Legal
Privacy Policy
Last updated: January 1, 2026
1. Your Data, Your Control
At ALVEA, we believe your data belongs to you. This Privacy Policy explains how we collect, use, protect, and handle your information when you use our services.
2. Information We Collect
Account Information
- Practice name, address, and contact information
- User names and email addresses
- Billing and payment information
Service Data
- Voice Services: Call recordings, transcriptions, and call metadata
- CBCT Imaging: Uploaded DICOM files and generated 3D models
- Dashboard: Usage analytics, workflow configurations, and preferences
Protected Health Information (PHI)
When you use our services to process patient information, we act as your Business Associate under HIPAA. PHI is handled in accordance with our HIPAA Compliance policies.
3. How We Use Your Information
- To provide and maintain the Service
- To process voice calls and generate transcriptions
- To process CBCT scans and generate 3D visualizations
- To send service-related communications
- To improve our services and develop new features
- To comply with legal obligations
4. Data Storage and Security
Your data is stored in secure, US-based data centers with enterprise-grade security measures including:
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Role-based access controls
- Regular security audits and penetration testing
- Automated backup and disaster recovery
5. Data Sharing
We do not sell your data. We may share data only:
- With service providers: Cloud hosting (Supabase, Railway), language processing (Anthropic), voice services (Twilio, ElevenLabs) - all under data processing agreements
- For legal compliance: When required by law, subpoena, or legal process
- With your consent: When you explicitly authorize sharing
Mobile information & SMS: No mobile information (phone numbers or SMS opt-in data) is shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are never sold or shared with any third party.
6. Data Retention
- Account data is retained while your subscription is active
- Call recordings and transcriptions are retained according to your settings
- CBCT data is retained until you delete it or close your account
- Upon account closure, you may export your data; we delete it within 30 days
7. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Export: Export your data in standard formats
- Restrict: Limit how we use your data
8. Cookies and Analytics
We use essential cookies for authentication and session management. We use privacy-respecting analytics to understand how our service is used. We do not use third-party advertising cookies.
9. Children's Privacy
Our Service is intended for dental professionals and is not directed at individuals under 18. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or through the Service. Continued use after changes constitutes acceptance.
11. SMS / Text Message Communications
Alvea sends operational, account-related SMS/text alerts — for example, notifications that a CBCT scan was uploaded, is ready to review, or failed to process — to account owners and their authorized staff who opt in within their Alvea account settings.
- Consent: You opt in to these alerts inside your alveaos.com account/notification settings. We do not collect consumer phone numbers for messaging.
- Message frequency varies based on account activity.
- Message and data rates may apply.
- Opt out at any time by replying STOP; reply HELP for help.
- No mobile information is shared with third parties or affiliates for marketing purposes. SMS opt-in and consent data are never sold or shared.
12. Contact Us
Questions about privacy? Contact us at: