Privacy Policy

This Privacy Policy ("Policy") describes how Aluma Pay Inc., a Delaware corporation ("Aluma Pay," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you access or use our websites, mobile application, software tools, AI-powered data-extraction services, and any related offerings (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

1. Information We Collect

We collect and process personal information in the following categories:

• Identification and Contact Information, such as your name and email address.
• Account Credentials, such as login information you provide.
• Billing and Payment Information associated with your subscription or purchases.
• Communications, including support requests and correspondence.
• Usage Data, such as interactions with our Service, activity logs, and device information.
• Information from Connected Third-Party Services, when you authorize integrations (e.g., Gmail).

2. Gmail and Google API Data

If you connect your Google account, we may access limited Gmail data strictly to provide our automated invoice and receipt processing features. The information accessed may include:

• Email metadata (sender, recipient, subject, timestamp).
• Email content and attachments containing receipts, invoices, or related financial records.

We use Gmail data solely to:

• Identify invoice- or receipt-related messages.
• Extract transactional and financial information.
• Determine payment status (paid, due, overdue) and generate insights or reminders.

We do not:

• Use Gmail data for advertising.
• Allow human access unless required for security, support with your explicit consent, or legal obligations.
• Transfer Gmail data beyond what is required to provide user-facing features.
• Use Gmail data to train general-purpose AI or ML models.

Our use of Gmail data adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service.
• Deliver AI-powered extraction, automation, and workflow features.
• Personalize your experience and improve the functionality of the Service.
• Communicate with you regarding updates, support, and permitted marketing.
• Comply with applicable legal obligations and enforce our terms.

4. Use of AI and Machine Learning

Our Service uses proprietary AI and machine learning technologies to extract structured data from receipts, invoices, and related documents.

• AI models operate exclusively on data you provide or authorize.
• Gmail-derived content is never used to develop, train, or enrich general-purpose models, in compliance with Google requirements.
• AI-processed outputs (e.g., totals, dates, vendors) are associated only with your account.

5. Sharing Your Information

We do not sell personal information. We may disclose information only to:

• Service Providers that support hosting, analytics, email delivery, and similar operational functions.
• Legal Authorities, when required to comply with applicable law or protect our rights.
• Other Parties with Your Explicit Consent.

All third parties are subject to confidentiality and security obligations.

6. Data Security

We implement industry-standard administrative, technical, and organizational safeguards, including:

• Encryption in transit and at rest.
• Access controls and authentication measures.
• Regular monitoring, testing, and security reviews.

7. Data Retention

We retain your personal information only as long as necessary to provide the Service or satisfy the purposes described in this Policy, unless a longer retention period is required by law.

You may request deletion of your account or data at any time (subject to legal exceptions).

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access personal information we hold about you.
• Request correction or deletion.
• Withdraw consent for processing.
• Lodge a complaint with a relevant data protection authority.

To exercise these rights, contact: privacy@alumapay.com.

9. U.S. State Privacy Law Disclosures

Where applicable, we comply with relevant U.S. privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) and similar state laws. Residents of these states may have additional rights regarding:

• Access
• Deletion
• Opt-out of certain data practices
• Non-discrimination for exercising privacy rights

We will provide required disclosures upon request.

10. International Transfers

If you are located outside the United States, your information may be transferred to and processed in jurisdictions that may not provide the same level of data protection. We implement reasonable safeguards to protect your data consistent with this Policy.

11. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we learn we have collected such data, we will delete it promptly.

12. Changes to This Policy

We may update this Policy periodically. Material changes will be posted on our website or communicated to you directly. Continued use of the Service constitutes acceptance of the updated Policy.

13. Governing Law; Jurisdiction

This Policy and any dispute arising from it shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict-of-laws principles.

You agree that any claims or disputes will be brought exclusively in the federal or state courts located in Delaware.

14. Contact Us

If you have questions or concerns regarding this Policy, contact us:

privacy@alumapay.com