Privacy Policy

This Privacy Policy explains how Allmata ("Allmata", "we", "us") collects, uses, shares and protects information when you visit allmata.com (the "Site") or use the Allmata app at app.allmata.com and our mobile web app (the "Service").

Allmata is a business service. It connects to tools your companies already use (for example your books system, help desk, store, ad accounts and email platform) so that AI roles can learn how your business works and prepare work for your approval.

1. Two kinds of information

• Account information is about you and your team as our customers: names, email addresses, sign-in details, billing details and settings. We are responsible for it (a "controller" or "business").
• Customer Data is the business data you connect or upload: transactions, tickets, orders, ad results, documents and the lessons your roles learn. We process it only on your behalf and on your instructions (a "processor" or "service provider"). You remain responsible for having the right to connect it.

2. What we collect

When you visit the Site

• Information you send us, such as your first name and email when you ask for the Blueprint or start a trial from it, or your message when you contact us.
• The marketing source of your visit (UTM parameters and ad click identifiers), kept in your browser so we can credit the ad or link that brought you.
• Usage data from analytics and advertising tools, only if you accept them in our cookie banner. See ourCookie notice.

When you use the Service

• Account information: name, email, company names, team members you invite and their access.
• Customer Data from the tools you connect. Connections start read-only, and you confirm what each role may read. We store credentials for connected tools in a secure vault and never show them again after saving.
• Documents, files and links you add to your company Brain.
• Decisions, corrections and approvals you make, and the record of actions taken.
• Usage and cost records: which AI model ran, for which role, and what it cost.
• Device and log data needed to keep the Service secure and working, and push-notification tokens if you turn notifications on.
• Billing information, handled by our payment processor. We do not store full card numbers.

3. How we use information

• To provide the Service: connect your tools, prepare decision cards, carry out actions you approve, and produce reports.
• To build your company's private Brain from your own data, used only for your companies.
• To show you exactly what AI work cost, and to apply budgets you set.
• To run your free trial (14 days, with about $10 of AI usage included) and, if you choose, your subscription.
• To secure the Service, prevent abuse and fix problems.
• To send you service messages, and, if you asked for it (for example by requesting the AI Workforce Blueprint), the guide and occasional tips and marketing emails. These are sent through Klaviyo, our email provider, which receives your name, email address and the link or ad that brought you. Unsubscribe anytime with the link in any email.
• To measure and improve our marketing, only with your consent where the law requires it.

We do not sell personal information, and we do not use Customer Data to train AI models, ours or anyone else's. See ourAI and data-use statement.

4. AI processing

To prepare work, parts of your Customer Data are sent to AI model providers through a gateway. Every call is made with settings that prohibit the provider from training on it and from retaining it (zero retention), to the extent the provider offers those settings. We remove card numbers, social security numbers and passwords from support tickets before and after the model sees them, and private help-desk notes are never sent. Personal details of your customers are not stored as Brain facts; only patterns are.

5. Google user data

If you connect a Google account (for example Gmail or Google Drive), Allmata's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you turn on, we do not use it for advertising, and we do not use it to train generalized AI or machine-learning models. People at Allmata do not read it except with your permission, for security, or where the law requires.

6. Who we share information with

We share information only with service providers that help us run Allmata, under contracts that limit their use of it:

We may also share information if the law requires it, to protect rights and safety, or as part of a merger or sale of the business (with notice to you). Team members you invite see only the companies and roles you give them.

7. How long we keep it

We keep Account information and Customer Data while your account is active. After you close your account or a trial ends without a subscription, we delete or anonymize Customer Data once we no longer need it to provide the Service, except where we must keep records by law (for example billing records).You can disconnect a tool or delete Brain content at any time.

8. Security

We use read-only access by default, approval for every change, per-company separation enforced in the database, encryption in transit, and encryption at rest provided by our infrastructure. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires. Read more on our Security and trust page.

9. Your choices and rights

• Access, correct, download or delete your information by writing to [email protected].
• Unsubscribe from marketing emails using the link in any email.
• Change your cookie choices with "Cookie settings" in the Site footer, or in your browser.
• California residents have rights under the CCPA/CPRA to know, delete and correct personal information, and to opt out of its "sale" or "sharing" for cross-context behavioral advertising. We honor Global Privacy Control signals.
• Visitors from the EEA, UK or Switzerland may have rights to access, correct, delete, restrict or object to processing, and to complain to their data protection authority. Our legal bases are contract, legitimate interests and consent (for analytics and advertising cookies). Where information moves to the United States, we protect it as applicable law requires.

Where we process Customer Data for one of our customers, please send your request to that business; we will help them respond.

10. Children

Allmata is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

11. Changes

We will post any changes here and update the date above. If a change is material, we will tell account owners by email or in the app before it takes effect.

12. Contact

Email Allmata at [email protected].