appropriate Customer.

You can also contact us at aloratechnologies.st@gmail.com with any requests or questions about your rights. We may request additional information to verify your identity.

10. Third-Party Links & Services

The Service may include links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top and, where appropriate, provide additional notice (such as an in-app notice or email).

Your continued use of the Service after any changes become effective signifies your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, you can contact us at: