Alann LLC, a Washington limited liability company, including its successors and assigns (collectively, “Company”), is committed to protecting the privacy of our customers’ personal information. This Privacy Policy applies with respect to the information that we collect through our websites, mobile applications, and any related services and products (collectively, the “Platform”).
I.Age Requirement
The Platform is intended only for users who are 18 years of age or older, as stated in our Terms of Service. We do not knowingly collect personal information from individuals under 18.
II.Collection of Personal Information
Personal information means any information that may be used to identify an individual. Because the Platform provides email, file, calendar, and related task-management services, the personal information we collect may include information necessary to provide those services.
Personal information may include your name, username, email address, phone number, physical address, account credentials or other authentication information, payment and transaction information (e.g., credit card, debit card, and bank information), which may include payment method information processed by our payment processors, device and usage information, approximate location information, support communications, and other information reasonably necessary to provide, operate, secure, support, or improve the Platform, or to provide the services, products, or support you request.
The categories of personal information we collect may include identifiers (such as name, username, email address, phone number, and account credentials); commercial information (such as payment and transaction information); internet or network activity information (such as device and usage information); geolocation data (such as approximate location); audio, electronic, visual, or similar information and other content (such as emails, files, documents, images, and photos accessed through connected accounts); and inferences drawn from the above. Certain of this information, such as account credentials and the contents of communications, may be considered sensitive personal information under applicable law.
When you use the Platform or connect accounts to the Platform, personal information may also include email messages and metadata, calendar information, contact information, files and file metadata, including documents, images, photos, and other content stored in or accessible through connected accounts such as Google Drive, and other information available through the accounts, files, or services you connect to or use with the Platform. When you interact with the Platform using voice, we collect the voice input you provide and convert it to text. We use the resulting transcript to provide the applicable services; we do not retain the underlying audio recording after transcription. Personal information also includes notes, tasks, to-do items, and the text and voice inputs, prompts, and instructions you provide to the Platform.
We may collect personal information from you directly, automatically through your use of the Platform, from accounts or services you connect to the Platform, from third-party integrations or services you authorize, from third-party data providers, and from other third-party sources where necessary to provide, operate, secure, support, or improve the Platform, or as otherwise described in this Privacy Policy.
Some of the ways we may collect personal information include, but are not limited to, when you:
- create an account on the Platform;
- use the Platform, including performing tasks through the Platform;
- connect your email, calendar, contacts, file storage, or other accounts to the Platform;
- upload, submit, access, manage, or process emails, calendar information, contacts, files, documents, images, photos, or other content through the Platform;
- request information about or submit an order for services or products;
- create or manage notes, tasks, to-do items, or other content within the Platform, or interact with the Platform using voice or chat;
- provide information for the purposes of verification of your identity or fraud prevention purposes; and/or
- subscribe to notices, announcements, or other informational tools.
Additional limits apply to our collection, use, and disclosure of Google user data, as described in Section VII.
III.Use of Personal Information
Some of the ways in which we may use the personal information that we collect through the Platform include:
- to establish, maintain, and secure your account on the Platform;
- to provide you with access to and use of the Platform, including performing tasks through the Platform;
- to provide any other services or products that you request;
- to authenticate users, provide login credentials, access codes, verification codes, or similar account-access tools, and to connect, authenticate, and operate integrations or connected services you authorize;
- to personalize and customize your experience across the Platform, for example to provide you with more relevant content;
- to process transactions, manage billing, and provide services or products that you request;
- to verify identity, protect accounts, detect fraud, prevent abuse, and maintain the safety and security of the Platform;
- to provide customer service, technical support, troubleshooting, and account-related communications;
- to provide and operate the features you use, including transcribing your voice input, creating and managing your notes, tasks, and to-do items, and performing tasks you instruct the Platform to perform;
- to monitor your use of the Platform and compliance with all applicable requirements for such use;
- to provide you with service updates, announcements, and other service and product offerings;
- to send you promotional emails or undertake other promotional activities;
- to test, maintain, evaluate performance and product quality, debug, analyze usage, and improve the Platform, the customer experience, and any related services or products; and/or
- to develop, train, test, evaluate, maintain, debug, secure, and improve our models, systems, features, and services, using information that we are permitted to use for those purposes. You may opt out of the use of your information to train our models through your account settings or by contacting us.
Google user data, and the contents of other connected accounts, are not used to develop, train, or improve generalized or non-personalized artificial intelligence or machine learning models, and our use of Google user data is otherwise governed by Section VII.
IV.Management of Personal Information
You are responsible for ensuring that personal information you provide to us through the Platform is accurate and up to date.
You may be able to access, update, correct, or delete certain personal information through your account settings or through features available in the Platform. You may also contact us to request access, correction, update, deletion, or other assistance with your personal information, subject to applicable law, verification, and any legal, security, backup, fraud-prevention, or compliance obligations.
If you connect a third-party account or service to the Platform, you may be able to manage certain information through that third-party account or service. You may disconnect your Google account or other connected accounts from the Platform at any time, subject to the account-management features we make available.
Your privacy rights. Depending on where you live and subject to applicable law, you may have the following rights with respect to your personal information:
- the right to know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom it is disclosed;
- the right to request deletion of personal information we have collected from you;
- the right to correct inaccurate personal information we maintain about you;
- the right to opt out of the “sale” or “sharing” of your personal information, as those terms are defined under applicable law;
- the right to limit the use and disclosure of sensitive personal information to those uses permitted under applicable law; and
- the right not to receive discriminatory treatment for exercising any of these rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Where required, we honor opt-out preference signals, such as the Global Privacy Control (GPC), as a valid request to opt out of sale or sharing for the browser or device from which the signal is sent.
How to exercise your rights. You may submit a request by contacting us using the information provided in this Privacy Policy. To protect your information, we will take reasonable steps to verify your identity before responding, which may require you to provide information that can be matched against information we maintain. You may use an authorized agent to submit a request on your behalf, subject to our verification of the agent’s authority. We will acknowledge and respond to verifiable requests within the timeframes required by applicable law. We will not discriminate against you for exercising any of these rights.
V.Disclosure of Personal Information
We disclose personal information as described in this Privacy Policy and in the following circumstances. We disclose the categories of personal information described in Section II to the categories of third parties described below, for the business and commercial purposes described in this Privacy Policy.
User-requested disclosures and connected services. When you use the Platform to perform tasks, connect third-party accounts or services, use integrations, send communications, create or manage calendar events, access or share files, or otherwise direct the Platform to interact with another person, account, service, or system, we may disclose the personal information necessary to complete the action you request. Information processed by third-party accounts, services, or integrations may also be subject to their own terms and privacy policies.
Service providers, vendors, and contractors. We may disclose personal information to service providers, vendors, contractors, and similar third parties that provide services on our behalf, including hosting, cloud infrastructure, storage, security, analytics, payment processing, customer support, communications, AI processing, search infrastructure, debugging, monitoring, and other services necessary to operate, secure, support, and improve the Platform. These parties are authorized to process personal information only as necessary to provide services to us or on our behalf, and are contractually prohibited from using personal information for their own purposes, except as otherwise permitted by applicable law.
Legal, safety, and security purposes. We may disclose personal information, and report activity that we believe may be unlawful, fraudulent, abusive, or harmful, where required by valid legal process, such as a subpoena, court order, warrant, or other lawful governmental request, or where we reasonably believe disclosure is necessary or appropriate to comply with applicable law, cooperate with law enforcement or governmental investigations, protect our legal rights, prevent fraud or abuse, investigate security incidents, enforce our agreements or policies, or protect the rights, property, safety, or security of Company, our users, our employees, agents, or the public. We may make such disclosures without prior notice where permitted by law, where notice is prohibited, where the request or disclosure is confidential, or where we reasonably believe notice would create a risk of harm, fraud, abuse, security compromise, interference with an investigation, or legal liability.
Corporate transactions. We may disclose or transfer personal information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, business combination, or similar corporate transaction, including as part of negotiations, diligence, or transition activities related to such transactions.
International processing. Personal information we collect may be transferred to, stored by, or otherwise processed by service providers, vendors, contractors, and other third parties that support the Platform, including in the United States and other countries outside of the country where you reside. By using the Platform or providing personal information to us, you acknowledge that your personal information may be transferred, stored, and processed as described in this Privacy Policy.
Aggregated or de-identified information. We may disclose aggregated, de-identified, or anonymized information that does not reasonably identify you. We will maintain such information in de-identified form and will not attempt to reidentify it, except as permitted by applicable law.
We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising. We will not use or disclose your personal information except as described in this Privacy Policy.
Additional limits apply to our disclosure and transfer of Google user data, as described in Section VII.
VII.Google User Data and OAuth Permissions
This Section VII describes how the Platform accesses, uses, stores, discloses, and protects Google user data. When you choose to connect your Google account to the Platform, we use Google OAuth to request your permission to access certain Google user data. We do not collect or store your Google account password.
We request only the Google OAuth permissions that are reasonably necessary to provide the features of the Platform that you request or use. Depending on the permissions you grant and how you use the Platform, the Platform may access Google user data such as Gmail messages and metadata, Google Calendar events and availability, Google Contacts information, Google Drive files and metadata, and basic Google account profile information.
We use Google user data only to provide, maintain, secure, and improve the user-facing features of the Platform that you request or use, including features that are visible and prominent in the Platform. For example, we may use Google user data to summarize emails, draft replies, manage your calendar, search files, retrieve relevant information from connected accounts, and perform tasks you instruct the Platform to perform.
We may use aggregated, anonymized, or de-identified information derived from Google user data for internal operations, including to measure usage, monitor performance and reliability, debug and improve the user-facing features of the Platform, maintain security, prevent abuse, generate internal metrics, and evaluate the quality of user-facing features, provided that such information does not identify you and is not used to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.
We do not sell Google user data, use or transfer Google user data for advertising, retargeting, personalized or interest-based advertising, data brokerage, credit-worthiness or lending purposes, or use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.
Google API Limited Use
Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We may share Google user data only with service providers that help us operate the Platform, such as cloud hosting, infrastructure, security, customer support, and AI processing providers, and only as necessary for them to provide services to us or on our behalf under confidentiality, security, and contractual obligations. These providers are contractually prohibited from using Google user data for their own purposes and from using it to train generalized or non-personalized artificial intelligence or machine learning models.
We may also disclose Google user data where required by law or legal process, or as necessary to protect rights, safety, and security, prevent fraud or abuse, investigate security incidents, or enforce our agreements or policies.
Human access to Google user data is restricted, and email body content stored by the Platform is encrypted. Authorized personnel may access production systems containing Google user data for maintenance, reliability, security, debugging, support, database administration, schema migrations, and compliance purposes. Such access does not permit personnel to read raw Google user data, including email contents, except where you have provided explicit permission, where access is necessary to provide support you requested, where access is necessary for security or abuse investigation, where required by law, or where the data is aggregated and anonymized for internal operations. Access to production systems containing Google user data is limited to authorized personnel, subject to access controls, and logged or audited where appropriate.
We use administrative, technical, and organizational safeguards designed to protect Google user data.
You may disconnect your Google account at any time. You may also revoke the Platform’s access through your Google account permissions. If you disconnect or request deletion, we will delete or de-identify Google user data associated with your account, subject to legal, security, backup, or compliance obligations. Backup copies may be retained for a limited period and deleted in the ordinary course of business.
VIII.Retention
We will retain your personal information for as long as your account remains active or as long as reasonably necessary for the purposes set out in this Privacy Policy and to provide you with access and use of the Platform and any other services, products, or support you request or use from us. We will retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes, enforce our legal agreements and policies, and maintain the security and integrity of the Platform.
We may retain device, log, and usage information for internal operations, including analytics, security, debugging, performance monitoring, fraud and abuse prevention, and improvement of the Platform. Where appropriate, we may aggregate, anonymize, or de-identify information and retain it in a form that does not reasonably identify you, subject to applicable law.
When you delete your account, we will delete or de-identify the personal information associated with your account, subject to any retention required for legal, security, backup, or compliance purposes.
Additional retention and deletion practices for Google user data are described in Section VII.
IX.Security of Your Personal Information
The security of your personal information is important to us. We implement commercially reasonable technical, administrative, and organizational measures designed to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no method of transmission, or method of electronic storage, is fully secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
X.Your Choices
You can decide whether or not to provide personal information to us. However, if you do not provide certain personal information you may not be able to use the Platform or related services and products. If you provide personal information, any disclosure of your personal information to third parties is described in Section V.
You may choose to unsubscribe from promotional emails, announcements, newsletters, or other informational tools, and other communications from us. We provide you with the ability to unsubscribe at any time through the Platform or by following the unsubscribe instructions included in those communications. We may still send you non-promotional messages, such as account, security, legal, billing, or service-related communications, that are necessary to provide you with access and use of the Platform or to comply with our obligations.
You may choose whether your User Content (as defined in the Terms of Service) is used to train our models. You can exercise this choice through your account settings or by contacting us. This choice does not affect our use of your information to provide, secure, and operate the Platform. We do not use Google user data, or the contents of other connected accounts, to train generalized or non-personalized artificial intelligence or machine learning models.
For information about your privacy rights and how to exercise them, including rights to access, correct, or delete your personal information, please see Section IV.
XI.Changes to This Privacy Policy
We reserve the right, at our sole discretion, to change, modify, add, or remove any portion of this Privacy Policy, in whole or in part, at any time. When we make changes, we will revise the “Last Updated” date at the top of this Privacy Policy and post the updated policy on the Platform. Amendments to this Privacy Policy will be effective when posted. Your continued use of the Platform following the posting of any amendment shall constitute your acceptance thereof.
XII.Contact Information
If you would like to contact us with questions or comments concerning our Privacy Policy, please email us at support@alann.ai.