PRIVACY NOTICE

Your work is yours. Your data needs a clear job.

This notice explains what Alora handles across the public website and signed-in app, why it is needed, and the choices available to you.

AT A GLANCE

Effective date

21 September 2026

Marketing site

No intentional advertising or behavioural-analytics cookies at present.

App data

Accounts, projects, payments, messages, forms, learning, security, and authorized AI actions.

PLEASE READ

The operating company is now identified.

The Synergy Apps Limited and Franco Estate, Ghana are confirmed. The full public service address, controller registration details, tawk.to privacy review, and legal review remain required before publication.

01

Who this notice covers

This notice covers the Alora marketing website, Alora accounts, the visual editor, Website Director, projects, forms and Inbox, billing, learning features, Hosting, export, and support. Alora Web Editor is operated by The Synergy Apps Limited from Franco Estate, Ghana. The full public service address must be confirmed before publication.

02

Information we collect

We may collect account and profile details; project pages, assets, settings, collaborations, course progress, and messages; credit and transaction records; form and shop submissions; support correspondence; and technical records such as session identifiers, IP address, browser or device information, and security events.

We do not need or store full payment-card details for Alora credit purchases. Paystack processes the payment and Alora keeps the transaction reference, amount, status, credits, and reconciliation records needed to provide and account for the purchase.

03

Marketing website, cookies, and local storage

The current marketing pages do not intentionally use advertising or behavioural-analytics cookies. Hosting systems may still create ordinary server logs. The signed-in app uses an essential authentication cookie, may use a short-lived referral cookie, and uses browser local or session storage for preferences, editor recovery, onboarding, cart state, and similar product functions.

If Alora later adds non-essential analytics or advertising technologies, this notice and any required consent controls must be updated before they are enabled.

04

Why we use information

We use information to create and secure accounts; provide editing, collaboration, publishing, courses, support, billing, fraud prevention, and service recovery; process public form and shop submissions for project owners; improve reliability; enforce the Terms; and comply with legal, tax, accounting, and regulatory duties.

Depending on the context, processing is necessary to perform a contract, take requested pre-contract steps, meet legal obligations, pursue legitimate interests in running and protecting the service, or act on consent where consent is the appropriate basis.

05

AI features

Alora sends approved website context to the configured OpenAI provider only when a user confirms the relevant AI operation. That context may include the approved brief, strategy, copy, page structure, design direction, reference material, and user instructions needed for the request. The result and operation record may be saved with the project.

Do not submit confidential, sensitive, unlawful, or third-party material unless you have the right and a valid reason to process it. AI output can be wrong and must be reviewed before it is used or published.

06

Who receives information

We may use service providers for hosting, storage, databases, email delivery, payments, security and bot protection, AI generation when authorized, and operational support. Current product integrations include Paystack, Postmark, optional Cloudflare Turnstile, OpenAI for confirmed AI actions, and tawk.to for authenticated in-app support after its server configuration is enabled.

We may also disclose information to advisers, regulators, courts, or law-enforcement authorities when required by law or reasonably necessary to protect people, rights, property, the service, or the public. Alora does not currently sell personal information or use it for targeted advertising.

07

International processing and security

Some providers may process information outside your country. Where law requires safeguards for an international transfer, Alora will use an appropriate contractual, technical, or legal mechanism.

We use access controls, hashed passwords and session tokens, signed payment verification, restricted credentials, backups, and other reasonable safeguards. No online service can promise absolute security, so protect your password and report suspected account misuse promptly.

08

Retention

We keep information only for as long as needed for the purpose described, the active account or project relationship, security and recovery, dispute handling, or legal and accounting duties. Retention varies by record. When information is no longer required, it should be deleted, de-identified, or isolated in a lawful backup cycle.

09

Your choices and rights

Depending on applicable law, you may ask to access, correct, delete, restrict, or receive certain personal information; object to some processing; or withdraw consent without affecting earlier lawful processing. Some records may need to be retained for security, payment, legal, or contractual reasons.

Use the Contact page to make a request. Ghana residents may also raise a concern with the Ghana Data Protection Commission. People in other jurisdictions may have the right to complain to their local data-protection authority.

10

Children, changes, and contact

Alora is designed for adults and business or educational use, not for children to create independent paid accounts. A responsible adult or institution must manage any authorized learning use involving a minor.

We may update this notice as the product, providers, or law changes. Material changes should be presented clearly. Effective and last updated: 21 September 2026. Questions or privacy requests can be submitted through the Contact page.

NEED A CLEAR NEXT STEP?

Ask what Alora holds or how it is used.

Use the Contact page for a privacy request. Include the account email and enough context for us to verify the request safely.