Privacy Policy

Our privacy policy is available in PDF form here.

This Privacy Policy (this “Privacy Policy”) explains how Aleoop, Inc. (“we,” “us,” or “our”) collects, uses, discloses, and protects your information when you interact with us. It also describes your rights regarding this information.

For enterprise pilots and paid customers, the Data Processing Addendum (DPA) and Order Form (including any Pilot Rider) control over this Privacy Policy with respect to Customer Data and personal data processed for those Services. In case of conflict, the DPA and Order Form prevail.

We collect information from or about you when you provide it to us directly, use our website(s), mobile application(s), or other services (collectively, the “Services”). We may also receive information about you from other sources, such as business partners, marketing affiliates, and publicly available databases.

You can access this Privacy Policy in PDF format here.

1.What information do we collect and what do we do with it?

We collect personal information that you voluntarily provide to us when you register for our Services or otherwise interact with us. The types of personal information we collect include:

• Names
• Email addresses
• Job titles
• Passwords
• Contact or authentication data
• BIlling addresses
• Debit/credit card numbers
• Signature
• Education history
• Employment history
• User Content (such as text, images, or other content you upload or post)

Sensitive Personal Information

We process account login credentials combined with security access codes solely to provide secure access to the Services. We do not collect or process sensitive information, including biometric data, precise geolocation within a radius of 1,850 feet, or government identifiers, for the purpose of inferring characteristics about consumers or for cross-context behavioral advertising.

Information Collected Automatically

When you access or use our Services, we automatically collect certain information from your device. This includes:

• Log and Usage Data: Service-related, diagnostic, usage, and performance information (such as your IP address, browser type and settings, and information about user activity in your website or app).
• Device Data: Information about a User’s computer, phone, tablet or other device used to access your website or app (such as device and application identification numbers, location, and hardware model Internet service provider or mobile carrier).
• Internet Activity: Information regarding your interaction with our Services, Browse and search history on our Services, and interactions with our digital content.
• Geolocation Data: Information about your device’s location. We may obtain your location by relying on your IP address, but we do not obtain or cache a User’s precise location.

Information Related to Email Sending Feature:

When you see our email-sending tool within the Services, we process information necessary to send emails on your behalf. This includes accessing or processing information from your linked email account (such as your sending email address), the email content you create, and the recipient email addresses you provide. We process this information solely for the purpose of transmitting the email communication at your direction.

Information Collected from Other Sources:

We may collect personal information about you from other sources. These may include data from third-party service providers, public databases, and other publicly available sources.

Information Collected In-App:

We may request access to features on your mobile device, such as your camera and microphone, but only with your explicit permission and for specific features that require them. We may also send you push notifications to provide updates and service-related messages if you have opted in to receive them through your device settings.

Analytics and Other Technologies:

We may collect analytics data, or use third-party analytics tools, such as Google Analytics, to help us measure traffic and usage trends for our Services and to understand more about the demographics and behaviors of our users. You can learn more about Google’s practices at https://www.google.com/policies/privacy/partners.

2.How We Use Your Information

We use the information we collect to provide, operate, maintain, and improve our Services, to communicate with you, and for our business operations. Specifically, we may use your information to:

• Create, manage, and maintain your account.

• Provide and deliver the Services you request.

• Communicate with you about your account or the Services.

• Troubleshoot and respond to your inquiries and support requests.

• Monitor and analyze usage and trends to improve your experience and develop new features.

• Ensure the security and integrity of our Services.

• Fulfill any other purpose for which you provide the information.

• To facilitate communication on your behalf: to send emails to recipients you designate, using content you provide, when you utilize our email sending tool within the Services, as described in the "Information Related to Email Sending Feature” sub-section above..

• Analyze certain collected information, such as your name and education history, using artificial intelligence tools to provide enhanced features, generate insights, or improve the functionality of the Services.

AI and Machine Learning Processing

Aleoop does not use your Customer Data, User Consent, or frontline sales inputs (including data integrations such as Slack, Salesforce, or Gong) to train, fine-tune, or improve machine learning models for general use or for the benefit of third-parties or other customers, except upon your express written opt-in consent (via an executed DPA or Order Form). Data ingested into the Platform is processed strictly to deliver the Services to your organization.

Personalization and Improvement

We use collected information, including usage statistics and general location data derived from IP addresses, to personalize and improve our Services. This includes understanding how users access and use our Services, monitoring effectiveness, detecting usage patterns, diagnosing technical issues, and for research and development of our Services.

Service Modifications and Notice Standards

We reserve the right to modify or update the Platform to maintain security, system performance, or legal compliance. For any material reduction in core Service functionality, or any material modification to these Terms, Aleoop will provide at least thirty (30) days’ advance written notice via email to the primary account administrator or through a prominent administrative notice within the Platform. We will not retroactively alter material Terms, liability caps, or privacy commitments without your explicit written consent.

Communication

We may send your service-related emails, such as account notifications, payment receipts, or responses to your inquiries. We may occasionally send informational emails. You can opt out of receiving these emails by clicking the “unsubscribe” link at the bottom of each email.

Non-Personal Information

We may use information that does not identify you personally for any business purpose, such as aggregating usage data to analyze trends.

Legal Bases for Processing (EU/UK Users)

Under the GDPR and other applicable laws, we must have a legal basis to process your personal information. The legal bases we rely on include:

• Contractual Necessity: The processing is necessary to perform a contract with you or to take steps at your request before entering into a contract. For example, processing your account information to provide you with the Services.

• Legitimate Interests: The processing is necessary for our legitimate business interests, provided that these interests are not overridden by your rights and freedoms. For example, using your information to improve our Services, prevent fraud, and ensure the security of our systems.

• Consent: You have given us clear consent for us to process your personal information for a specific purpose.

• Legal Obligation: The processing is necessary for us to comply with a legal or regulatory obligation. For example, responding to a subpoena or court order.

3.How Do We Get Your Consent?

We obtain your consent to collect and use your personal information where it is required by law.

Consent Mechanisms

We collect and process your personal data based on your explicit, affirmative consent where required by law, or as necessary to fulfill contractual obligations. We do not rely on implied consent for the collection of sensitive personal information, automated profiling, or cross-context behavioral tracking. You have the right to withdraw your consent at any time by updating your account settings or contacting us directly. You may withdraw your consent at any time.

Session Analytics and Tracking Technologies

Where permitted by applicable law, we process usage and diagnostic log data strictly for security and load balancing. We do not execute session-replay scripts, real-time wiretapping software, or keystroke-logging technologies. Any third-party analytics tools utilized on public-facing or authenticated properties operate strictly post-consent via an explicit, affirmative cookie-consent interaction banner and do not intercept private, unposted communications or sales inputs in transit.

Children’s Privacy

Our Services are strictly intended for enterprise B2B professionals and are not directed to individuals under 18 years of age. We do not knowingly collect, process, sell, or share personal data from individuals under 18 years of age. If we learn we have collected personal data from an individual under 18, we will delete such data from our systems.

4.How Long Do We Retain Your Information?

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, as outlined in the schedule below.

We may retain information for a reasonable period after your account is closed if necessary to comply with our legal obligations, resolve disputes, prevent fraud or abuse, or for legitimate business purposes. For enterprise/pilot Customer Data, we delete or return Customer Data within 30 days of termination, then purge backups per a documented schedule (max 90 days), and provide deletion certification on request. We do not create or retain de-identified or aggregated data derived from a specific enterprise User’s data for model training or product analytics without that User’s written opt-in.

We do not create or retain de-identified or aggregated data derived from a specific enterprise User’s data for model training or product analytics without that User’s written opt-in. Where de-identified data is maintained, we publicly commit to maintaining it solely in de-identified form, taking technical measures to prevent re-identification, and contractually obligating all subprocessors to adhere to these constraints.

While personal information is no longer necessary for the purposes for which it was collected or required for legal or business reasons, or when you request deletion (where applicable), we will securely delete or anonymize it in accordance with our data retention policies and applicable laws.

Commitment Regarding De-Identified Information

With respect to de-identified data or aggregated metrics derived from personal data or Customer Data, Aleoop publicly commits to: (i) maintaining and using such information solely in a de-identified format; (ii) taking reasonable technical and administrative measures to prevent re-identification; and (iii) refraining from attempting to re-identify the information, except solely to test the effectiveness of its de-identification systems in compliance with applicable law; and (iv) contractually obligating all third-party vendors, processors, and recipients to adhere to these identical de-identification constraints.

5.Your Privacy Rights and Choices

You have specific rights regarding your personal information under applicable state and federal privacy laws:

• Access, Correction & Deletion: You have the right to request access to, correction of, or deletion of the personal information we maintain about you.

• Opt-Out of Profiling & Automated Decision-Making: You have the right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of automated decision-making technologies (ADMT) that produce legal or similarly significant effects.

• Limiting Sensitive Personal Information: You have the right to direct us to limit the use of your personal information to strictly necessary operational purposes.

• Right to Appeal: If we decline to take action regarding your privacy right request, you may appeal our decision within thirty (30) days of receipt of our denial by submitting a written appeal to [info@aleoop.io](mailto:info@aleoop.io) with the subject line “Privacy Request Appeal.” We will respond within forty-five (45) days, including an explanation of the decisions and your right to submit a complaint to your state Attorney General.

• Automated Decision-Making Technology (ADMT) Transparency: Aleoop uses automated profiling algorithms strictly to summarize sales feedback and calculate pipeline impact metrics. These algorithms perform pattern matching based on keywords, deal sizes, and input frequencies uploaded by your organization. They do not evaluate consumer credit, housing, employment eligibility, or legal status, nor do they produce binding legal or similarly significant effects. Consumers may opt out of automated profiling workflows by submitting a request to info@aleoop.io.

• Cookies and Similar Technologies: You can manage your preferences for cookies and similar technologies through your browser settings. Please refer to your browser’s help menu for more information. Note that disabling cookies may impact the functionality of the Services.

6.California Residents - CCPA

This section applies only to California residents.

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides California residents with specific rights regarding their personal information.

Categories of Personal Information Collected, Disclosed, and Sold

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers: Such as name, signature, email address, passwords, contact or authentication data, unique personal identifier, IP address, device identifier.
• Characteristics of protected classifications under California or federal law: Such as race, gender, or age (if provided or inferred from user content or interactions).
• Commercial information: Such as purchasing history or tendencies.
• Internet or other electronic network activity information: Such as Browse history, search history, and information regarding your interaction with our website, application, or advertisements.
• Geolocation data: Information about your location.
• Audio, electronic, visual, thermal, olfactory, or similar information: Such as images or videos you upload as User Content.
• Professional or employment-related information: Such as job title, employment history, or other professional information.
• Education information: As defined in the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g).
• Inferences drawn from any of the information identified above to create a profile about a customer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
• Sensitive Personal Information: Such as account login credentials combined with mandatory security access codes to facilitate secure account authentication. Aleoop does not collect, extract, harvest, or process biometric information, genetic data, or precise geolocation from User Consent or frontline sales inputs.

We collect personal information from the following categories of sources:

• Directly from you.
• Indirectly from your activity on our Services.

• From other sources, such as our business partners, marketing affiliates, and publicly available databases.

We collect and use these categories of personal information for the business and commercial purposes described in the “How We Use Your Information” section above, including to provide our Services, maintain your account, communicate with you, improve our Services, and ensure security.

In the preceding 12 months, we have disclosed the following categories of personal information for a business purpose to the following categories of third parties:

Disclosing Sensitive Data

We have disclosed Sensitive Personal Information in the preceding 12 months.

We do not sell or share personal information for cross-context behavioral advertising, including sensitive personal information.

Your CCPA Rights

The CCPA provides California residents with the following rights:

• Right to Know and Access: You have the right to request that we disclose to you the personal information we have collected, used, disclosed, and sold about you over the past 12 months. This includes the categories of personal information, sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.

• Right to Correct: You have the right to request the correction of inaccurate personal information that we maintain about you.

• Right to Delete: You have the right to request the deletion of personal information that we have collected from you, subject to certain exceptions.

• Right to Opt-out of Sales/Sharing: You have the right to opt out of the “sale” or “sharing” of your personal information. As stated above, we do not sell personal information. If our practices change, we will update this policy and provide you with a mechanism to exercise this right.

• Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information to certain permitted purposes. As stated above, we only disclose sensitive personal information for business purposes with our service providers or legal authorities as necessary.

• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.

Exercising Your CCPA Rights:

To exercise your Right to Know, Correct, or Delete, please submit a verifiable customer request by contacting us at info@aleoop.io.

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.

The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information related to you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

7.How We Share Your Information

We may share or disclose your personal information only in the following circumstances:

• With Your Consent: We may share your information when you give us your explicit consent to do so. This includes instances where you choose to connect your account with a third-party service, such as a single sign-on (SSO) provider, or when you choose to make certain User Content or profile information visible to other users of the Services through your settings or the nature of the feature.

• Within Our Corporate Group: We may share your information with our subsidiaries, affiliates, and other entities within our corporate group, for business purposes consistent with this Privacy Policy.

• With Service Providers: We may share your information with trusted third-party vendors, consultants, and service providers who perform services for us and on our behalf, such as data analytics, data storage, marketing, account registration, and authentication. These service providers are bound by contractual obligations to keep your personal information confidential and use it only for the purposes of providing their services to us. We engage subprocessors under written data processing agreements that impose confidentiality, security, and data-use limits consistent with our DPA. We maintain a current subprocessor list and will provide prior notice of changes, with an enterprise right to object as set forth in the DPA.

• With Email Service Providers: To facilitate sending emails on your behalf, when you use our email sending tool within the Services.

• With AI Service Providers: Acting as subprocessors solely to provide the Services to you under our DPA; we prohibit their use of Customer Data to train their models.

• Business Transfers: In the event of a merger, acquisition, sale of assets, financing, change of control, bankruptcy, or similar event, your personal information may be transferred to a successor entity. We will ensure that the new owner agrees to protect your information in accordance with this Privacy Policy.

• Legal Requirements: We may disclose your information to comply with applicable laws, regulations, legal processes, or governmental requests, such as responding to subpoenas or court orders.

• To Protect Our Rights and Prevent Harm: We may disclose your information if we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved. This may include exchanging information with other companies and organizations for the purpose of cybersecurity and fraud prevention.

We may disclose non-personal information (information that does not identify you personally) without restriction.

We do not sell or share your personal information with third parties for their marketing purposes.

8.Security of Your Information

The security of your personal information is important to us. We implement physical, administrative, and technical safeguards designed to protect the integrity and security of the personal information we collect. Our employees are required to protect personal information in a manner consistent with this Privacy Policy, and violators will be subject to disciplinary action.

While we take responsible measures to protect your personal information, no security system is impenetrable. You acknowledge and agree that we cannot guarantee the absolute security of your information transmitted through our Services. You understand and accept that any transmission of personal information is at your own risk. In the unlikely event of a data breach that compromises your personal information under our control, we will take reasonable steps to investigate the situation and comply with all applicable laws and regulations regarding data breach notification.

The safety and security of your information also depends on you. You are solely responsible for maintaining the confidentiality of your password and login credentials for accessing our Services. We ask you not to share your password with anyone and to take precautions against unauthorized access to your account, such as using a strong password, signing out after using a shared device, and protecting your login credentials.

We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized access that is not due to our negligence.

Your passwords are encrypted and securely stored both when they are transmitted and when they are at rest.

Please be aware that any information you choose to make public on the Services (e.g., in User Content or public profile sections) can be collected and used by others. We are not responsible for the privacy of any information that you choose to make public.

9.Third-Party Websites and Services

Our Services may contain links to websites, applications, or services operated by third parties. These third parties have their own privacy policies and terms of service, which we do not control.

When you click on a link to a third-party site or service, you will leave our Services, and your information will be governed by the privacy policy and terms of the third party. We are not responsible for the content, privacy practices, or security of any third-party websites or services.

We encourage you to review the privacy policies of any third-party site or service before providing any information to them.

10.Additional State Privacy Rights

Some state privacy laws in the United States, including but not limited to those in California, Virginia, and Colorado, grant consumers specific rights regarding their personal information. If you are a resident of a state with such privacy laws, you may have rights in addition to those described in our California Resident Privacy Rights section, including the right to: access, delete, and correct your personal data, and the right to opt out of the sale or sharing of your personal data.

We do not sell personal information, including sensitive personal information. We also do not sell or share personal information for cross-context behavioral advertising.

To exercise any rights you may have under applicable state privacy laws, please contact us using the contact information provided in this Privacy Policy.

EU/UK Representative & DPO

We do not have a designated European Economic Area (EEA) or UK representative, and we have not appointed a Data Protection Officer (DPO).

11.Copyright Infringement

We respect the intellectual property rights of others and take claims of copyright infringement seriously. We will respond to notices of alleged copyright infringement that comply with applicable law, including the Digital Millennium Copyright Act (“DMCA”).

If you believe any materials accessible on or from our Services infringe your copyright, you may request removal of those materials (or access to them) by submitting written notification to our designated Copyright Agent in accordance with the DMCA.

The written notice (the “DMCA Notice”) must include substantially the following elements required by 17 U.S.C. § 512(c)(3):

• Your physical or electronic signature.
• Identification of the copyrighted work you believe to have been infringed or, if the claim involves multiple works on the Services, a representative list of such works.
• Identification of the material you believe to be infringing in a sufficiently precise manner to allow us to locate that material.
• Adequate information by which we can contact you (including your name, postal address, telephone number, and, if available, email address).
• A statement that you have a good faith belief that use of the copyrighted material is not authorized by the copyright owner, its agent, or the law.
• A statement that the information in the written notice is accurate.
• A statement, under penalty of perjury, that you are authorized to act on behalf of the copyright owner.

If your DMCA Notice fails to comply with all requirements of Section 512(c)(3) of the DMCA, it may not be effective. Please be aware that under Section 512(f) of the DMCA, you may be held liable for damages (including costs and attorneys’ fees) if you knowingly materially misrepresent that material or activity on the Services is infringing your copyright.

It is our policy to terminate the accounts of repeat infringers.

DMCA Notices must be delivered to our designated Copyright Agent at info@aleoop.io.

12.Cookies and Automatic Data Collection Technologies

We and our authorized service providers use cookies, web beacons, and similar tracking technologies to operate the Platform, measure performance, and secure our Services. These technologies are small files or pieces of text that are downloaded to a device when a visitor accesses a website or app.

We use Google Analytics to help us understand how users engage with our Services. You can learn more about Google Analytics and your choices by visiting the Google Analytics Terms of Use and the Google Analytics Privacy Policy.

Universal Opt-Out Preference Signals: We recognize and honor browser-based opt-out preference signals, including the Global Privacy Control (GPC). When our systems detect an enabled GPC signal from your device or browser, we automatically process it as a valid, affirmative opt-out request for targeted advertising, data sales, or cross-context tracking across our web properties. You do not need to create an account or submit a manual DSAR form for your GPC preference to take effect.

You can typically manage your preferences for cookies and similar technologies through your browser settings. However, please note that disabling cookies may impact the functionality and your experience of the Services.

13.Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes to this Privacy Policy, we will notify you by posting the updated policy on our website and updating the “Last Updated” date at the top of the policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14.Questions and Contact Information

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us at:

Email:  info@aleoop.io

This document is published by Aleoop, Inc., 28-17 Jackson Ave, Long Island City, NY 11101. Questions: info@aleoop.io. See also our Terms of Service.