Privacy Policy

Information We Collect

We collect only what we need to respond to you and deliver our services. Depending on how you interact with us, this includes:

• Contact details — full name, email address, phone number, company or organization name.
• Intake responses — text and voice responses to the questions in our Start Your Assessment intake, including free-form descriptions of your business, workflows, systems, and operational challenges.
• Session metadata — a unique session token we issue to you, timestamps, and a record of which intake questions you have answered.
• Transactional messages — any emails you send us and any emails we send you in the normal course of the engagement.
• Basic technical data — standard request information such as browser type, device type, and general geography for reliability and security purposes.

We do not use third-party advertising or behavioral tracking cookies on this site.

How We Use Your Information

We use the information you provide to:

• Respond to inquiries and communicate with you about potential or active engagements.
• Operate the intake process — storing your responses, generating your executive summary, issuing your session token, and scheduling kickoff meetings.
• Deliver operational systems consulting services under a separate engagement agreement if you become a client.
• Improve our services and the quality of the intake process.
• Comply with legal obligations and enforce our Terms of Service.

We do not use your information to train third-party machine learning models, and we do not sell or rent your personal information to anyone.

How We Store and Protect Your Information

Your information is stored on infrastructure provided by Amazon Web Services (AWS) and is protected by AWS encryption at rest and in transit, as referenced on our intake form. Access to stored information is limited to authorized Alera personnel who need it to perform their role and is controlled through individual staff credentials with audit logging.

We take reasonable technical and organizational measures to protect your information, including encryption, access controls, and regular review of our security posture. No system is ever perfectly secure, but we work to minimize risk and respond quickly if we identify a problem.

Third-Party Sharing

We do not sell, rent, or trade your personal information. We share it only in the following limited situations:

• Service providers (subprocessors) we rely on to operate, such as AWS for hosting and storage, and transactional email providers for messages we send you. These providers are bound by written agreements that restrict what they may do with your information.
• Legal obligations — if required by valid legal process, or where disclosure is necessary to protect Alera's rights, your safety, or the safety of others.
• Business transfers — in the unlikely event of a merger, acquisition, or asset sale, information may transfer as part of that transaction. You will be notified via email or a prominent notice on this site.

Your Rights

You have rights over your personal information, including:

• Access — request a copy of the information we hold about you.
• Correction — ask us to update information that is inaccurate or incomplete.
• Deletion — ask us to delete your information, subject to our legal obligations to retain certain records.
• Portability — request a structured, machine-readable copy of your information.
• Withdrawal of consent — withdraw any consent you previously gave for specific processing activities.
• Objection — object to processing we carry out based on legitimate interests.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that provides additional rights (such as California under the CCPA/CPRA), those additional rights apply to you. To exercise any of these rights, contact us using the details at the bottom of this page.

Data Retention

We keep your information for as long as it is needed for the purposes described in this policy, for the duration of any active engagement, and for a reasonable period afterward so we can respond to follow-ups, comply with legal or tax obligations, and maintain an accurate record of our work. When information is no longer needed, we take reasonable steps to delete it or anonymize it.

International Users

Alera is based in the United States. If you access our site or submit an intake from outside the United States, your information will be transferred to, stored in, and processed in the United States or in AWS regions where our infrastructure is hosted. Different data protection laws may apply. By using our site, you consent to that transfer where your consent is required by applicable law.

Children's Privacy

Our services are directed at businesses and their principals, not children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Updates to This Policy

We may update this policy to reflect changes in our practices, our services, or applicable law. When we do, we will update the effective date at the bottom of this page and, for material changes, provide additional notice before the new policy takes effect.

Contact Us

For questions about this policy, to exercise your rights, or to raise any data-related concern, reach us at privacy@alerasystems.co. For general inquiries, use the contact page.