Privacy policy

This policy covers allayr.com, this marketing site. Allayr is pre-launch and the product is not generally available, so the sections below describe the limited information we collect from site visitors, plus how the product is built to handle clinic data once a clinic is using it.

What we collect from this website

• Your email address and role, when you choose to give them to us through a form on this site. That’s the only personal information this website asks for.
• Which page you submitted from, so our follow-up is relevant rather than generic.
• Standard server and delivery logs kept by our hosting provider, including IP address and browser user agent, used to operate and secure the site.

We do not run advertising trackers or third-party analytics profiling on this site, and we do not sell, rent or trade your email address.

How we use it

To write back to you — usually a personal message about the Inner Circle — and to send occasional updates about what we’re building. Every email we send includes an unsubscribe link, and unsubscribing removes you from the list.

Who we share it with

We use a small number of service providers to run the site and our email:Vercel for hosting, and Buttondown for email. They process this information on our behalf and are not permitted to use it for their own purposes. We disclose personal information otherwise only where the law requires it.

Patient information in the product

Clinic and patient data handled by the Allayr product is separate from this website and is governed by the agreement with the clinic. In the product:

• Data is stored in Canada, in AWS ca-central-1.
• Access is enforced at the database level with row-level security, so one clinic’s records are not reachable from another clinic’s session.
• Access and actions are written to an append-only audit trail. Records are corrected by adding entries rather than by overwriting or hard-deleting history — which means a deletion request is handled as a documented process, not a single irreversible click.

As stated on our security page, we do not describe Allayr as PHIPA or PIPEDA compliant. That review is an active track and is not complete.

Retention

We keep the email address you give us until you unsubscribe or ask us to delete it, plus a short period in our backups afterwards. Server logs are retained on our hosting provider’s standard schedule.

Your choices

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email privacy@allayr.com and we’ll respond within 30 days. If you’re unhappy with how we’ve handled a request, you can contact the Office of the Privacy Commissioner of Canada.

Cookies

This site does not set advertising or tracking cookies. Any cookies present are set by our host and are necessary for the site to be served securely.

Changes

If we change this policy we’ll update the date at the top. Material changes affecting people already on our list will be sent by email rather than only posted here.

Contact

Questions about this policy: privacy@allayr.com.