ALVANATE PRIVACY
Privacy Policy
Effective July 15, 2026 · Version 2026-07-15.1
This Privacy Policy explains how Alvanate handles information when you create an account, connect a business or provider, use the workspace, communicate with customers, upload references, or measure business activity.
Alvanate does not sell personal information or use connected provider data to train a general-purpose model. Optional product analytics are off by default and can be changed in account settings.
Information we collect
The information depends on the features you use.
- Account, profile, team role, authentication, session, consent, and security records.
- Business setup, products, suppliers, customers, orders, fulfillment, campaigns, communications, and approved workflow data.
- Provider connection metadata and encrypted authorization credentials. Raw secrets are not displayed in the browser or account export.
- Provider-confirmed payments, refunds, costs, and attribution evidence. Licensed providers retain raw payment details.
- Uploaded images, video, documents, links, extracted observations, approvals, and malware-scan results.
- Essential security and reliability logs, plus optional product analytics when you choose to enable them.
How we use information
We use information to provide requested workflows, maintain business memory, enforce approvals and budgets, attribute outcomes, prevent abuse, secure accounts, support customers, recover from errors, meet legal obligations, and improve the product when optional analytics are enabled.
How information is shared
We share information with connected providers when you request or authorize a workflow; with infrastructure, storage, security, support, and payment vendors that process data for Alvanate; when required by law; or as part of a business transaction subject to appropriate safeguards.
We do not share connected Google user data for advertising or use it to train generalized AI models. Use of Google API data is limited to the user-facing features you authorize and follows the Google API Services User Data Policy, including Limited Use requirements.
Your choices and rights
Account settings provide export, deletion, optional analytics, product update, session, and provider disconnection controls. Alvanate records a sale-or-share opt-out by default for the current product and honors Global Privacy Control where applicable.
Privacy requests, including access, correction, deletion, or appeal questions, can be sent to alvanatehq@gmail.com. We verify requests before disclosing or deleting account data.
Retention and deletion
We retain information only as needed for the active account, provider reconciliation, security, backup recovery, disputes, fraud prevention, and legal requirements. Deletion removes active account data subject to narrow retention obligations and documented backup cycles.
Security and incidents
Alvanate uses scoped provider access, encrypted credentials, same-origin mutation checks, immutable evidence where appropriate, activity history, and live-action pause controls. No service can eliminate every risk. We investigate incidents and assess notification duties based on the affected data and applicable law.
Children
Alvanate is a business product and is not directed to children under 18. Do not create an account if you are not legally able to agree to these terms in your jurisdiction.
Policy changes and contact
Material changes receive a new policy version. Current acceptance is required before additional live actions. Contact us at alvanatehq@gmail.com.