Your privacy is our priority

We built allora with security and privacy at its core.

Encryption in Transit

All communication between your phone and our servers uses HTTPS with TLS encryption. SMS messages are transmitted through Twilio's secure infrastructure.

Secure Infrastructure

Hosted on Railway, a SOC 2 Type II audited cloud platform, with a managed PostgreSQL database.

Phone-Based Sign-In

You sign in with your phone number, so there is no allora account password to steal or forget.

Data Minimization

We only collect what we need to run allora: your phone number, the messages you send, and a few details like your timezone and billing email. See our Privacy Policy for the full list.

No Data Selling

We never sell your personal data or use your message content for advertising. We share data only with the providers that help run allora, as listed in our Privacy Policy.

Webhook Verification

All incoming webhooks (SMS, payments) are cryptographically verified to prevent spoofing and unauthorized access.

Our Security Practices

Data Handling

  • Your messages are processed by AI to create reminders and replies. Each AI provider handles that data under its own privacy policy and retention terms, and your phone number is never sent to them.
  • We never sell your data or share your message content with advertisers.
  • Your data is stored on servers in the United States.
  • Database connections are encrypted.

Third-Party Services

We use trusted third-party services with strong security track records:

  • Twilio - Enterprise-grade SMS infrastructure with SOC 2 compliance.
  • Stripe - PCI-DSS Level 1 certified payment processing. We never see or store your card details.
  • Railway - SOC 2 Type II audited cloud hosting and managed databases.
  • Anthropic, OpenAI, and Google - AI providers that handle what we send under their own privacy policies and data-retention terms. None of your data is used to train their models.

What We Don't Do

  • We don't track your location.
  • We don't read your messages for advertising.
  • We don't sell your data to third parties.
  • We don't store your payment card details (Stripe handles this).

Reporting Security Issues

If you discover a security vulnerability, please email hello@textallora.com. We appreciate responsible disclosure and will respond promptly.

Questions?

Have questions about our security practices? Contact us and we'll be happy to help.