Privacy Policy

Alcovia, Inc. ("Company," "we," "us," or "our") is committed to protecting the privacy of users of the Alcovia platform. This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you use our website, mobile application, and related services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.

Account Information: When you create an account, we collect your full name, email address, business name, phone number (optional), and password. If you sign up through a third-party authentication provider, we receive your name and email from that provider.

Payment Information: When you purchase project files, we collect billing information including credit or debit card details, billing address, and transaction history. Payment card data is processed and stored by our PCI-compliant third-party payment processor (Stripe, Inc.) and is not stored on our servers.

Scan and Project Data: When you use the Service, we collect LiDAR scan data, 3D spatial models, design inputs (text prompts, reference images, material selections), generated renders, measurement data, material takeoff reports, and exported presentations. This data is necessary to provide the core functionality of the Service.

Device and Usage Information: We automatically collect device information (device type, operating system, LiDAR sensor model, screen resolution), IP address, browser type, referring/exit pages, date and time stamps, clickstream data, feature usage patterns, and crash reports.

Communications: When you contact our support team or respond to surveys, we collect the content of those communications along with associated metadata.

We use the information we collect for the following purposes:

• Providing, maintaining, and improving the Service, including processing LiDAR scans, generating 3D models, applying AI design modifications, producing photorealistic renders, calculating measurements, and creating material takeoffs
• Processing payments and managing your account
• Communicating with you about your account, transactions, service updates, and responding to your inquiries
• Training and improving our AI models to enhance the quality and accuracy of design outputs, measurements, and renders (using aggregated and de-identified data)
• Analyzing usage patterns to improve user experience, identify bugs, and optimize performance
• Detecting, preventing, and addressing fraud, security incidents, and technical issues
• Complying with legal obligations, responding to lawful requests from public authorities, and protecting our rights and the rights of others
• Sending you marketing communications about new features, promotions, or related products (with your consent, where required by law)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing your personal information include: (a) performance of our contract with you (providing the Service); (b) our legitimate interests (improving the Service, fraud prevention, security); (c) your consent (marketing communications, cookies); and (d) compliance with legal obligations.

We do not sell your personal information. We may share your information with the following categories of third parties:

• Service providers: Cloud hosting providers (for data storage and processing), payment processors (Stripe, Inc., for payment handling), AI processing services (for model inference), analytics providers (for usage analysis), and email service providers (for transactional and marketing communications)
• Professional advisors: Attorneys, accountants, and auditors as necessary for business operations
• Legal compliance: Government authorities, law enforcement, or other third parties when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity

All third-party service providers are contractually obligated to protect your information, process it only for specified purposes, and maintain appropriate security measures.

We retain your account information for as long as your account is active. Scan data, project files, and AI Outputs are retained for the duration of your account plus 90 days following account deletion to allow for data recovery requests. Payment records are retained for 7 years to comply with tax and accounting obligations. Aggregated and de-identified data used for AI model training may be retained indefinitely. You may request deletion of your data at any time by contacting [email protected].

We implement industry-standard technical and organizational security measures to protect your personal information, including: encryption of data in transit (TLS 1.3) and at rest (AES-256), access controls and authentication requirements for internal systems, regular security assessments and penetration testing, employee security training, and incident response procedures. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to certain exceptions
• Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your personal information
• Objection: Object to processing of your personal information based on legitimate interests
• Withdrawal of consent: Withdraw consent for processing where consent is the legal basis
• Non-discrimination: Exercise your rights without receiving discriminatory treatment

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale or sharing of your personal information (we do not sell personal information), and the right to non-discrimination. To exercise these rights, contact us at [email protected] or call us at the number provided on our website.

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer personal information internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your information receives an adequate level of protection.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us at [email protected].

We use cookies and similar tracking technologies as described in our separate Cookie Policy. Please refer to our Cookie Policy for detailed information about the types of cookies we use, their purposes, and how to manage your cookie preferences.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website, updating the "Last updated" date, and sending an email notification to the address associated with your account. Your continued use of the Service after such notification constitutes acceptance of the updated policy.

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Alcovia, Inc.
Data Protection Inquiries
Email: [email protected]
General inquiries: [email protected]