This policy explains — in plain language — what AloraPay collects, why, and the control you have over it. No dense legalese, just a clear account of how we treat your information and your guests'.
Not to advertisers, not to data brokers, not to anyone. Full stop.
Payments are tokenized by PowerTranz. We never see or store full card numbers.
Access, export, or delete your information at any time — just ask.
This policy applies to two groups: the restaurants and operators who use AloraPay to run their venue, and the guests who scan a table QR to order and pay. We collect different information from each, and we treat both with the same care.
If you're a guest, the restaurant you're dining with is the owner of your order data. AloraPay processes it on their behalf — we don't build guest marketing profiles.
We collect only what's needed to take an order, settle a bill, and run the dashboard. Here's the full list, grouped by who it comes from.
Like most web services, we automatically log a small amount of technical data to keep the service secure and working: IP address, browser type, device type, and timestamps of activity. We use this for fraud prevention, debugging, and aggregate analytics — never to identify individual diners.
Every use of your data ladders up to running the platform. We never repurpose it for advertising.
You're in control of your information. At any time you can:
To exercise any of these, email privacy@alorapay.com and we'll respond within 30 days.
We keep data only as long as it's useful or legally required.
Questions about your privacy, or want to exercise a right? Reach our team directly.