Privacy Policy

Conditions under which services may be suspended or terminated.

privacy-policy.webp
Language

Privacy Policy

Effective Date
October 15, 2026

This Privacy Policy outlines how AloPortal, Inc. (a Delaware corporation), including its subsidiaries and affiliates (collectively referred to as "Aloportal," "Company," "we," "us," or "our"), collects, retains, uses, and discloses personal information obtained through our Aloportal application or website ("Site"), online and in-person interactions from users worldwide, and the products and services we provide (collectively, the "Services"). This Privacy Policy is an integral part of, and is governed by, our Terms of Service.

1. Definition of Personal Information

For the purposes of this Privacy Policy, "Personal Information" refers to any information that directly identifies you or can be used in combination with other data to identify you indirectly.

2. Scope of this Privacy Policy

This Privacy Policy applies solely to personal information collected by Aloportal. It does not extend to information we process in our capacity as a data processor or service provider on behalf of our customers.

3. When We Collect Personal Information

We collect your Personal Information through various interactions, including but not limited to:

  • Online Interactions: When you visit our Site, interact with our digital content, subscribe to our communications, download materials, register for events, submit inquiries, or engage with us on social media. Some of this information is collected automatically through cookies, tracking technologies, and analytics tools.
  • Product Interactions: When you request, purchase, or use our products and services, including creating an account, accessing customer support, activating subscriptions, or configuring product settings.
  • Other Sources: When you sign in with Google or Facebook, or a Creator connects an Instagram, TikTok or YouTube account, we receive the profile fields those services share with us for that purpose; and from the service providers that run the Platform, such as Stripe (the status of a payment account), our fraud-prevention tools and our content-moderation scanner.

The following sections provide a detailed overview of the types of Personal Information collected in each of these contexts.

When We Collect Personal Information From Online Interactions

We collect Personal Information through your online interactions with AloPortal, Inc., including but not limited to the following activities:

  • Visiting our Site, application or browsing our online content
  • Requesting a demo, consultation, or trial of our products or services
  • Registering for a promotion or event, such as webinars, training sessions, or partner/reseller events, or scheduling a meeting with us
  • Downloading materials from our Site, such as eBooks, brochures, or whitepapers
  • Contacting us through our online "Contact Us" form or by email, phone, text, or social media platforms
  • Submitting reviews, testimonials, or feedback about our products or services
  • Subscribing to our marketing communications, including newsletters, product updates, and new service announcements

Types of Personal Information Collected From Online Interactions

We collect the following types of Personal Information through your online interactions with Aloportal:

  • Identity and Contact Information: Full name, email address, phone number, and physical address
  • Professional Information: Company name, job title, and business contact details
  • Payment Information: Billing and payment details, where applicable
  • Technical Information: IP address, MAC address, browser type, device type, and operating system
  • Communication Records: Messages, comments, or feedback provided through forms or support channels
  • Behavioral and Usage Data: Pages visited, time spent, clicks, and navigation patterns collected via cookies and analytics tools
  • Location Information: Approximate location based on your IP address
  • Social Media Information: Public profile information and interactions collected from social media platforms
  • Marketing Preferences and Consent Records: Marketing opt-in/opt-out choices and records of consent
  • Referral Information: Source of referral (e.g., social media, ads, or partner promotions)
  • User-Generated Content: Reviews, survey responses, and uploaded documents or images

Some of this information is collected directly from you through forms, surveys, and communications. Other information, such as behavioral patterns and technical data, is collected automatically using cookies and tracking technologies during your interactions with our Site.

When We Collect Personal Information From Product Interactions

At AloPortal, Inc., we collect Personal Information through various product interactions to provide and enhance our services. This occurs when you:

  • Create an account and provide contact and account details
  • Submit support requests or inquiries related to our products and services
  • Access and interact with our knowledge base, technical documentation, or customer support resources
  • Log into, configure, and manage your account while using our products and services
  • Enable notifications or alerts related to product usage, including system updates, security alerts, and service-related messages
  • Enter into an agreement with us or your organization regarding the purchase, licensing, or use of our products (e.g., non-disclosure agreements, service agreements, or end-user license agreements)
  • Engage in product testing, beta programs, or feedback surveys to improve our offerings
  • Integrate our products with third-party applications or services, requiring data exchange for interoperability
  • Sign in or link your account using a third-party provider (e.g. Google, Facebook, or other social or identity providers), in which case we may receive identifier and profile information from that provider

Types of Personal Information Collected From Product Interactions

The types of Personal Information we collect through product interactions include, but are not limited to:

  • Identity and Contact Information: Name, email address, phone number, company name, and organization details
  • Account Information: Username and account preferences
  • Technical and Usage Data: IP address, device information, browser type, and operating system
  • Product Usage and Configuration Data: Telemetry data such as system interactions, feature usage, performance metrics, and configuration settings
  • Order and Transaction Details: Purchase history, subscription details, invoices, and payment records
  • Location Information: Approximate geographic location based on IP address or device settings
  • Customer Support Records: Communication history, troubleshooting logs, and service request details
  • Security and Compliance Data: Login activity, authentication logs, and fraud detection signals
  • Error and Performance Monitoring Data: Technical and usage data collected for reliability, security, and performance (e.g. error reports, performance metrics), which may be processed by monitoring and analytics services
  • Marketing and Feedback Information: Participation in surveys, reviews, beta programs, and promotional offers

Some of this information is provided directly by you when creating an account, managing your profile, or interacting with our services. Other data is collected automatically through cookies, tracking technologies, and telemetry systems when you use our products.

We use this information to deliver a seamless user experience, enhance security, comply with regulatory requirements, and improve our products and services.

How We Use Personal Information From Product Interactions

At AloPortal, Inc., we use Personal Information collected from product interactions to provide, improve, and support our products and services. This includes:

  • Account Authentication and Security: Verifying and securing your account using your email address, authentication tokens (OTP, social login credentials), and authentication logs
  • User Experience and Product Enhancement: Understanding how users interact with our products to improve performance, personalize experiences, and develop new features
  • Customer Support and Service Optimization: Implementing real-time responses to customer inquiries, providing technical support, and troubleshooting issues
  • Product Updates and Recommendations: Recommending new features, upgrades, or service enhancements tailored to your needs
  • Security and Monitoring: Detecting unauthorized access, ensuring compliance with security protocols, and monitoring product usage for fraud prevention
  • Contract and Transaction Processing: Managing transactions, processing invoices, enforcing agreements (e.g., End User Agreements, Subscription Contracts), and maintaining accurate business records
  • Transactional and Service Communications: Sending verification emails, password resets, receipts, and other service-related notifications via third-party email delivery providers

When We Collect and Use Personal Information From Other Sources

Every outside source we receive Personal Information from is one you chose to use, or one we need to keep the Platform safe:

  • Sign-in providers (Google, Facebook): your name, email address and profile picture, when you sign in or link your account with them
  • Connected social accounts (Instagram, TikTok, YouTube): the account identifier, the profile or channel name and the statistics you choose to connect, as Section 11 describes
  • Our payment processor (Stripe): the state of a payment, subscription, payout account or dispute, and the fraud signals Stripe shares with us. We never receive your full card number
  • Our fraud-prevention tools and our content-moderation scanner: risk scores for a payment or an account, and the classification of media uploaded to the Platform

Types of Personal Information Collected From Other Sources

Identifiers (name, email address, profile picture, account identifiers), transaction and payout status, risk and moderation signals, and the content statistics you connect. We do not buy or receive lists of contacts, business cards, lead data or audience profiles from anyone.

How We Use Personal Information From Other Sources

We use Personal Information from these sources to:

  • Sign you in and keep your account secure
  • Show you the social accounts you connected and let Alo work with them (Section 11)
  • Keep payments, subscriptions and payouts in step with our payment processor
  • Detect fraud and content that breaks our rules
  • Run the Affiliate and Ambassador Programs described in Section 6 of our Terms of Service (who referred whom, so commissions can be paid)

We do not use information from these sources for targeted advertising or to build audience profiles. Where a social platform shares your data with us, the platform's own settings let you review and limit what it shares.

4. Types of Personal Information Collected

The types of Personal Information we collect include:

  • Identity and Contact Information: Name, email address, phone number, company name
  • Account Information: Username, account preferences
  • Technical and Usage Data: IP address, device information, browser type
  • Product Usage and Configuration Data: Telemetry data, feature usage, performance metrics
  • Order and Transaction Details: Purchase history, subscription details
  • Location Information: Approximate geographic location based on IP address
  • Customer Support Records: Communication history, troubleshooting logs
  • Security and Compliance Data: Login activity, authentication logs
  • Marketing and Feedback Information: Survey responses, reviews, promotional preferences
  • AI Features and Connected Accounts: Content and prompts you submit to AI features, and, if you connect a social media account, that account's profile information and your own posts' metadata and media

5. How We Use Personal Information

Aloportal collects and utilizes Personal Information from online interactions to operate and enhance our Site, deliver our products and services, and support business growth. The purposes for which we process this information include, but are not limited to:

  • Respond to Inquiries and Requests: Process and respond to your requests for information, such as product demonstrations, consultations, or access to digital materials (e.g., eBooks, whitepapers).
  • Provide Product and Service Information: Send you relevant details about our products, services, and updates based on your expressed interest.
  • Marketing and Promotional Communications: Deliver marketing materials, including announcements about new products, educational content, newsletters, blog updates, industry insights, special promotions, and co-marketing efforts with our partners. You may opt out of marketing communications at any time through our Site or via unsubscribe links.
  • Event Registration and Participation: Facilitate your participation in training sessions, webinars, partner events, and industry conferences by using your provided contact details.
  • Technical Support and Security: Diagnose and resolve technical issues, ensure the security and integrity of our Site, and monitor for fraudulent or unauthorized activities.
  • Promotional Campaigns and Incentives: Administer promotional offers, loyalty programs, and prize distributions in connection with special events.
  • User Engagement and Feedback: Invite you to provide feedback, reviews, or ratings on our Site, products, and customer experience.
  • Advertising: We do not use your Personal Information to show you targeted advertising, on the Platform or anywhere else, and we do not sell or share it for that purpose. If that ever changes, we will update this Policy first and ask for your consent where the law requires it.
  • Analytics and Performance Monitoring: Evaluate how people find and use our Site, understand user engagement, and improve the functionality and performance of our digital platforms.
  • Location-Based Content and Services: Determine your geographic region to deliver relevant content, localized language settings, and tailored product offerings.
  • Regulatory Compliance: Comply with applicable laws, industry regulations, and legal obligations, including data retention and security requirements.
  • Business Partnerships and Vendor Services: Share necessary information with our trusted partners, vendors, and service providers who assist in operating our business and delivering our services.
  • Fraud Prevention and Risk Management: Detect, investigate, and mitigate fraudulent transactions, unauthorized access, and other security threats.
  • AI Features: Provide optional AI features that draft and edit your portal content at your direction, including processing your prompts, portal content, and media you select. See the section "AI Features (Alo) and Connected Social Accounts" below.

Some of this information is collected directly from you, while other data (such as Site usage patterns, IP addresses, and device details) is obtained through automated tracking technologies. We take all reasonable measures to ensure that your Personal Information is handled securely and in compliance with applicable data protection laws.

Statistics Creators See About Their Portal

When you visit a Creator's portal, the Creator can see aggregated statistics about visits to that portal: counts by traffic source, country, device type and campaign tag, clicks on the portal's links, and purchases. Creators never see a visitor's name, email address, or IP address in these statistics. A country, referring site, or campaign with fewer than 5 visits in the period shown is grouped with others rather than listed on its own. We count visits with a pseudonymous code that is different for each portal and is never shown to Creators; we do not store the IP address or browser details of a portal visit.

When you submit a form on a Creator's portal (for example to join a mailing list), the details you enter are shared with that Creator. We also record the IP address and browser details of the submission; we keep them for at most 90 days, and they are not shown to Creators.

When you subscribe to or buy from a Creator, that Creator receives your name and email address so they can deliver what you bought and contact you about it.

6. Disclosure of Personal Information

At AloPortal, Inc., we disclose Personal Information only when necessary to provide our services, fulfill legal obligations, or support business operations in a secure and compliant manner. We may share your Personal Information with the following categories of recipients:

Service Providers and Vendors

We engage third-party vendors who are contractually obligated to process Personal Information solely on our behalf and in accordance with our instructions. These vendors assist in:

  • Site and Product Management: Administering, maintaining, and improving our Site and digital services
  • Personalization and User Experience: Customizing interactions, preferences, and recommendations
  • Order Processing and Payment Handling: Facilitating transactions, billing, and shipping of products and services
  • Professional and Business Services: Providing legal, financial, compliance, and consulting services
  • Data Analytics and Performance Tracking: Assessing Site and product usage for business intelligence
  • Security and Fraud Prevention: Monitoring and mitigating security risks, including unauthorized access and cyber threats
  • Hosting, Cloud Storage, and Backup Services: Securing and managing infrastructure for data storage and system redundancy
  • Email Delivery: Sending the service emails and, with your consent where the law requires it, the marketing emails described in this Policy

We use service providers that may process Personal Information on our behalf, including but not limited to: hosting and infrastructure (e.g. Vercel); database and authentication (e.g. Supabase); payment processing (e.g. Stripe); transactional email delivery (e.g. SendGrid); AI processing for optional assistant features (e.g. Anthropic, and Google's Gemini API for reading YouTube videos you choose); and analytics and error or performance monitoring services. Their use of data is governed by their respective privacy policies and our agreements with them.

For Creators who sell content or subscriptions through the Platform, the payment processor (e.g. Stripe) acts as the payment facilitator, and the Creator (or their connected payment account) is the merchant of record. As part of the payment onboarding process, Creators may be required to provide tax identification information (e.g. Social Security Number, Taxpayer Identification Number, W-9, or equivalent) directly to the payment processor for tax reporting purposes (e.g. IRS Form 1099-K). This information is collected and processed by the payment processor in accordance with its own privacy policy and is not stored or accessed by Aloportal.

If you sign in or link your account using a third-party provider (e.g. Google, Facebook, or other social or identity providers), we may receive identifier and profile information from that provider in accordance with their policies. That data is used for authentication and account management and is subject to this Privacy Policy.

All vendors are required to adhere to data protection and confidentiality agreements, ensuring your information is handled securely.

Business Partners and Affiliates

We share Personal Information with:

  • Affiliates and Ambassadors in our referral programs (Section 6 of the Terms of Service): whether a referral led to a sign-up or a purchase, and the commission it earned

We have no resellers, distributors, event partners or advertising partners, and we share no Personal Information with such companies. Where legally required, we will obtain your consent before sharing your information for marketing purposes. For details on how to opt out, see Section 7 below and the unsubscribe link in every marketing email.

Legal and Regulatory Authorities

We may disclose Personal Information when required to comply with applicable laws, regulations, or legal processes, including:

  • Responding to subpoenas, court orders, or regulatory investigations
  • Meeting compliance obligations under industry standards or government regulations
  • Exercising, establishing, or defending our legal rights in disputes or litigation
  • Protecting the safety, rights, or property of Aloportal, its employees, customers, or the public

Such disclosures will be made in strict compliance with legal requirements.

Corporate Transactions and Business Transfers

In the event of a merger, acquisition, restructuring, asset sale, or bankruptcy, your Personal Information may be shared with the involved parties, including potential buyers, investors, legal representatives, and advisors. Any recipient of your data in such a transaction will be required to:

  • Use the information only for the disclosed purposes and in line with this Privacy Policy
  • Implement necessary safeguards and confidentiality measures

Other Disclosures with Your Consent

In certain cases, we may share your Personal Information with third parties when you provide explicit consent, such as:

  • Engaging in joint business initiatives
  • Requesting a referral to a partner or service provider
  • Opting into third-party promotions or co-branded offerings

Where applicable, you will be provided with clear choices to opt in or withdraw consent.

We take data security and compliance seriously and ensure that all data-sharing practices align with regulatory standards. For further details on how we protect your Personal Information, see Section 16 (How We Protect Your Personal Information).

7. How We Use Cookies and Tracking Technologies

We use cookies and tracking technologies for the following purposes:

1. Essential Cookies (Strictly Necessary)

These cookies are fundamental for website operation and enable key functionalities such as:

  • Secure login authentication
  • Load balancing and performance optimization
  • Compliance with legal and security requirements

Disabling these cookies may impact your ability to use Aloportal properly.

2. Performance and Analytics Cookies

These cookies help us understand how users interact with our website. We use them to:

  • Analyze visitor behavior and website usage trends
  • Identify and fix technical issues
  • Enhance overall site performance and usability

3. Functionality Cookies

These cookies allow Aloportal to remember your preferences and provide a personalized experience, such as:

  • Remembering your username, language preferences, and region
  • Saving custom settings for a seamless browsing experience
  • Providing improved user interface interactions

4. Advertising and Marketing Cookies

Today we set no advertising cookies and work with no advertising network. The only marketing pixels on the Platform are the ones a Creator adds to their own portal (for example a Meta or TikTok pixel): they load only after you accept marketing cookies in the banner, they are the Creator's, and the provider's privacy policy governs them. The marketing category in the cookie banner covers those pixels.

Your Consent and Choices

Strictly necessary cookies (sign-in, security, and your consent choice itself) are always on. Analytics and marketing cookies are set only after you accept them in the cookie banner. In Quebec and the rest of Canada, the European Union, the United Kingdom, Switzerland and California, where the law requires consent, they stay off until you have accepted. You can withdraw your choice at any time by deleting the cookies for aloportal.com in your browser, after which the banner asks you again, or by writing to the Privacy Officer; and you can also:

  • Manage Cookie Preferences: Modify your cookie settings in your browser to block or limit cookies
  • Marketing cookies: switch them off at any time in the cookie banner's settings (the floating cookie button on our website, or the Cookie Preferences link in a portal's footer)
  • Disable Tracking in Browsers: Use browser settings to limit or delete cookies

Please note that disabling certain cookies may affect website functionality and limit access to some features.

Third-Party Cookies and Tracking

We work with third-party service providers who may place cookies or tracking technologies on our website for:

  • Product analytics (PostHog), set only after you accept analytics cookies where consent is required
  • Error monitoring (Sentry), payments and fraud prevention (Stripe), video playback (Mux) and the consent banner itself (CookieYes), which are needed to run the Platform
  • Advertising pixels that a Creator adds to their own portal (for example a Meta or TikTok pixel), which run under that Creator's responsibility and only on that portal
  • Fraud detection and security monitoring

These third parties may track your online activities across multiple websites over time. For details on their data collection practices, refer to their respective privacy policies.

For further information on managing cookies, please refer to your browser settings or contact our Privacy Officer at privacy@aloportal.com.

8. EEA, Switzerland, and UK Residents

At AloPortal, Inc., we process Personal Information in accordance with the applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Economic Area (EEA), the UK GDPR, and the Swiss Federal Data Protection Act.

Legal Basis for Processing Personal Information

The legal basis for processing your Personal Information depends on the context in which we collect and use it. We may process your Personal Information under the following legal grounds:

1. Consent:

We may process your Personal Information based on your explicit consent. This applies, for example, to the use of cookies and tracking technologies, marketing communications, and certain data-sharing activities. Where consent is required, we will request it before processing your data.

2. Contractual Necessity:

If you have entered into an agreement with us, we process your Personal Information to fulfill our contractual obligations, including:

  • Providing access to our products and services
  • Managing account creation and authentication
  • Processing transactions, including billing and invoicing
  • Sending important service-related communications, such as account updates or changes to terms and conditions
  • Providing customer support and technical assistance

3. Legitimate Interests:

We may process your Personal Information when it is necessary for our legitimate business interests, provided that your rights and freedoms do not outweigh these interests. This includes:

  • Understanding how users interact with our Site, products, and services to improve functionality and user experience
  • Conducting research, analytics, and business intelligence
  • Securing our systems, preventing fraud, and ensuring compliance with security policies
  • Managing event registrations, promotions, and product demos
  • Sending transactional communications regarding service updates, product improvements, and customer notifications

4. Legal Obligations:

In some cases, we are required to process Personal Information to comply with legal and regulatory obligations, such as:

  • Responding to law enforcement requests
  • Complying with financial, tax, and accounting regulations
  • Meeting data protection requirements under applicable privacy laws

Data Transfers and Safeguards

If your Personal Information is transferred outside of the EEA, UK, or Switzerland, we implement appropriate safeguards to ensure your data remains protected. These measures may include:

  • Standard Contractual Clauses (SCCs): Approved by the European Commission and UK authorities to ensure data protection in cross-border transfers
  • Data Processing Agreements (DPAs): Contracts with third-party vendors ensuring compliance with GDPR and other applicable laws
  • Adequacy Decisions: Where applicable, transfers are made to countries that the European Commission has deemed to provide an adequate level of data protection

For further details regarding data transfers and safeguards, you may contact our Privacy Officer at privacy@aloportal.com.

Your Rights Under GDPR and UK Data Protection Laws

As a resident of the EEA, UK, or Switzerland, you have the following rights regarding your Personal Information:

  • Right to Access: You can request copies of your Personal Information that we process. In certain cases, there may be legal exemptions preventing full disclosure
  • Right to Rectification: You have the right to request corrections to inaccurate or incomplete Personal Information
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your Personal Information, subject to legal and contractual limitations. For detailed step-by-step instructions on how to request data deletion, please see Section 12: Data Deletion & Account Deletion.
  • Right to Object or Restrict Processing: In certain situations, you may object to our processing of your Personal Information or request that we limit its use
  • Right to Data Portability: You can request a copy of your Personal Information in a structured, commonly used, and machine-readable format to transfer it to another service provider
  • Right to Opt-Out of Marketing Communications: You can opt out of receiving promotional emails, newsletters, and other marketing communications by using the unsubscribe link in our emails
  • Right to Withdraw Consent: If we process your Personal Information based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the legality of processing conducted prior to the withdrawal
  • Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to file a complaint with your local data protection authority:
    • EEA Residents: Contact the relevant data protection authority in your country
    • UK Residents: Contact the UK Information Commissioner's Office (ICO) at www.ico.org.uk
    • Switzerland Residents: Contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch

To exercise any of your rights, you may submit a request to our Privacy Officer at privacy@aloportal.com or by mail to the address in Section 17 (How to Contact Us), or through Help & feedback in the app or the chat on our help center at help.aloportal.com. We will respond within the timeframes required under applicable laws.

8A. Quebec and Canada Residents

If you live in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to how we handle your Personal Information, and if you live in Quebec, so does the Act respecting the protection of personal information in the private sector (as amended by Law 25). Our Privacy Officer, named in Section 17, is the person in charge of the protection of personal information at AloPortal, Inc.

You may ask us what Personal Information we hold about you and how we use it, ask us to correct it, and withdraw your consent to its use (which may end some services, as we will explain at the time). If you live in Quebec you may also ask us to stop sharing information that identifies you or to de-index it where the law allows, and ask to receive the computerized Personal Information you gave us in a structured, commonly used technological format. We answer within 30 days. Section 10 explains that we store Personal Information in the United States, with the providers named in this Policy.

If you are not satisfied with our answer, you may complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or, elsewhere in Canada, to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

9. California Residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), residents of California have specific rights regarding their personal information. This section explains how AloPortal, Inc. collects, processes, shares, and protects the personal information of California residents and how they can exercise their rights under applicable laws. AloPortal, Inc. does not currently meet the thresholds that make the CCPA apply to a business (annual revenue over $25 million, the personal information of 100,000 or more California residents or households, or half of its revenue from selling personal information). We honor the rights described in this Section for California residents anyway.

Categories of Personal Information Collected

We have collected and disclosed the following categories of personal information:

  • Identifiers: Name, mailing address, email address, phone number, and other contact details
  • Commercial Information: Transaction history, purchase details, and service records
  • Financial Information: Payment details, including credit card or other financial account data
  • Internet or Network Activity: IP address, device identifiers, browser type, Site interactions, and online activity logs
  • Professional or Employment-Related Information: Employer details, job title, and business affiliations
  • General Location Information: Geolocation inferred from IP addresses
  • Inferred Data: User engagement patterns, behavioral insights, and analytics-based customer segmentation
  • Audio and Visual Information: Customer service calls, video interactions (where applicable), and other recorded communications
  • Sensitive Personal Information: Account login credentials and authentication tokens

We collect personal information from three main sources:

  • Directly from you (when you use our products, register an account, or communicate with us)
  • Automatically (through cookies, tracking technologies, and interactions with our services)
  • From the other sources listed in Section 3 (sign-in providers, connected social accounts, our payment processor and our safety tools)

For more details on our data collection practices, please refer to the When We Collect Personal Information section of this Privacy Policy.

Disclosure of Personal Information

We disclose the categories of personal information listed above to the third parties specified in our Disclosure of Personal Information section. These may include:

  • Service Providers and Vendors: Entities that provide Site hosting, payment processing, data analytics, and customer support
  • Affiliates and Ambassadors: In our referral programs, whether a referral led to a sign-up or a purchase, and the commission it earned
  • Regulatory and Legal Authorities: When required to comply with applicable laws, enforce agreements, or respond to legal proceedings
  • Corporate Transactions: If Aloportal undergoes a merger, acquisition, or sale, personal information may be shared with relevant stakeholders

"Sale" and "Sharing" of Personal Information

Under the CCPA/CPRA, the terms "sale" and "sharing" refer to certain data-sharing practices where personal information is transferred to third parties for monetary or other valuable consideration.

  • We do not sell personal information for direct financial gain
  • We share online identifiers and usage data only with our analytics provider (PostHog), which acts as our service provider; that is not a sale or a sharing under the CCPA
  • We do not sell or share the personal information of individuals under 16 years of age

We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. If that ever changes, we will add a "Your Privacy Choices" link to our Site and honor Global Privacy Control signals before doing so. You can always reach our Privacy Officer at privacy@aloportal.com.

Your CCPA/CPRA Rights

As a California resident, you have the following rights under the CCPA/CPRA:

  • Right to Know: Request details on the categories of personal information collected, sources, processing purposes, and third parties to whom we disclose data
  • Right to Access: Obtain a copy of your personal information in a portable and usable format
  • Right to Delete: Request the deletion of personal information, subject to legal and business exceptions
  • Right to Correct: Request corrections to inaccurate or incomplete personal information
  • Right to Opt-Out of Data Sales/Sharing: Opt out of the sale or sharing of your personal information for targeted advertising
  • Right to Limit Use of Sensitive Personal Information: Restrict the processing of sensitive data for certain purposes
  • Right to Non-Discrimination: We will not deny services, charge different prices, or provide a lower quality of service based on the exercise of your privacy rights

To exercise any of these rights, please submit a request by:

Email: privacy@aloportal.com (our Privacy Officer)

Mail: Privacy Officer, AloPortal, Inc., 2093 Philadelphia Pike #3213, Claymont, DE 19703, United States

In the app: Help & feedback, when you are signed in

Help center chat: help.aloportal.com, which works without signing in

You will need to verify your identity before we process your request. This may require providing details such as your email address or transaction history. If you are submitting a request on behalf of another individual, we may require written authorization, such as a power of attorney.

Some personal information may be exempt from deletion requests due to legal, contractual, or security obligations.

Do Not Track (DNT) and Retention of Personal Information

  • Do Not Track (DNT): Our Site does not currently respond to browser-initiated DNT signals, as the industry is still developing a standardized approach. We do not read Global Privacy Control (GPC) signals today, because we do not sell or share personal information; we will before we ever do.
  • Data Retention: Personal information is retained only as long as necessary to fulfill business, legal, and regulatory requirements. Section 13 (Data Retention) gives the details.

Opting Out of Marketing Communications

You may opt out of receiving marketing communications at any time by:

  • Clicking the "unsubscribe" link in promotional emails
  • Adjusting your email preferences in your account settings
  • Contacting our Privacy Officer at privacy@aloportal.com to request removal from our marketing lists

Even after opting out, you may still receive service-related communications regarding transactions, security updates, or product changes.

Third-Party Links

Our Site may contain links to external third-party Sites. Please note that:

  • These sites are governed by their own privacy policies, and we are not responsible for their data practices
  • We recommend reviewing their privacy policies before providing any personal information

For any additional questions regarding California privacy rights, you may contact our Privacy Officer at privacy@aloportal.com or reach out to the California Attorney General's Office at www.oag.ca.gov/privacy/ccpa.

10. Where Your Personal Information is Stored and Processed

At AloPortal, Inc., we may store, process, and transfer your Personal Information across multiple jurisdictions, including countries outside of your country of residence. These jurisdictions may have data protection laws that differ from those in your region, and in some cases, may not offer the same level of protection.

Our primary data hosting and processing locations include:

  • United States: Our Site, applications, and cloud services are primarily hosted in the United States
  • Other International Locations: We may process data in other jurisdictions where our affiliates, service providers, or partners operate

Your Personal Information may be transferred, processed and stored outside your home country, including outside Quebec and Canada for Canadian residents, in jurisdictions whose data protection laws may differ from yours. We tell you this here so that you know it before you give us your information, and we implement appropriate safeguards to ensure that your data is handled securely and in compliance with applicable privacy laws.

To protect your Personal Information when transferred internationally, we:

  • Use Standard Contractual Clauses (SCCs) or equivalent legal frameworks for data transfers
  • Ensure vendors and partners adhere to strict data protection agreements
  • Comply with regional data privacy laws, including GDPR, CCPA, and PIPEDA, where applicable

For more details regarding cross-border data transfers, please contact our Privacy Officer at privacy@aloportal.com.

11. AI Features (Alo) and Connected Social Accounts

The Alo Assistant

Aloportal offers an optional AI assistant ("Alo") that helps Creators build and edit their portal content through conversation. When you use Alo, the messages you type, the content of your portal (such as page blocks, themes, profile text, posts, and course drafts), and media you choose to process (including transcripts and still frames derived from your videos) are processed to generate suggested content. Everything Alo produces is a draft: nothing is published or made public unless you explicitly save or publish it yourself.

AI Service Provider

To provide Alo, we share the content described above with Anthropic, PBC (United States), the provider of the Claude AI models, acting as our service provider. Anthropic processes this data to generate responses and, under its commercial terms, does not use it to train its models. We do not sell your content, and we do not share it with any other AI provider without updating this Privacy Policy.

We use one other AI provider, for one purpose only. When you ask Alo to watch one of your own public YouTube videos, we send that video's YouTube link to Google LLC (United States) through its Gemini API, acting as our service provider. Google watches the video and returns what is said in it and what is shown on screen, which Alo then uses to draft content for you. We send Google nothing else about you: not your name, your email, your portal, or your conversations with Alo. Under the Gemini API terms for paid services, Google does not use what we send or what it returns to improve its products, and keeps it for a limited time only to detect and prevent abuse. Google may process it in any country where it has facilities.

Records We Keep

We retain records of Alo conversations (your prompts, Alo's responses, and the actions Alo took) and usage metering (token counts and credit charges) for security auditing, abuse prevention, billing accuracy, and support. These records are visible to authorized Aloportal administrators under access controls, and administrator access to conversation content is itself logged.

Portal Concierge (for Visitors)

A Creator may turn on a visitor-facing assistant on their public portal (“Ask [creator]”). It answers questions using only that portal's public content. When you use it, the questions you type and the answers you receive are processed by the AI service provider described above and kept for up to 90 days so the Creator can see what visitors ask and so we can prevent abuse. The assistant does not ask for, and we do not store, your name or email address. We store a one-way hash derived from your connection to apply rate limits and to group questions from the same visit; it does not identify you and we do not attempt to re-identify it. If you are signed in, your membership status on that portal is used to shape the answer but is not stored with the question.

Connected Social Accounts

Where available, you may connect your own social media accounts (for example Instagram or TikTok) to import your own content into Aloportal. Instagram and TikTok connections use each platform's official login (OAuth); YouTube is described below. Connections are read-only: Aloportal never posts to your social accounts. Depending on the platform, we access your account's display name and avatar, and your own posts' captions, titles, descriptions, cover images, and media files, solely to display them to you and to create Aloportal content you direct us to create. Access tokens are stored encrypted and are deleted when you disconnect the account, which you can do at any time from your dashboard. Content you imported and saved into your portal remains yours and stays until you delete it.

YouTube (Google User Data)

When you connect a YouTube channel, Aloportal uses YouTube API Services. Google's Privacy Policy (policies.google.com/privacy) explains how Google handles your data.

What we access. You can connect in one of two ways. If you sign in with Google, you give us read-only access to your YouTube account. If you paste your channel's link instead, we read only what your channel shows publicly. Either way we read your channel's ID, name, handle, profile picture and video count and, for the videos on your channel, their IDs, titles, descriptions, thumbnails, publish dates and lengths. We cannot see or download your video files, and we cannot upload, edit or delete videos, or comment, like or subscribe on your behalf.

When you ask Alo to watch a video. If you signed in with Google, you can ask Alo to watch one of your own public videos, from Settings > Connectors or in a conversation. Before anything happens we show you what it costs in Alo AI credits and you approve it. We check with YouTube, using your access, that the video is on your connected channel and public, then send its YouTube link to Google's Gemini API (see “AI Service Provider” above), which returns a transcript of what is said and notes on what is shown. We never download the video file ourselves. Unlisted and private videos cannot be watched this way.

How we use it. We use it to show you which channel is connected and your videos, and, when you ask Alo, to suggest and draft posts, lessons and pages from your videos' titles, descriptions and thumbnails, and, for a video you ask Alo to watch, from what is said and shown in it. Nothing Alo drafts is published unless you publish it. We do not use YouTube data for advertising, we do not sell it, and we do not use it to train AI models.

Who it is shared with. We do not share your YouTube data beyond what you choose to show on your portal, except with the service providers that run Aloportal for us: Anthropic, PBC, our AI service provider, processes what Alo reads to answer your request and, under its commercial terms, does not use it to train its models; Google LLC, through its Gemini API, watches a public video only when you ask Alo to and, under its paid-service terms, does not use it to improve its products; our hosting and database providers store it for us. We share it with no one else, except where the law requires. Our staff do not read your YouTube data, except with your permission, for security reasons, or where the law requires.

How long we keep it. Access tokens are encrypted before they are stored and are never sent to your browser. We keep the channel details and video listings we store for at most 30 days unless we refresh them from YouTube, and we delete them when we cannot. The transcript and notes from a video Alo watched are kept for at most 7 days, so asking about the same video again that week does not cost credits twice; Alo's copy of them in your conversation is removed after 30 days. When you disconnect your channel, or schedule the deletion of your Aloportal account, we remove our access and delete the channel details, video listings, transcripts and notes we store straight away, or within 7 days if that first attempt fails. Alo's own written replies in your conversations may still mention your videos' titles, and posts and lessons you made from your videos stay until you delete them.

Removing our access. You can disconnect your channel at any time in Settings > Connectors; if you signed in with Google, this also removes our access at Google. You can also remove our access on Google's security settings page (security.google.com/settings/security/permissions). Removing data from Aloportal does not delete anything on YouTube.

Aloportal's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. Questions about your YouTube data go to our Privacy Officer (Section 17).

Your Choices

Alo and social connections are optional. You can decline to use them, disconnect a linked account at any time, and discard any AI-generated draft before it is saved. Credit balances, grants, and purchase records related to AI usage are processed as billing data under the other sections of this policy.

12. Data Deletion & Account Deletion

You can ask us to delete your account and personal data at any time. This section says what actually happens when you do. Our Data Deletion Instructions page covers the same ground in more detail.

How to Request Deletion

The fastest route is inside the app: sign in, open Settings and use Delete account on the Account tab, as described on our Data Deletion Instructions page.

You can also ask us: message us from Help & feedback in the app, use the chat on our help center at help.aloportal.com (you do not need to be signed in), or write to our Privacy Officer at privacy@aloportal.com or by mail to the address in Section 17. A member of our team handles every request made to us personally, whether or not you can still sign in.

When you ask us, please include:

  • The email address on your AloPortal account
  • Your portal URL or slug, if you have one
  • Whether you want your whole account deleted, or only specific data

A request made another way, or to someone else here, still counts and we will still act on it.

What Gets Deleted

We permanently remove:

  • The details that identify you: email address, name, username, and profile photo
  • Your sign-in credentials and connected sign-in methods, such as Google
  • Images, files, and video you uploaded to AloPortal
  • Connected social account access tokens and imported data (also deleted immediately whenever you disconnect an account)
  • Your conversations with Alo, our AI assistant
  • Course reviews you wrote
  • Your notification settings and notification history

Where a social platform sends us a data-deletion request on your behalf (for example via Meta's data deletion callback), we honor it by deleting the imported data and access tokens associated with that connection.

What Gets Anonymized

Some records describe money that moved between two people. A payment involves a buyer and a creator, and deleting one side's copy would destroy the other side's record of their own sale or purchase.

For those we remove what links them to you rather than removing the record. Your email, name, username, and account identifiers come off, leaving the transaction with no person attached to it.

We do not attempt to re-identify anonymized data. One honest consequence: once a record is anonymized we can no longer find it for you either, so we cannot answer a later request for a copy of it.

What We Keep, and Why

A short list of records survives deletion, each for a specific reason:

  • Payment and payout records, because tax and accounting law requires them and the person on the other side of your transaction needs their own copy to stay accurate
  • Chargeback and dispute evidence, to establish or defend a legal claim
  • Fraud and abuse signals, to protect other people on the platform from repeat harm
  • Your email on our do-not-contact list, if you unsubscribed, since it is the only way to be certain we never email you again

Your Portal and Your Buyers

If you sell on AloPortal, closing your account affects other people:

  • Your portal stops accepting new sales straight away and its public page goes offline
  • Active subscriptions are cancelled at the end of the period your subscribers have already paid for, so nobody is billed again
  • Content your buyers already purchased goes offline with your portal. Their record of the purchase remains, but the content is no longer reachable. Please tell your audience before you go
  • We do not issue automatic refunds. You are the merchant of record for purchases on your portal, so refund requests are between you and your buyer

Processing Time

We act without undue delay and within 30 days of verifying the request. The clock starts once we have verified you, not when your first message arrives. If a request is unusually complicated we may need longer, and we will tell you before the 30 days are up rather than after.

Deleted data can persist in our encrypted backups until they rotate out on their normal schedule. While it sits there it is not accessed, not used, and not restored to live systems for any purpose other than disaster recovery.

Verification, and Services We Use

Deletion cannot be undone, so we confirm the request came from the account holder. We will not delete an account because someone else asked us to, including someone claiming to act for you.

Some of your data sits with the providers that run parts of AloPortal: Stripe for payments, Mux for video, SendGrid for email, Featurebase for our help center and support messages. We instruct them to delete it. We say instruct rather than delete because their own legal retention obligations are theirs, not ours, and can differ from ours.

If you connected a Stripe account to get paid, that account is yours and is governed by your agreement with Stripe. We disconnect it from AloPortal. We cannot and do not delete it.

One thing no platform can undo: a portal is a public web page, so anything that was public may already have been saved, shared, or cached elsewhere by other people. Deleting your account removes it from AloPortal, not from the internet.

13. Data Retention

We retain your Personal Information only as long as necessary to:

  • Provide you with our products and services
  • Fulfill contractual obligations
  • Comply with legal, tax, and regulatory requirements
  • Resolve disputes and enforce agreements
  • Maintain security, fraud prevention, and audit controls

The retention period for your Personal Information depends on:

  • The purpose for which it was collected
  • Legal and regulatory requirements in your jurisdiction
  • Our need to maintain accurate records for compliance and reporting

When Personal Information is no longer required, we take appropriate steps to securely delete, anonymize, or de-identify it in accordance with applicable laws and industry standard.

AI conversation and usage records are retained while your account is active and are removed as part of account deletion, except for minimal billing records we are required to keep.

14. Children and Minors

Members must be at least 13 years old, and under 18 only with a parent's or guardian's permission; Creators must be at least 18, and so must anyone who buys, subscribes, tips or views content labelled for adults (see Section 1 of our Terms of Service). We do not knowingly collect Personal Information from a child under 13 or, in Quebec, from a child under 14 without the consent of the person having parental authority, and we do not target children in our marketing or product offerings.

If you believe that a child has provided us with Personal Information, please contact our Privacy Officer at privacy@aloportal.com. If we become aware of such data collection, we will take immediate steps to:

  • Delete the information as required by applicable laws
  • Restrict access to any associated accounts
  • Take additional measures to prevent future occurrences

We encourage parents and guardians to monitor their children's online activities and educate them on responsible data sharing.

15. Updates to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

  • Legal and regulatory requirements
  • Industry best practices and security standards
  • Our business operations, products, or services

When updates are made, we will:

  • Post the revised policy on our Site with the "Last Updated" date
  • Notify users if significant changes impact how we collect, use, or share Personal Information
  • Obtain new consent where required by applicable law

We encourage you to review this Privacy Policy regularly to stay informed of any changes. When a change is material, we tell you before it takes effect, by email or with a notice in the Platform, and where the law requires your consent for a new use of your Personal Information, we ask for it first.

16. How We Protect Your Personal Information

At Aloportal, we implement robust technical, administrative, and organizational security measures to safeguard your Personal Information from:

  • Unauthorized access or disclosure
  • Loss, alteration, or destruction
  • Cyber threats, data breaches, and fraudulent activity

Our security measures include:

  • Data Encryption: Personal Information is encrypted during transmission and storage
  • Access Controls: Restricted data access on a need-to-know basis for authorized personnel only
  • Regular Security Audits: Ongoing vulnerability assessments and compliance reviews
  • Multi-Factor Authentication (MFA): Strengthened account security and login protection
  • Data Anonymization & Pseudonymization: Where feasible, we minimize personally identifiable information exposure

Additionally, we require third-party vendors and service providers to implement similar security measures to protect your Personal Information.

For more information about our security practices, you may contact our Privacy Officer at privacy@aloportal.com.

17. How to Contact Us

We welcome any privacy-related questions, concerns, or requests. Our Privacy Officer is the person in charge of the protection of personal information at AloPortal, Inc. The Privacy Officer handles requests to access, correct, or delete your Personal Information, questions about this Privacy Policy, and complaints about how we handle Personal Information. You may contact the Privacy Officer at:

Privacy Officer
AloPortal, Inc.
2093 Philadelphia Pike #3213
Claymont, DE 19703
United States
Email: privacy@aloportal.com

You can also send any of these requests through Help & feedback in the app when you are signed in, or through the chat on our help center at help.aloportal.com, which works without signing in.

If you have concerns about our privacy practices, you may also file a complaint with the relevant data protection authority in your jurisdiction.

18. Interpretation of this Privacy Policy

The Privacy Officer will be responsible for interpreting this Privacy Policy. While examples are provided, this policy is not limited to them. Therefore, where "including" is used, it encompasses all possibilities without restriction.

This Policy is published in English and in French, and the two versions have the same meaning. If they ever differ, the French version governs for residents of Quebec and the English version governs for everyone else.

This Privacy Policy does not grant individuals any rights beyond those provided by relevant privacy laws, nor does it impose additional obligations on Aloportal. In the event of any inconsistency between this Privacy Policy and laws, this policy will be interpreted to comply with and uphold those laws.

AloPortal

Ready to get paid for what you already do?

Claim your portal in seconds. Three months free, no card required.

aloportal.com/

Copyright 2026, All Rights Reserved

Terms & Conditions
Privacy Policy