Privacy Policy

1. Introduction

ALORPIT INC. ("ALORPIT," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect information related to your use of alorpit.com, the ALORPIT POS™ software, and related services.

Key Privacy Principle: ALORPIT POS operates on a "local-first" architecture. Your customers' business data stays on YOUR computer. We never access, view, or process your customers' dry cleaning orders, personal customer records, or transaction history, except in the two narrow, opt-in cases described in Section 2.3.

2. Information We Collect

2.1 License & Technical Data (Collected Automatically)

When you use ALORPIT POS, the following non-business data is automatically transmitted to our servers:

Data Type	What It Is	Why Collected
Store ID	Your unique store identifier (e.g., WSP-OXN-001)	License verification
Hardware Fingerprint Hash	A one-way cryptographic hash of your machine's hardware IDs	License enforcement
Software Version	The version of ALORPIT POS installed	Support & compatibility
Heartbeat Timestamps	Date/time of license verification checks	License compliance
Platform Info	Operating system type (e.g., "Windows 11")	Technical support
Machine Hostname	The Windows computer name of the device running ALORPIT POS	Fraud prevention & support diagnostics
Audit Log Events	License warning displays and dismissals	Legal compliance per EULA

Note on Machine Hostname: unlike the hardware fingerprint, this field is transmitted as plain text, not hashed. If you've named your computer using identifying information (e.g., an owner's name), that name is included in this transmission. You can rename your computer's hostname at any time in Windows Settings if you'd prefer a generic name.

2.2 Account & Contact Data (Provided Voluntarily)

When you register a store, request a demo, or contact support:

Business name and address
Contact person name and email
Phone number
Payment information (processed by Fiserv/CardPointe — not stored by ALORPIT)

2.3 Data We Do NOT Collect By Default

Your customers' names, phone numbers, or personal information
Customer order history or transaction data
Employee personal information
Business revenue or financial data
Any data stored in your local alorpit-data/ folder

Two opt-in exceptions, active only if you turn on the specific feature:

Driver App: if you enable driver/delivery management, your drivers' names, roles, vehicle info, and daily delivery stops sync to our servers so the mobile app can function. This never happens unless you explicitly enable this feature.
Customer App: if a customer signs up through the ALORPIT Customer App to link their account to your store, their name, phone, and email pass through our servers as part of that one-time linking step, then down to your local POS for your approval. This only happens for customers who actively choose to use the Customer App.

Outside of these two specific, opt-in features, your customers' data never leaves your local machine.

3. How We Use Your Information

We use collected information solely for:

License Enforcement: Verifying active subscriptions and enforcing license terms
Security: Detecting unauthorized use, piracy, and fraud
Technical Support: Diagnosing issues when you contact us
Service Improvement: Aggregate, anonymous usage analytics
Legal Compliance: Maintaining audit records as required by law

We do NOT use your data for:

Advertising or marketing to third parties
Selling or renting data to any third party
Behavioral profiling or tracking beyond your ALORPIT subscription

4. Data Storage & Security

4.1 Where Your Data Is Stored

Your Business Data: Stored exclusively on your local machine in AppData\Roaming\alorpit-data\. Never transmitted to ALORPIT.
License Data: Stored on ALORPIT's secure servers hosted in the United States via Google Firebase (Firestore).
Audit Logs: Stored locally and mirrored to our servers for dispute resolution purposes.

4.2 Security Measures

All data transmission uses TLS 1.3 encryption
Hardware fingerprint data is one-way hashed (SHA-256) — cannot be reversed
License tokens use hardware-bound encryption (Windows DPAPI)
Audit logs use SHA-256 hash chaining (tamper-evident)

4.3 Data Retention

Data Type	Retention Period
License records	Duration of license + 7 years
Heartbeat logs	3 years
Audit log entries	10 years (legal requirement)
Hardware fingerprint	Indefinitely (fraud prevention)
Support communications	5 years
Payment records	7 years (tax compliance)

5. California Consumer Privacy Act (CCPA)

As a California-headquartered company, we comply with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

5.1 Your California Privacy Rights

Know: What personal information we collect and how it is used
Delete: Request deletion of personal information we hold about you
Correct: Request correction of inaccurate personal information
Opt-Out: Opt out of the sale or sharing of personal information
Non-Discrimination: Receive equal service regardless of exercising privacy rights
Limit Sensitive Data: Limit use of sensitive personal information

5.2 We Do NOT Sell Personal Data

ALORPIT does not sell personal information to third parties. We do not share personal information for cross-context behavioral advertising.

5.3 Submitting a CCPA Request

Email: contact@alorpit.com
Mail: ALORPIT INC., Attn: Privacy Officer, Oxnard, CA
Response Time: We will respond within 45 days

5.4 Categories of Personal Information (12-Month Collection)

Category	Collected	Sold
Identifiers (Store ID, email)	YES	NO
Hardware identifiers	YES	NO
Commercial information (subscription)	YES	NO
Internet/network activity (heartbeat logs, anonymous site analytics)	YES	NO
Geolocation data	NO	NO
Biometric data	NO	NO
Customer personal records	NO	NO

6. Children's Privacy

ALORPIT is a business website and software product not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided information to us, contact contact@alorpit.com.

7. Third-Party Services

ALORPIT integrates with the following third-party services. When these are used, their own privacy policies also apply:

Service	Purpose	Their Privacy Policy
Google My Business	Review management	policies.google.com/privacy
Twilio	Optional SMS integration for the AI phone assistant feature — only active if a store owner enables it with their own Twilio account. Not used for centralized platform messaging.	twilio.com/legal/privacy
Fiserv / CardPointe	Payment processing for ALORPIT subscriptions	fiserv.com/privacy-policy
Firebase (Google)	License server	firebase.google.com/support/privacy
Google Workspace (Gmail)	Email service	policies.google.com/privacy
Google Fonts	Web fonts loaded on this site	policies.google.com/privacy

ALORPIT is not responsible for the privacy practices of these third parties.

8. Data Breach Notification

In the event of a data breach affecting your personal information, ALORPIT will:

Notify you within 72 hours of discovery (per Cal. Civ. Code § 1798.29)
Provide a clear description of the breach and affected data
Describe steps taken to mitigate harm
Provide guidance on protective measures

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via in-software notification, email to your registered address (if provided), and a posted notice on this page. Changes are effective 30 days after posting unless required immediately by law.

10. Contact Us

Privacy Officer: ALORPIT INC.
Email: contact@alorpit.com
Address: Oxnard, California
Phone: (805) 850-3534

If You're Just Browsing This Website