Privacy Policy
Last updated: January 1, 2026
1. Your Data, Your Control
At ALVEA, we believe your data belongs to you. This Privacy Policy explains how we collect, use, protect, and handle your information when you use our services.
2. Information We Collect
Account Information
- Practice name, address, and contact information
- User names and email addresses
- Billing and payment information
Service Data
- Voice Services: Call recordings, transcriptions, and call metadata
- CBCT Imaging: Uploaded DICOM files, generated 3D models, and measurements
- Dashboard: Usage analytics, workflow configurations, and preferences
Protected Health Information (PHI)
When you use our services to process patient information, we act as your Business Associate under HIPAA. PHI is handled in accordance with our HIPAA Compliance policies.
3. How We Use Your Information
- To provide and maintain the Service
- To process voice calls and generate transcriptions
- To process CBCT scans and generate 3D visualizations
- To send service-related communications
- To improve our services and develop new features
- To comply with legal obligations
4. Data Storage and Security
Your data is stored in secure, US-based data centers with enterprise-grade security measures including:
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Role-based access controls
- Regular security audits and penetration testing
- Automated backup and disaster recovery
5. Data Sharing
We do not sell your data. We may share data only:
- With service providers: Cloud hosting (Supabase, Railway), language processing (Anthropic), voice services (Twilio, ElevenLabs) - all under data processing agreements
- For legal compliance: When required by law, subpoena, or legal process
- With your consent: When you explicitly authorize sharing
6. Data Retention
- Account data is retained while your subscription is active
- Call recordings and transcriptions are retained according to your settings
- CBCT data is retained until you delete it or close your account
- Upon account closure, you may export your data; we delete it within 30 days
7. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Export: Export your data in standard formats
- Restrict: Limit how we use your data
8. Cookies and Analytics
We use essential cookies for authentication and session management. We use privacy-respecting analytics to understand how our service is used. We do not use third-party advertising cookies.
9. Children's Privacy
Our Service is intended for dental professionals and is not directed at individuals under 18. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or through the Service. Continued use after changes constitutes acceptance.
11. Contact Us
Questions about privacy? Contact us at: