Privacy

1. Introduction

Alloterra Labs ("we," "us," or "our") develops and operates a suite of enterprise software applications, including tools for social media management and scheduling, AI-assisted work management and task automation, AI chat, enterprise search, and inventory and supply chain management (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you access or use any of our Services.

By accessing or using our Services, you agree to this Privacy Policy. If you do not agree, please discontinue use.

2. Scope

This Policy applies to:

Registered users and account administrators of any Alloterra Labs application
Authorized end users within your organization
Visitors to our website and marketing pages
Prospective customers who contact us

It does not apply to third-party services you choose to connect to our platform (e.g., social media networks, ERP systems, logistics providers), which have their own privacy practices.

3. Information We Collect

3.1 Information You Provide Directly

Registered users and account administrators of any Alloterra Labs application
Account and registration data: name, work email address, company name, job title, billing address
Payment information: processed by our third-party payment processor; we do not store raw payment card data
Content you create or submit: social media drafts, scheduled posts, task descriptions, chat messages, search queries, inventory records, supply chain data, and other business content entered into our Services
Communications: support requests, feedback forms, and correspondence with our team

3.2 Information Collected Automatically

Log and usage data: IP address, browser type and version, operating system, pages visited, feature interactions, and timestamps
Device identifiers and session tokens
Performance and error data used to operate and improve our Services
Cookies and similar tracking technologies (see Section 9)

3.3 Information from Third-Party Integrations

When you connect third-party accounts or data sources to our Services (e.g., social media platforms, supply chain systems, calendars), we receive data necessary to provide the requested functionality, such as:

Authentication tokens and associated account identifiers
Profile or account metadata returned by the third-party service
Operational data (e.g., inventory levels, logistics records, social media post metrics) where you have granted permission

The scope of data received is determined by the permissions you grant during the integration flow.

3.4 AI-Processed Data

Several of our Services use AI and machine learning to provide features such as content drafting, task recommendations, intelligent search, and conversational assistance. When you use these features, your inputs — including text, documents, and queries — are processed by AI systems. We may retain inputs and outputs to provide and improve the Services, subject to Section 5 and our enterprise data processing commitments.

3.5 Business Operations Data

Our inventory and supply chain tools process operational business data you provide, including product records, supplier information, order data, and logistics information. This data is treated as confidential business information and is used solely to provide the relevant Service to your organization.

4. How We Use Your Information

We use information we collect for the following purposes:

To provision, operate, maintain, and improve our Services
To authenticate users and secure accounts
To process transactions and send related communications
To power AI-assisted features across our applications, including content generation, task management, search, chat, and operational insights
To publish or schedule content to connected third-party platforms at your direction
To process and display operational data within inventory and supply chain tools
To send service notifications, security alerts, and administrative messages
To respond to support requests and provide customer service
To analyze usage patterns and improve product features
To enforce our applicable contracts, agreements, and policies
To comply with applicable legal obligations
To send marketing communications where you have opted in (you may opt out at any time)

5. AI Features and Data Processing

Our AI-powered features process content and context you provide to generate suggestions, recommendations, summaries, and search results. We use enterprise-grade AI providers under data processing agreements that restrict the use of your data for third-party model training without your consent.

Enterprise customers may request a data processing addendum that includes a no-training commitment. Please contact us at admin@alloterralabs.com for details.

AI-generated outputs are provided as productivity tools. You are responsible for reviewing and approving any AI-generated content before use.

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing your personal data are:

Contract performance: processing necessary to provide the Services you have subscribed to
Legitimate interests: security, fraud prevention, product improvement, and marketing to existing customers, where not overridden by your rights
Consent: where you have given specific consent (e.g., optional analytics, marketing emails)
Legal obligation: compliance with applicable law

7. Sharing and Disclosure

7.1 Within Your Organization

Administrators of your organization's workspace have access to user accounts, content, and usage data within that workspace. We act as a data processor for business content your organization creates within our Services.

7.2 Service Providers

We share data with vetted third-party vendors who assist in operating our Services, including:

Cloud infrastructure and hosting providers
Payment processors
AI and machine learning model providers (under data processing agreements)
Analytics and performance monitoring services
Customer support platforms
Email and notification delivery services

Service providers are contractually restricted from using your data for any purpose other than providing services to us.

7.3 Connected Third-Party Platforms

When you direct our Services to publish content to, or retrieve data from, a connected third-party platform, we transmit the relevant data to that platform on your behalf. Each platform's own privacy policy governs how it handles that data.

7.4 Business Transfers

In connection with a merger, acquisition, sale of assets, or bankruptcy proceeding, your information may be transferred to a successor entity. We will provide advance notice and, where required by law, obtain consent.

7.5 Legal Requirements

We may disclose information if required by law, subpoena, court order, or government request, or where necessary to protect the rights, property, or safety of Alloterra Labs, our users, or others.

7.6 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their own commercial purposes. This applies to the definition of "sale" and "sharing" under the California Consumer Privacy Act (CCPA/CPRA).

8. Data Retention

We retain personal data for as long as necessary to provide the Services and fulfill the purposes described in this Policy, or as required by applicable law:

Account data: retained for the life of the account plus up to 90 days following account deletion
Business content (posts, tasks, chats, operational records): retained per your account settings and deleted within 90 days of account termination, unless longer retention is required by law
Log and usage data: typically retained for 12 months
Billing and transaction records: retained as required by applicable tax and financial regulations (typically 7 years)

You may request deletion of your personal data as described in Section 11.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our Services:

Strictly necessary cookies: required for authentication and core functionality; cannot be disabled
Performance cookies: measure and analyze Service usage such as page load times and error rates
Functional cookies: remember your preferences such as language and timezone settings
Analytics cookies: aggregate usage data to help us understand feature adoption (requires consent where applicable)

You can control non-essential cookies through our cookie preference center or your browser settings. Disabling certain cookies may impair Service functionality.

10. Data Security

We implement industry-standard technical and organizational security measures, including:

Encryption in transit (TLS 1.2+) and at rest (AES-256)
Role-based access controls and least-privilege principles
Regular penetration testing and vulnerability assessments
Security incident detection and response procedures
Employee security training and confidentiality obligations

No method of transmission over the internet is completely secure. We cannot guarantee absolute security and disclaim liability for breaches resulting from factors outside our reasonable control. We will notify affected users and authorities of data breaches as required by applicable law.

11. Your Rights and Choices

11.1 All Users

Access: request a copy of the personal data we hold about you
Correction: request correction of inaccurate or incomplete data
Deletion: request deletion of your personal data, subject to legal retention obligations
Data portability: receive your data in a structured, commonly used, machine-readable format
Opt-out: unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us

11.2 EEA, UK, and Swiss Residents (GDPR)

In addition to the above, you have the right to:

Object to processing based on legitimate interests
Restrict processing in certain circumstances
Withdraw consent at any time without affecting the lawfulness of prior processing
Lodge a complaint with your local data protection supervisory authority

11.3 California Residents (CCPA / CPRA)

California residents have the right to:

Know what personal information is collected, used, disclosed, or shared
Opt out of the sale or sharing of personal information (we do not engage in these practices)
Limit the use of sensitive personal information
Non-discrimination for exercising privacy rights

To submit a request, contact us at admin@alloterralabs.com. We will respond within 45 days, extendable by an additional 45 days with notice.

12. International Data Transfers

We are headquartered in the United States. If you access our Services from outside the U.S., your data may be transferred to and processed in the U.S. or other countries that may have different data protection standards than your home country.

For transfers of EEA or UK personal data, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Secretary of State, or other lawful transfer mechanisms as applicable.

13. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we learn that we have done so, we will delete the data promptly. Please contact us at admin@alloterralabs.com if you believe a minor has provided us with personal information.

14. Third-Party Links and Integrations

Our Services may contain links to third-party websites or allow connections to external platforms. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information or granting access.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised Policy on our website and, for significant changes, by email or in-app notification at least 30 days before the changes take effect. Your continued use of our Services after the effective date constitutes acceptance of the updated Policy.

16. Contact Us

For privacy-related questions, requests, or complaints, please contact our Privacy Team:

Alloterra Labs
‍Attn: Privacy Team
3008 Anderson Dr,
Suite 250
Raleigh, NC 27609

Email: admin@alloterralabs.com

Website: www.alloterralabs.com

If you are located in the EEA or UK and have concerns that have not been resolved to your satisfaction, you have the right to lodge a complaint with your applicable data protection supervisory authority.

Last updated: June 9, 2026