Privacy Policy

1. Introduction

Aalteo (“Aalteo,” “we,” “us,” or “our”) operates an AI-powered voice and automation platform that helps businesses qualify leads, book meetings, and manage customer communications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services (collectively, the “Service”).

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account data: Name, email address, phone number, company name, and password when you register.
• Business data: Lead lists, contact information of prospects you upload, call scripts, and workflow configurations.
• Payment data: Billing address and payment method details processed securely through our payment provider (Stripe). We do not store full card numbers on our servers.
• Support data: Information you share when contacting our support team, including chat transcripts and email content.

2.2 Information Collected Automatically

• Usage data: IP address, browser type, device information, pages visited, time spent, and referral URLs.
• Call data: Call recordings, transcripts, sentiment analysis, and metadata (duration, outcome, timestamps) for calls made through our platform.
• Cookies and tracking: Session cookies, authentication tokens, and analytics cookies to understand how the Service is used.

2.3 Information from Third Parties

• Data from integrations you connect (e.g., CRM systems, calendar providers, telephony providers like Twilio).
• Information from authentication providers if you use single sign-on (Google, Microsoft).

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To process payments and manage subscriptions
• To route and conduct AI-powered voice calls on your behalf
• To generate transcripts, lead scores, and analytics
• To send service-related communications (updates, security alerts, billing notices)
• To provide customer support and respond to inquiries
• To detect, prevent, and address fraud, abuse, and security issues
• To improve and develop new features, models, and capabilities
• To comply with legal obligations and enforce our Terms of Service

3.1 Legal Basis for Processing (GDPR)

For users in the European Economic Area, UK, or Switzerland, our legal bases for processing are:

• Performance of a contract: To deliver the Service you subscribed to
• Legitimate interests: To improve the Service, ensure security, and prevent fraud
• Consent: For optional analytics, marketing communications, and non-essential cookies
• Legal obligation: To comply with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information. We may share data with:

• Service providers: Cloud hosting (AWS, GCP), telephony (Twilio), payments (Stripe), email delivery, and AI/ML providers (Cartesia, OpenAI) that process data on our behalf under written agreements
• Integration partners: Third-party services you explicitly connect to your account (e.g., HubSpot, Salesforce, Google Calendar)
• Legal authorities: When required by law, court order, or to protect our rights, users, or public safety
• Business transfers: In connection with a merger, acquisition, or asset sale, subject to confidentiality obligations

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination:

• Account data: Deleted within 30 days, except where retention is required by law
• Call recordings and transcripts: Retained for 90 days, then permanently deleted unless you request earlier deletion
• Billing records: Retained for 7 years as required by tax and financial regulations
• Usage logs: Retained for 12 months for security and audit purposes

6. Your Privacy Rights

6.1 General Rights

• Access: request a copy of your personal data
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data (“right to be forgotten”)
• Portability: receive your data in a structured, machine-readable format
• Objection: object to certain processing activities
• Restriction: request restriction of processing in certain circumstances
• Withdraw consent: withdraw consent at any time where processing is based on consent

6.2 California Residents (CCPA/CPRA)

California residents have the right to: know what personal information is collected, request deletion, opt-out of the sale or sharing of personal information, and not be discriminated against for exercising these rights. We do not sell personal information. To exercise your rights, contact us at connect@aalteo.com.

6.3 How to Submit a Request

To exercise any of these rights, email connect@aalteo.com with the subject line “Privacy Request.” We will verify your identity before processing the request and respond within 30 days.

7. International Data Transfers

Your data may be processed in countries other than your own, including the United States and India. We rely on Standard Contractual Clauses (SCCs), adequacy decisions, and other lawful transfer mechanisms where required. Service providers are bound by written agreements that include appropriate data protection safeguards.

8. Cookies and Tracking Technologies

• Essential cookies: Required for authentication, security, and core functionality. Cannot be disabled.
• Analytics cookies: Help us understand usage patterns and improve the Service. Can be disabled.
• Preference cookies: Remember your settings (theme, language). Can be disabled.

On our public website (not inside the app) we use Google Analytics to count visits and sign-ups, and Microsoft Clarity to see how visitors use our marketing pages. Both set analytics cookies. We don’t load either tool if your browser sends a Do Not Track or Global Privacy Control signal.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the Service’s functionality.

9. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, regular security audits, and employee training. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.

10. AI and Voice Processing

Our Service uses AI models to conduct voice calls, transcribe conversations, and analyze interactions. When you use these features:

• Call audio is processed to generate transcripts and AI responses in real time
• AI models may use conversation data to improve response quality (unless you opt out)
• You are responsible for obtaining consent from call participants before recording, as required by applicable telephony and privacy laws
• We provide tools to disclose AI-assisted calls; you are responsible for compliance with local regulations regarding AI disclosure

11. Children’s Privacy

The Service is intended for business use and is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately at connect@aalteo.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice at least 30 days before they take effect. The “Last updated” date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us