Privacy Policy
Alevare Group Inc. (“Alevare,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at www.alevaregroup.com, our mobile applications (Alevare PRP Client and Alevare PRP Internal), and our web portals at app.alevaregroup.com and internal.alevaregroup.com (collectively, the “Services”).
Please read this policy carefully. By using our Services, you agree to the practices described here. If you do not agree, please discontinue use of our Services.
- 01
Who We Are
Alevare Group Inc. is a luxury hotel room restoration and preventative maintenance company headquartered at:
Alevare Group Inc.210 172nd Street, Apt. 244Sunny Isles Beach, FL 33160United StatesEmail: info@alevaregroup.com - 02
Information We Collect
2.1 Information You Provide Directly
When you use our Services, you may provide:
- Account registration information: name, email address, job title, and password
- Business information: hotel property name, location, and contact details
- Communications: messages sent through the in-app messaging system
- Service inquiries and proposal requests submitted through our website
2.2 Information Collected Automatically Through the Mobile Apps
When you use the Alevare PRP mobile applications, we automatically collect:
- Device information: device type, operating system, unique device identifiers
- App usage data: screens visited, features used, session duration, and interaction logs
- Push notification tokens: device tokens used to deliver push notifications
- Authentication data: login timestamps and session tokens (via Firebase Authentication)
- IP address and general geographic location
2.3 Photos and Media
With your permission, our mobile apps access:
- Camera: to capture photos of hotel rooms and restoration work
- Photo library: to select and upload existing images
Photos are uploaded to and stored in Google Firebase Storage. They are used exclusively for documenting hotel room restoration work within the Perfect Room Program (PRP). You may revoke camera and photo library permissions at any time in your device settings.
2.4 Information Collected Through Our Web Portals
When you use our web portals, we collect:
- Login credentials and session information
- Browser type, operating system, and IP address
- Pages visited and actions taken within the portal
- Cookies and similar tracking technologies (see Section 6)
2.5 Business Operations Data
As part of providing the Perfect Room Program service, we collect and process:
- Hotel room status information, restoration stage data, and cycle records
- Inspection reports, quality control records, and housekeeping handoff documentation
- Out-of-scope approval requests, cost estimates, and approval decisions
- Audit logs of all actions taken within the platform (immutable records)
- Stage history, photo documentation, and escalation records
2.6 Employee and Contractor Data
The Alevare PRP Internal application collects data about Alevare Group employees and contractors including field supervisors, QA inspectors, and management personnel. This data includes name, email address, role, login activity, and actions performed within the platform. This data is collected solely for operational purposes — to track work performed, maintain accountability, and generate audit trails. Alevare employees consent to this collection as a condition of using the Internal App in their professional capacity.
- 03
How We Use Your Information
We use the information we collect to:
Service Delivery
- Provide, operate, and maintain the Perfect Room Program platform
- Enable real-time communication between Alevare staff and hotel clients
- Process and track room restoration workflows across all six stages
- Send push notifications for approvals, escalations, and room status updates
- Generate reports, analytics, and documentation for hotel properties
Account Management
- Create and manage user accounts with appropriate role-based access
- Authenticate users and maintain secure sessions
- Route users to the correct application based on their assigned role
Business Operations
- Maintain immutable audit trails of all platform actions for legal and compliance purposes
- Process out-of-scope approval workflows between Alevare staff and hotel directors
- Schedule and manage PRP cycles, follow-up reminders, and property lifecycles
Communications
- Respond to inquiries, proposals, and service requests
- Send operational notifications related to your account and active restoration projects
- Provide customer support
Improvement and Analytics
- Monitor platform performance and fix technical issues
- Analyze usage patterns to improve our Services
- Conduct internal research and development
- 04
How We Share Your Information
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
4.1 Service Providers
We share information with trusted third-party providers who help us operate our Services, including:
- Google Firebase(Authentication, Firestore database, Cloud Storage, Cloud Messaging) — for data storage, authentication, and push notifications. Firebase is governed by Google’s Privacy Policy at firebase.google.com/support/privacy.
- Expo (EAS Build and push notification delivery service) — for mobile app distribution and push notification routing. Governed by expo.dev/privacy.
- Apple Inc. — for iOS app distribution through TestFlight and the App Store. Governed by apple.com/legal/privacy.
- Google LLC — for Android app distribution through Google Play. Governed by policies.google.com/privacy.
4.2 Hotel Clients
Information shared within the platform (room status, photos, inspection reports, approvals) is visible to authorized personnel at the hotel property associated with your account. This sharing is core to the service and is governed by the separate service agreement between Alevare Group and the hotel property.
4.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify affected users prior to any such transfer.
- 05
Data Ownership
5.1 Hotel Client Data
Hotel properties enrolled in the Perfect Room Program retain ownership of their property-specific data, including room records, inspection reports, approval decisions, and related documentation (“Client Data”). Alevare Group acts as a data processor for Client Data on behalf of the hotel property. We do not use Client Data for any purpose other than providing the Perfect Room Program service to that property. Upon termination of the service agreement, hotel clients may request an export of their Client Data within 90 days of termination.
5.2 Photo Ownership
Photos uploaded by Alevare Group personnel during the course of restoration work are owned by Alevare Group and are used to document work performed for the hotel client. By uploading photos through the platform, Alevare staff grant Alevare Group a perpetual license to use those photos for service delivery, documentation, and quality assurance purposes. Hotel clients receive a non-exclusive license to use photos documenting their property’s restoration work for their internal property management purposes.
5.3 Platform Data
All platform infrastructure, software, algorithms, analytics models, and aggregate data (data that does not identify any individual property or person) are owned exclusively by Alevare Group Inc. Hotel clients and individual users do not acquire any ownership interest in the platform.
- 06
Data Storage and Security
6.1 Where Your Data Is Stored
Your data is stored on Google Firebase infrastructure, located primarily in the United States (us-east1 region). By using our Services, you consent to the transfer of your information to the United States.
6.2 Security Measures
We implement industry-standard security measures including:
- Firebase Authentication for secure login and session management
- Role-based access control — each user can only access data appropriate for their role
- Firestore security rules that enforce write and read restrictions at the database level
- Firebase Storage security rules that restrict photo access to authenticated users
- HTTPS encryption for all data transmitted between devices and our servers
- Immutable audit logs that cannot be altered or deleted
No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using commercially reasonable means.
- 07
Cookies and Tracking Technologies
Our website (www.alevaregroup.com) and web portals may use cookies and similar technologies to:
- Maintain your login session
- Remember your preferences
- Analyze website traffic and usage patterns
You can control cookies through your browser settings. Disabling cookies may affect the functionality of our web portals. Our mobile applications do not use cookies but use equivalent device-level identifiers for authentication and session management.
- 08
Push Notifications
Our mobile applications use push notifications to alert you about:
- New out-of-scope approval requests requiring your response
- Approval decisions made by hotel directors
- Escalation alerts when approvals exceed response time thresholds
- Room status updates including housekeeping handoffs and guest-ready confirmations
- Cycle scheduling reminders
Push notifications are delivered through Expo’s push notification service, which routes through Apple Push Notification Service (APNs) for iOS and Firebase Cloud Messaging (FCM) for Android. You can disable push notifications at any time in your device’s notification settings.
- 09
Data Retention
We retain your information as follows:
- Account data: retained for the duration of your account and for up to 7 years after account closure for legal and compliance purposes
- Room restoration records and audit logs: retained indefinitely as permanent operational records. Audit logs are immutable by design and cannot be deleted.
- Photos and media: retained for the duration of the associated property’s relationship with Alevare Group
- Archived properties and rooms: data is never permanently deleted — archived records are retained indefinitely for historical reference
- Push notification tokens: retained until refreshed at next login or revoked by the user
You may request deletion of your personal account data by contacting us at info@alevaregroup.com. Note that audit logs and operational records may be retained for legal and business continuity purposes even after account deletion.
- 10
Your Rights and Choices
10.1 Access and Portability
You may request a copy of the personal information we hold about you by contacting info@alevaregroup.com.
10.2 Correction
You may request that we correct inaccurate personal information. Account administrators can update user information directly within the platform.
10.3 Deletion
You may request deletion of your personal account information. Note that certain operational records (audit logs, restoration records) are retained for legal and business purposes as described in Section 9.
10.4 Opt-Out of Push Notifications
You may disable push notifications at any time through your device settings without affecting your ability to use the core platform features.
10.5 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at info@alevaregroup.com.
10.6 European Residents (GDPR)
If you are located in the European Economic Area, you have rights under the General Data Protection Regulation including the right to access, rectify, erase, restrict processing, and data portability. Our legal basis for processing is legitimate interests (providing our contracted services) and contract performance. To exercise your rights, contact info@alevaregroup.com.
- 11
Disclaimer of Warranties
THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ALEVARE GROUP INC. EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. ALEVARE GROUP DOES NOT WARRANT THAT: (A) THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE; (B) ANY DATA WILL BE ACCURATE OR RELIABLE; (C) THE QUALITY OF ANY INFORMATION OR SERVICES OBTAINED THROUGH THE PLATFORM WILL MEET YOUR EXPECTATIONS; OR (D) ANY ERRORS IN THE SERVICES WILL BE CORRECTED.
Alevare Group is not responsible for any disruptions, delays, or failures resulting from causes outside our reasonable control, including failures of third-party services such as Google Firebase, Apple, or internet service providers.
- 12
Limitation of Liability
ALEVARE GROUP’S TOTAL LIABILITY IS LIMITED. PLEASE READ THIS SECTION CAREFULLY.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL ALEVARE GROUP INC., ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, CONTRACTORS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS, REVENUE, DATA, BUSINESS, GOODWILL, OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICES, EVEN IF ALEVARE GROUP HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IN NO EVENT SHALL ALEVARE GROUP’S TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES EXCEED THE GREATER OF: (A) THE TOTAL AMOUNT PAID BY YOU TO ALEVARE GROUP IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM; OR (B) ONE HUNDRED DOLLARS ($100.00).
Some jurisdictions do not allow the exclusion or limitation of certain warranties or liability. In such jurisdictions, our liability shall be limited to the greatest extent permitted by applicable law.
- 13
Force Majeure
Alevare Group shall not be liable for any failure or delay in performance of its obligations under this Privacy Policy or the Services to the extent such failure or delay is caused by circumstances beyond our reasonable control, including but not limited to: acts of God, natural disasters, pandemics, epidemics, war, terrorism, riots, government actions, power outages, internet or telecommunications failures, third-party service outages (including Google Firebase, Apple, or Expo), cyberattacks, or other similar events (“Force Majeure Events”).
In the event of a Force Majeure Event affecting our ability to protect or maintain your data, we will notify affected users as soon as reasonably practicable and take commercially reasonable steps to restore services and data security.
- 14
Dispute Resolution and Governing Law
14.1 Governing Law
This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of law provisions.
14.2 Mandatory Arbitration
IMPORTANT: THIS SECTION REQUIRES YOU TO RESOLVE DISPUTES THROUGH BINDING ARBITRATION RATHER THAN COURT.Any dispute, claim, or controversy arising out of or relating to this Privacy Policy, the Services, or the breach, termination, enforcement, interpretation, or validity thereof (collectively, “Disputes”) shall be resolved exclusively through final and binding arbitration, rather than in court.
Arbitration shall be conducted by a single arbitrator under the Commercial Arbitration Rules of the American Arbitration Association (AAA), as modified by this section. The arbitration shall take place in Miami-Dade County, Florida. The arbitrator’s decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction.
YOU AND ALEVARE GROUP EACH WAIVE ANY RIGHT TO A JURY TRIAL AND WAIVE THE RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT OR CLASS-WIDE ARBITRATION.
Notwithstanding the above, either party may seek emergency injunctive relief from a court of competent jurisdiction in Miami-Dade County, Florida to prevent irreparable harm pending arbitration.
14.3 Time Limitation on Claims
Any claim arising out of or related to this Privacy Policy or the Services must be filed within one (1) year after the claim arose, or it will be permanently barred. This limitation applies regardless of any statute of limitations to the contrary.
14.4 Venue
For any matters not subject to arbitration, you consent to the exclusive jurisdiction and venue of the state and federal courts located in Miami-Dade County, Florida.
- 15
Children’s Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at info@alevaregroup.com and we will take steps to delete such information.
- 16
Third-Party Services and Links
Our Services may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. Key third-party services we use include:
- Google Firebase — firebase.google.com/support/privacy
- Apple App Store / TestFlight — apple.com/legal/privacy
- Google Play Store — policies.google.com/privacy
- Expo — expo.dev/privacy
- 17
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised “Last Updated” date. For material changes, we will provide notice through the app or by email at least 30 days before the changes take effect. Your continued use of our Services after the effective date constitutes acceptance of the updated policy.
- 18
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Alevare Group Inc.210 172nd Street, Apt. 244Sunny Isles Beach, FL 33160United StatesEmail: info@alevaregroup.comWebsite: www.alevaregroup.comWe will respond to all privacy-related inquiries within 30 days.
© 2026 Alevare Group Inc. All rights reserved. | Version 2.0 — May 15, 2026