Privacy Notice

Payment privacy is managed by Paddle

Paddle is our Merchant of Record and independently controls personal data it collects for checkout, payments, subscription billing, invoicing, taxes, fraud prevention and refunds. Its processing is described in Paddle's Privacy Policy. Direct payment-related privacy questions to Paddle using the contact details in that policy.

Paddle's policy does not replace this notice: Alignmentool Private Limited remains responsible for the account, assessment, usage and support data we process to provide Alignmento. We do not receive or store your full payment-card number or card security code.

Data we collect

• Account data: name, email address, password credentials handled by our authentication provider.
• Profile data: company, job title and avatar, where you provide them.
• Assessment content: campaign details, copy, links and any files you submit for scoring, plus the resulting score, status and date.
• Billing data: plan, subscription status, billing period and payment identifiers.
• Support data: messages and contact details you provide when requesting help or a demo.
• Technical data: log, device and error information needed to operate and secure the service.

Why we use it

To create and secure your account, produce alignment scores and recommendations, apply your plan's credit allowance, maintain subscription access, provide support, and comply with legal obligations. Paddle handles payment collection. Our legal bases are performance of a contract, legitimate interests in operating and securing the product, and consent where required, and legal obligations for required business records. Profile details support account administration; assessment inputs produce your report; billing identifiers maintain your plan; support messages let us respond; technical data helps detect errors and security threats.

Who we share data with

• Paddle — our Merchant of Record, for purchases, subscription management, payments, invoicing, tax compliance, fraud checks and refunds. We share account and purchase identifiers needed to associate your subscription with your Alignmento account. Paddle acts as an independent controller for transaction data under its own Privacy Policy.
• Cloud hosting, database and authentication providers that run the platform.
• AI model providers that generate the qualitative parts of your assessment output.
• Email delivery providers for account and service communications, and professional advisers where needed for legal or accounting obligations.
• Authorities, where disclosure is legally required.

We do not sell your personal data.

Retention

Account and assessment records are kept while your account is active and for a reasonable period afterwards where needed for support, security or legal obligations. Support messages are kept while needed to handle your request and related follow-up. Billing records are retained as long as tax and accounting law requires. We delete or anonymise data when it is no longer needed. Paddle sets retention periods for the payment data it independently controls, as explained in its Privacy Policy.

Your rights

Depending on your location, you may request access, correction, deletion, portability, or object to or restrict certain processing. Email support@alignmento.com and we will respond within the time frames required by law. You may also complain to your local data protection authority. For data controlled by Paddle, use the rights-request contact details in Paddle's Privacy Policy.

Cookies and browser storage

We use essential cookies or browser storage for sign-in and session security, and session storage for assessment drafts. You can clear or block these through your browser settings, but sign-in and saved drafts may no longer work. Any optional analytics or marketing cookies requiring consent will only be used with that consent, which you can withdraw.

International transfers and security

Data may be processed outside your country by the providers above, using appropriate safeguards such as standard contractual clauses. We protect data with encryption in transit, access controls and row-level database security.