Privacy Policy

Alora Concierge ("Alora", "we", "us") provides a concierge platform used by property owners, management companies, suppliers and guests. This policy covers data we process when you use the Alora web app or chat with Alora on WhatsApp.

Account data: name, email, phone, language preference, and your role on each property.

Villa data: the information owners and managers add about a property — address, photos, manuals, codes, suppliers, calendars.

Booking & guest data: guest name, contact details, arrival/departure dates and party size, supplied by you or imported from channel calendars.

Messages & media: chats with Alora (in-app and WhatsApp), task notes, and any documents or photos you upload.

Technical data: standard logs needed to operate and secure the service (e.g. IP, browser, error reports).

We use your data to run the concierge experience: authenticate you, show the right villa and booking to the right person, generate Alora's replies and translations, coordinate tasks with suppliers, and send booking-related notifications by email or WhatsApp. We do not sell personal data and we do not use your messages to train public AI models.

Owners, co-owners, management companies, suppliers and guests each sign in with their own account. Access to every villa, booking, document and message is enforced by row-level security in the database, scoped to your role on that specific property.

Guests can only see sensitive property details (door codes, Wi-Fi, check-in instructions) from one day before arrival through the day of departure.

We use a small number of trusted providers to operate the service: Lovable Cloud (hosting, database, authentication, file storage); AI providers reached through the Lovable AI Gateway for concierge replies and translations; and email and WhatsApp providers (including Meta / WhatsApp Business) for transactional notifications and messaging.

Account, villa, booking and message data is retained while your account is active. Owners can remove villas, bookings, guests and documents from inside the app. To request full account deletion, email us at the address below.

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. Email us to exercise any of these rights.

Alora does not use advertising, marketing or third-party tracking cookies, and we do not run analytics pixels (such as Google Analytics or Meta Pixel). We only use storage that is strictly necessary to operate the app:

• Authentication session — stored by our backend (Lovable Cloud) in your browser's local storage to keep you signed in between visits.
• Language preference — remembers the language you selected so the interface stays in your preferred language.
• View mode — remembers whether you last used the owner, guest or supplier view so you land back in the right place.

Because these are strictly necessary for the service to work, no cookie consent banner is shown. You can clear them at any time from your browser settings, which will sign you out and reset your preferences.

Privacy questions, deletion requests and security reports: hello@aloraconcierge.com. We aim to respond within two business days.