DRAFT — For review by legal counsel

Privacy Policy

Last updated: August 2026

Information We Collect

We collect information you provide directly: account details (name, email), form data you create, and submission data your respondents provide through your forms.

How We Use Information

We use information to provide and secure the Alvorant service, operate subscription billing, send transactional communications, troubleshoot the platform, and provide features you request. When you use AI-assisted features, the data needed for that request may be processed by the configured AI model provider under the provider relationship used by Alvorant. This draft does not make a blanket promise about model training or retention; the final policy must match the provider contracts and production configuration in effect at launch.

Data Storage

Production database and object-storage services are configured for encryption at rest, and network connections use TLS in transit. Private file uploads are stored in non-public storage and are served through controlled, time-limited access where implemented.

Connected AI and Third-Party Integrations

If an organization connects its own AI provider, CRM, automation service, storage provider, or other third-party system, Alvorant transmits only the workflow data needed to perform the action the organization configured. The connected provider processes that data under the customer's account, provider agreement, settings, and applicable provider terms. Provider credentials are stored server-side in encrypted form and are not intentionally exposed to browser JavaScript or inserted into general AI prompts.

Data Sharing

We use service providers needed to operate the platform, which may include cloud infrastructure, transactional email, subscription billing/payment processing, and AI model providers when an AI feature is invoked. Customer-connected third-party providers receive data only when the customer configures or invokes that integration. The final production policy should name or categorize the subprocessors actually in use and reflect their contractual terms. We do not sell personal information to advertisers.

Your Rights

You may contact us about access, export, correction, or deletion requests. Available rights and response requirements depend on applicable law, account role, legal retention obligations, and the production capabilities available at the time of the request. Organization owners can export supported submission data from the product where that export feature is available.

Contact

For privacy questions, contact us through the in-app support channel.