LEGAL
Privacy Policy
Last updated: June 4, 2026
Overview
Advanced Laser Restoration, LLC (“ALR,” “we,” “us”) operates the ALR Franchisee Portal (the “Service”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. By using the Service you agree to the practices described here. If you do not agree, please discontinue use of the Service.
1. Information We Collect
\u2022 Account data — name, email, phone, company name, role (franchisee, employee, machine owner, prospect, rental customer), and the laser model you own.\n \u2022 Authentication data — password hashes (we never store the plaintext password), JWT session tokens, and device push-notification tokens (FCM/APNs).\n \u2022 Usage data — the pages you visit, AI prompts and responses, quotes you build, training-quiz answers, certificate uploads, and community posts.\n \u2022 Device & log data — IP address, browser/app version, OS, crash logs, and access timestamps.\n \u2022 Payment data — when you make a purchase through the ALR Store, our payment processors (Intuit QuickBooks Payments and/or Stripe) collect your card or ACH details directly. We receive only a confirmation of payment and the last four digits of the card.\n \u2022 Optional content — photos, videos, COI documents, or other files you choose to upload.
2. How We Use Your Information
We use your information to:\n \u2022 Provide the Service, including authenticated access, AI assistance, training, and community.\n \u2022 Verify identity, prevent fraud, and enforce role-based access.\n \u2022 Process payments and reconcile ALR Store orders.\n \u2022 Send transactional emails (setup links, password resets, account changes) and operational push notifications. You may opt out of marketing-style communications at any time.\n \u2022 Improve safety — e.g., flagging expired LSO certificates or insurance.\n \u2022 Comply with legal and franchise-agreement obligations.
3. AI Processing
When you interact with the AI Cleaning Helper, AI Sales Coach, or Marketing Coach, your prompts (and selected context from your account, such as your laser model) are sent to third-party AI providers (currently Anthropic Claude and, where applicable, OpenAI) under data-processing terms that prohibit those providers from using your prompts to train their public foundation models. We do not sell AI inputs or outputs.
4. How We Share Information
We share information only as needed to run the Service:\n \u2022 With your franchisee (for franchisee_employee accounts) or your primary Machine Owner (for sub-member accounts) for legitimate business administration.\n \u2022 With our service providers: hosting (Emergent/AWS), database (MongoDB Atlas), AI (Anthropic, OpenAI), email (Resend), payment processing (Intuit QuickBooks, Stripe), push notifications (Firebase/SuprSend), and analytics. These providers process your data only on our behalf and under written contracts.\n \u2022 When required by law, court order, or to protect rights and safety.\n \u2022 In connection with a corporate transaction (e.g., merger or sale), subject to confidentiality.\n \u2022 We do NOT sell personal information.
5. Data Retention
We retain account data for as long as your account is active and for a reasonable period afterward to satisfy tax, legal, and franchise-record obligations. Community posts and AI conversations may be retained in soft-deleted form for audit purposes. You may request earlier deletion as described below.
6. Security
We use industry-standard safeguards: encryption in transit (TLS), encrypted database storage, bcrypt password hashing, JWT session tokens, signed URLs for sensitive downloads, and role-based access control. No system is perfectly secure, but we maintain reasonable measures and will notify you of any breach affecting your data to the extent required by law.
7. Your Choices and Rights
Depending on where you live (e.g., California, Virginia, EU/UK), you may have the right to: (a) request a copy of your data; (b) correct inaccurate data; (c) request deletion; (d) opt out of certain processing; (e) lodge a complaint with a regulator. To exercise any of these rights, email Linking.openURL(`mailto:$privacy@alrclean.com`)}> privacy@alrclean.com . We will respond within 30 days. We will verify your identity before fulfilling requests.
8. Children
The Service is intended for business users 18 years and older. We do not knowingly collect personal information from anyone under 13. If you believe a minor has provided us data, contact us and we will delete it.
9. International Users
The Service is operated from the United States. If you access it from outside the U.S., you consent to the transfer and processing of your data in the U.S., which may have data-protection laws different from those of your country.
10. Push Notifications
Mobile apps may request permission to send push notifications. You can revoke this permission at any time in your device settings. Notifications are used for time-sensitive matters such as certificate expirations, payment confirmations, and community mentions.
11. Cookies and Local Storage
The web version of the Service uses essential cookies and local storage to keep you signed in and remember preferences. We do not use third-party advertising cookies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced in the Service or by email. The “Last updated” date at the top reflects the latest revision.
13. Contact
Questions about this Privacy Policy? Contact our privacy team at Linking.openURL(`mailto:$privacy@alrclean.com`)}> privacy@alrclean.com or general support at Linking.openURL(`mailto:$support@alrclean.com`)}> support@alrclean.com .