Alan AI
Privacy Policy
Effective Date: May 1, 2024
Data Security and Privacy in Different Deployment Models
At Alan AI, we offer the flexibility of deploying our GenAI platform via traditional SaaS, air-gapped private clouds, or VPCs to meet diverse security and compliance requirements. Depending on the deployment model you choose:
- SaaS: Data is hosted on our secure cloud servers with encrypted data transfers and robust cybersecurity measures compliant with industry standards.
- Private Cloud: Allows for physical and network isolation, providing enhanced security controls that you manage according to your internal policies and compliance needs.
- Virtual Private Cloud (VPC): Combines the scalability of cloud resources with the isolation of a private environment, hosted within our infrastructure but isolated from other tenants.
For all models, Alan AI commits to:
- Employ industry-standard practices and certifications to protect your data.
- Allow you to control access and set permissions at granular levels.
- Ensure that data handling practices comply with applicable laws, including GDPR and CCPA, where relevant.
Privacy Policy for Alan AI platform offered as a SaaS
This Privacy Policy describes the personal data handling policies of Alan AI as a controller in connection with its services, applications, and its website at alan.app (the “Website”; the Website collectively with our services and applications, the “Services”).
This Privacy Policy does not address the privacy practices of Alan AI’s customers who integrate the Alan services into their applications or websites (each, a “Site”, and Alan AI’s customer, a “Site Operator”), on whose behalf Alan AI acts as a processor of any personal data of the Site Operator’s authorized users (“Site Users”). If you are a Site User using the Alan AI Services as provided by the Site Operator, please understand that Alan AI and the Site Operator are independent parties, and Alan AI has limited or no control over the Site Operator’s privacy practices. Please review the privacy policy of such Site Operator to understand the Site Operator’s practices and direct any questions or concerns to the Site Operator contact.
For an overview of how the Alan AI’s agent queries and voice processing services work, please visit alan.app/security-by-design.
This Privacy Policy describes the following:
- What personal data we collect from Users;
- How we use the data;
- With whom we may share the personal data;
- Legal basis for processing the data;
- Storage and security of your data;
- Your Privacy Rights, Choices and Disclosures, including those for Europe and California;
- Users outside the United States;
- What personal data we collect from Users;
- Third-Party Sites, Privacy Policy updates, and Contact Information.
Personal Data We Collect or Process
We collect information that you provide directly to us. Alan AI collects the information that you provide to us when you sign up to receive newsletters, advisories, announcements, and invitations, contact us by email, or register to become customers. We collect information from Users for the purpose of purchasing subscriptions for our services, including the following:
- Username (single sign-on with Google or Github)
- Password (single sign-on with Google or Github)
- Email address
- Name
- Contact information for billing purposes
- Company affiliation
- Payment card information if you want to purchase services
We collect some information using background storage technologies (“cookies”). We use Google Analytics, a web analytics service of Google Inc. (“Google”) which uses cookies to identify the frequency of use of certain areas of our website and to identify preferences. For more information regarding how Google collects, uses, and shares your information, please visit their website at http://www.google.com/policies/privacy/partners/. The information regarding your use of the Website that is generated by the cookie (including your truncated IP address) is transferred to a Google server in the United States and stored there. Google will use this information to analyze your use of the website, compile reports on activity for us, and perform further services associated with website use and Internet use. Google may also transmit this information to third parties where required by law or to the extent that third parties process these data on behalf of Google. You can deactivate Google Analytics using a browser add-on if you do not wish the analysis to take place. You can download the add-on here: https://tools.google.com/dlpage/gaoptout?hl=en
We operate social media pages on third party networks and have social media icons on our Website. When you visit or link to our social media pages, data is processed both by us and the applicable social media provider. Social media providers are unaffiliated with us, and we are not responsible for the content or privacy practices of social media providers. Social media providers have their own terms of use and privacy policies, and we encourage you to review those policies whenever you visit their websites or interact with their platforms.
The Site Operator may process additional data from its Site Users. For example, Alan AI has tools that enable developers of the Site to collect:
- User queries in the AI agent;
- Voice samples with the appropriate context of the application;
- Site Users’ device location;
- Conversation duration;
- Company affiliation
provided, however, that the data handling practices of the Site Operator with respect to the Site Users is beyond the scope of this Privacy Policy, and Alan AI has limited or no control over the Site Operator’s privacy practices.
While Alan AI will process User queries, voice commands and statements from Site Users, Alan AI does so as a processor to the Site Operator and in accordance with its contractual obligations to the Site Operator. Alan AI anonymizes the voice streams of the Site Users who interact with the Alan speech services.
We do not knowingly collect information from users of our Site under the age of 18 and/or their internet usage, and such persons are not authorized to use the Services.
How We Use the Data
We use the personal data we collect to respond to your inquiries, complete transactions you initiate, provide or enhance the services you request, perform our contractual obligations, provide updates and other important information related to your activity on and with the Services, inform you of new services or changes in Services, administer the Services, enter into contracts for services, to fulfill legal obligations we have to governmental authorities or other third parties, and for other legitimate business purposes. You may opt out of any electronic marketing communications you may receive from us by contacting us.
With Whom We Share Personal Data
Alan AI shares your personal data to third parties (within or outside your country of residence) who perform services on our behalf, including without limitation our cloud service providers, payment processor, technology providers, professional services subcontractors, collection agencies and professional advisors.
We may disclose information (within or outside your country of residence) if we have a good faith belief that disclosure is necessary by law or the legal process, to protect and defend our or others’ interests or property, or to enforce agreements you enter into with us.
Your information may be transferred to another company (within or outside your country of residence) in connection with a merger or in the event that our business is acquired in whole or part by another company.
We may share aggregated and de-identified information with third parties (within or outside your country of residence) for analytical, research or other similar purposes.
The Site Operators may elect to share information about its users at its own discretion (and subject to its own privacy policies). Alan AI has limited to no control over all such Site Operators’ privacy practices.
Alan AI may obtain your written consent from time to time in electronic form by using online agreements or other acknowledgements on the Services, including for any other contemplated uses of your personal data not addressed in this Privacy Policy. Please read all online agreements carefully before accepting them.
Grounds for Using Your Personal Data
We rely on the following legal grounds to process your personal information:
Consent. Some uses of your personal data as described in this Privacy Policy are subject to your consent, such as marketing email communications. You may unsubscribe from any marketing communications. You may also refrain from providing, or withdraw, your consent for Cookies via your browser settings.
Performance of a contract. We may need to collect and use your personal information to enter into a contract with you and to perform Services that you request.
Legitimate Interests. We may use your personal information for our legitimate interests to provide our Services and to improve our Services and the content contained thereon. We may use technical information as described in this Privacy Policy and use personal information for our marketing purposes consistent with our legitimate interests and any choices that we offer or consents that may be required under applicable law.
Compliance with Legal Obligations. We may use your personal information as necessary to comply with our legal obligations.
Storage and Protection of Your Personal Data
We retain the personal data we collect for so long as reasonably necessary to fulfill the purposes for which the data was collected and to perform our contractual and legal obligations. Notwithstanding the generality of the foregoing, we store email addresses until you request to be unsubscribed or remove yourself through any self-service tools offered through the Services.
We take reasonable administrative, physical and technical precautions to protect your personal data and communications between us. This includes, when required or as we deem appropriate and feasible under the circumstances, encryption and written commitments from third parties that may have access to your data that they will protect the data with reasonable safeguards.
As for payment cards, Alan AI does not retain full payment card numbers. Rather Alan AI retains non-sensitive payment data, such as customer contact information, last four digits of the card number, details of the subscriptions and services purchased, and sufficient records of authorized credit transactions to verify that a subscription is in good standing.
No Internet or e-mail transmission is ever fully secure or error-free, however. We therefore cannot guarantee the absolute security of your data, and we are not responsible for processes and networks that we do not control. Users assume the risk of security breaches and the consequences resulting from them. Please be careful in deciding what information you send to us via email or over the Internet.
Your Rights, Choices, and Disclosures
- GeneralTThis section is subject to specific disclosures on privacy rights set forth below. We are committed to facilitating the exercise of your rights granted by the laws of your jurisdiction, which may include the right to request the correction, modification, or deletion of your personal information and the right to opt-out of the sale of your personal information (as applicable). We will do our best to honor your requests subject to any legal and contractual obligations. If you would like to make a request, cancel your account, or request we delete or no longer use your account information to provide you Services, contact us at sales@alan.app or make changes to any user profile information connected to your account.You may opt-out of receiving electronic marketing communications from us by clicking on the “unsubscribe” link in the communication or by contacting us at sales@alan.app. Some non-marketing communications may not be subject to general opt-outs, such as communications about transactions, disclosures to comply with legal requirements, software updates, and other support-related information. If you do not wish to receive any service-related emails from us, you have the option to deactivate your account.Subject to local law, you may have additional rights under the laws of your jurisdiction regarding your personal data, such as the right to complain to your local data protection authority.You can deactivate Google Analytics using a browser add-on if you do not wish the analysis to take place. You can download the add-on here: https://tools.google.com/dlpage/gaoptout?hl=en
- Your European Privacy Rights and ChoicesIf you reside or otherwise find yourself in the territory of Europe, your privacy rights under the European data protection law include:
- Transparency and the right to information. Through this policy, we explain how we use and share your information. However, if you have questions or need additional information you can contact us any time.
- Right of access, restriction of processing, erasure. You may contact us to request information about the personal data we have collected from you and to request the correction, modification or deletion of such personal information, which requests we will do our best to honor subject to any legal and contractual obligations.
- Right to withdraw your consent at any time. When we process your personal data based on your consent, you have the right to withdraw it at any time.
- Right to object at any time. You have the right to object at any time to receiving marketing or promotional materials from us by either following the opt-out instructions in commercial e-mails or by contacting us, as well as the right to object to any processing of your personal data based on your specific situation. In the latter case, we will assess your request and provide a reply in a timely manner according to our legal and contractual obligations. Some non-marketing communications are not subject to general opt-outs, such as communications about transactions and disclosures to comply with legal and contractual requirements.
- Right to data portability. You have the right to data portability of your own personal data by contacting us.
- Right not to be subject to an automated decision, including profiling. We do not make automated decisions using your personal data that may negatively impact you.
- Right to lodge a complaint with a supervisory authority. If you consider that the processing of your personal data infringes your privacy rights according to the European Privacy Regulation, you have the right to lodge a complaint with a supervisory authority, in the member state of your habitual residence, place of work, or place of the alleged infringement.
- California DisclosuresCalifornia “Shine the Light” Information-Sharing Disclosure: California residents may request a list of all third parties with respect to which we have disclosed any information about you for direct marketing purposes and the categories of information disclosed. If you are a California resident and want such a list, please send us a written request by email to sales@alan.app with “California Shine The Light Rights” in the subject line.California Do Not Track Disclosure: The Website does not recognize Do Not Track browser signals. Site Operators may have their own independent policies with respect to Do Not Track.California Consumer Privacy Act Disclosures. Alan AI is not a “business” under the CCPA.You can deactivate Google Analytics using a browser add-on if you do not wish the analysis to take place. You can download the add-on here: https://tools.google.com/dlpage/gaoptout?hl=en
Users Outside the United States
The Services are headquartered in the United States, although our cloud platform has servers in the European Union and Asia for our non-U.S. customers. If you are an individual from the European Union, Canada, or any other jurisdiction with laws or regulations governing personal data collection, use, and disclosure that differ from United States laws, please be advised that we may process the information we collect in the United States which is not deemed an “adequate jurisdiction” by the European regulatory authorities. Personal data may also be transferred from the country of your residence to other countries, including the United States.
Third-Party Sites
Our Services may contain links to other websites (“Linked Sites”) for your convenience or information. Linked Sites, as well as Sites, are operated by companies or organizations unaffiliated with Alan AI, and we are not responsible for the content or privacy practices of those sites. Linked Sites and Sites may have their own terms of use and privacy policies, and we encourage you to review those policies whenever you visit the websites.
Privacy Policy Changes
We may update this Privacy Policy from time to time and without prior notice to you to reflect changes in our information practices, and any such amendments shall apply to information already collected and to be collected. Your continued use of the Services after any changes to our Privacy Policy indicates your agreement with the terms of the revised Privacy Policy. Please review this Privacy Policy periodically and especially before you provide personal data to us. If we make material changes to this Privacy Policy, we will notify you here, by email, or by means of a notice on our home page. The date of the last update of the Privacy Policy is indicated at the top of this Privacy Policy.
Questions and Contact Information
Please contact us if you have any questions about our Terms of Service. You may contact us by sending correspondence to the address below or by emailing us at sales@alan.app.
Alan AI, Inc.
1290 Reamwood Avenue, Suite B
Sunnyvale, CA 94089
Attention: Alan Legal