Privacy Policy for AlphaY.io

Introduction

This Privacy Policy explains how EvoPorg LLC DBA AlphaY ("AlphaY," "we," "our," or "us") collects, uses, and discloses information when you use our AlphaY.io platform (including web.AlphaY.io), Chrome extension, and related services. Your privacy is important to us, and we are committed to protecting it through our compliance with this policy.

Information We Collect

Account and Registration Information

When you create an account with AlphaY, we collect:

• Name
• Email address
• Company name
• Phone number
• Authentication credentials (encrypted passwords)

Chrome Extension Data

• Authentication tokens (stored locally in your browser)
• URL pattern matching for supported marketplace sites (processed locally on your device)
• Listing data when you choose to import (transmitted to your AlphaY account)
• Previously imported listings information (stored locally to prevent duplicates)
• Browser type and version
• Extension usage statistics
• Error reports and performance data (collected anonymously)

Platform Usage Data

• Business listing information and data you input into the platform
• User-generated notes, analyses, and comments
• Deal pipeline and task management data
• Document metadata (file names, upload dates, access logs)
• Communication logs and interaction history
• Usage analytics and feature interaction data

Technical Information

• IP address and device information
• Browser type and version
• Operating system information
• Login timestamps and session data
• Performance and error logs

How We Use Your Information

We use the collected information to:

Core Platform Functionality

• Provide and maintain our business acquisition platform services
• Enable Chrome extension functionality and marketplace integrations
• Authenticate and manage your account access
• Process and analyze your business listing data
• Generate AI-powered business insights and risk assessments
• Facilitate document management and secure file storage
• Enable communication and collaboration features

AI Analysis and Insights

• Analyze user-generated business listing data (excluding uploaded files) to provide risk assessments, market insights, and strategic recommendations
• Generate business analysis reports using artificial intelligence
• Identify trends and patterns in acquisition opportunities

Service Improvement

• Improve platform functionality and user experience
• Analyze usage patterns to enhance features
• Provide customer support and troubleshooting
• Send important service updates and notifications

Data Storage and Security

Storage Locations

• All data is stored and processed in the United States
• We use secure cloud infrastructure provided by DigitalOcean, Supabase, and Hostinger
• Daily backups are performed for all platform data (excluding file storage)

Security Measures

• All uploaded files are encrypted at rest using AES encryption
• Data transmission is protected with industry-standard encryption
• Access controls and authentication measures protect your account
• Regular security monitoring and updates

File Handling

• Uploaded files are encrypted and stored securely
• Files are not processed by AI tools or used for analysis
• Only business listing data (text-based information) is used for AI analysis

Third-Party Services and AI Providers

We use the following third-party services:

AI Services

• Anthropic (Claude)
• OpenAI (GPT models)
• Perplexity AI
• Internal proprietary models

Data Usage by AI Providers: Our AI service providers do not store your data or use it for training their models. We only send business listing data (excluding files) for analysis purposes.

Other Third-Party Services

• Stripe (payment processing - we only receive email and basic account information)
• DigitalOcean (hosting infrastructure)
• Supabase (database services)
• Hostinger (additional hosting services)

Cookies and Tracking Technologies

We use cookies and similar tracking technologies for:

• Maintaining user authentication and login sessions
• Chrome extension functionality
• Reducing login frequency requirements
• Analyzing platform usage and performance

You can manage cookie preferences through your browser settings.

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except as described below:

Service Providers

We may share information with trusted third-party service providers who assist in operating our platform, provided they agree to keep information confidential and use it only for specified purposes.

AI Analysis

Business listing data (excluding files and excluding personal contact information) may be processed by our AI service providers solely for generating insights and analyses for your use.

Legal Requirements

We may disclose information when required by law, regulation, or valid legal process, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

Data Retention

• Account information is retained while your account is active
• After account closure, we retain information for a minimum of 30 days and no longer than 1 year
• You may request earlier deletion of your data by contacting us
• Some information may be retained longer if required by law

Your Rights and Choices

You have the right to:

• Access the personal information we have about you
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Withdraw consent for data processing
• Object to processing of your personal information
• Request data portability
• Lodge a complaint with supervisory authorities

How to Exercise Your Rights

• Contact us at [email protected]
• Uninstall the Chrome extension at any time
• Close your account through platform settings
• Request specific data actions via email

International Data Transfers

By using our services, you consent to the transfer and processing of your information in the United States, where our servers and service providers are located.

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

California Privacy Rights

California residents may have additional rights under the California Consumer Privacy Act (CCPA) and other state privacy laws. For information about these rights, please contact us at [email protected].

AI Limitations and Professional Review Disclaimer

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Effective Date"
• Sending email notifications for significant changes
• Posting notices in the Chrome Web Store for extension-related changes

Contact Information

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:

Consent

By using our services, you consent to the collection, use, and disclosure of information as described in this Privacy Policy.