Legal
This box is a plain summary. The full policy below controls.
Alloro, Inc. makes software that helps small businesses run and grow. In this policy, "Alloro," "we," "us" and "our" mean Alloro, Inc.
This policy covers:
This policy does not cover the websites of businesses that use Alloro, even when we host them. Each business is responsible for its own website's privacy notice. It also does not cover protected health information that we handle under a Business Associate Agreement. That agreement controls for that information.
When we decide how information is used. For people who visit our website, use the free check, or have an Alloro account, we decide how their information is used. This policy explains how.
When we work for a business. Businesses use Alloro to handle information about their own customers, such as the messages people send through a business's website. For that information, we work for the business. We use it only to provide Alloro to that business and on its instructions. If you are a customer of a business that uses Alloro, that business's privacy notice applies to you, and you should contact the business first. We will help the business respond.
We collect the business name and web address you enter, the search terms you enter, and your email if you give it. We also record the site that sent you to the check, the campaign tags in the link you used, your browser and device type, and the steps you take in the check. Your browser stores a session number so the check can remember your progress.
To run the check, we look up public facts about the business and nearby businesses, using Google, Apify and our own page reader. We take screenshots of the business's website. Then AI reviews what we found.
If you ask for your report by email, we send it through our own email system, which runs on n8n software on our own server, and through Mailgun. Your email and the business name pass through both. We send a copy of that email to our team at info@getalloro.com. We may email you about your results and about Alloro. You can unsubscribe at any time.
We collect your account details, a device identifier, a token that lets us send you notifications, your device's operating system, and the app version.
When something breaks, Sentry receives an error report from our web app or servers. It can include your IP address, browser details, account details, and the data in the request that failed, such as a website form message or an uploaded file.
A business can choose to connect other tools to Alloro. When it does, we receive data from them or send data to them:
When someone sends a message through a form on a website we host, we collect what they write and any files they attach. We also collect their IP address, the date and time, and the site or campaign that sent them. The website keeps a small record in the visitor's browser of the first site and campaign that sent them, so the form can report it.
Alloro adds Rybbit analytics to the websites it hosts. It records visits in the same way as on getalloro.com, and can record sessions when that setting is on. A business can ask us to turn it off for its website.
We send the person who wrote in a short email saying their message arrived. It shows the business's name, is sent from an Alloro email address, and replies go to the business. If the business turns on automatic replies, the person also gets a reply using wording the business approved.
We also collect Google reviews of the business, including the reviewer's name and profile photo, from Google.
A business can connect its Google account to Alloro. When it does, Google asks for permission to give Alloro these kinds of access:
How we use it. We use Google data only to provide the features the business uses, such as drafting review replies, drafting posts, writing website text, and showing results on the dashboard.
AI. To provide those features, we send Google data to our AI providers listed in section 7, such as Anthropic, whose Claude models draft review replies. We do not send the reviewer's name when we ask for a reply draft. Other features, such as summaries of new reviews, can send the reviewer's name to our AI provider. We never use Google data to train AI models.
What we never do. We never sell Google data. We never use it for advertising, or give it to advertising platforms or data brokers. We never use it to decide whether someone gets credit or a loan.
Who can see it. Alloro staff read Google data only to provide the service, prepare and check drafts, give support, keep the service secure, and meet legal duties. The business agrees to this in our Terms of Service when it connects Google.
Storage. We store Google data and the access tokens Google gives us in our database.
Limited Use. Alloro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can read that policy at developers.google.com/terms/api-services-user-data-policy.
How to disconnect. You can remove Alloro's access at any time on your Google Account permissions page at myaccount.google.com/permissions.
When a business's service ends. Within 7 business days after the service ends, we disconnect the business's Google connection and stop fetching its Google data. We delete its Google data within 30 days after the service ends, or within 30 days of a request.
We use AI to draft content and to read and sort data. Examples:
We send AI providers only the information a feature needs. We do not use a business's content, its customer data or its Google data to train AI models. The AI providers we use are listed in section 7. Each one handles data under its own terms for business customers.
The business approves AI drafts before they go live, or asks Alloro staff to approve them for it. We do not use AI to make decisions that have legal or similarly serious effects on anyone.
We use information to:
We share information with service providers who help us run Alloro. They may use it only to provide their services to us. Google, for reCAPTCHA, Microsoft, for Clarity, and unpkg.com also handle the data they receive under their own privacy policies.
We also share information:
We do not sell personal information, including sensitive information. We do not share personal information for targeted advertising.
We use cookies, local storage and similar tools to keep you signed in, remember your progress in the free check, count visits, and record how people use our website and app.
We do not use advertising pixels on our website or app. You can block or delete cookies in your browser settings. Our website keeps working, but you will need to sign in to the app again.
Some browsers send a "Do Not Track" signal. Our website and app do not change what they do when they receive it. We do not track you across other companies' websites for advertising. Some providers we use, such as Google and Microsoft, may collect information about your activity over time and across websites under their own policies.
We send:
You can unsubscribe from our promotional emails at any time with the link in the email or by emailing corey@getalloro.com. We will still send account emails you need.
We do not send text messages and we do not make automated calls.
If a business is covered by HIPAA, it should tell us before it connects practice-management data or collects health information through its website. We will send it our Business Associate Agreement, and it should not connect that data or collect that information until we have both signed it. Once signed, that agreement controls how we handle that information. We do not use protected health information for advertising.
We keep account information, website content, form messages, reviews, data from connected tools and uploaded files for as long as the account is open. After an account closes, we keep this information until the business asks us to delete it or we no longer need it. We do not delete it on a fixed schedule today. Google data is the exception: section 4 explains when we delete it.
We keep free check records until the person asks us to delete them.
Some records have shorter periods. Logs of data sent to a business's connected tools are deleted after 90 days. When a business disconnects Google Search Console, we delete the Search Console data we stored for it.
When you ask us to delete information, we delete it from our systems within 30 days. Copies in backups are removed when those backups expire. We may keep records that the law requires us to keep, and records we need to settle a dispute or collect money owed, for as long as needed.
We protect information with reasonable safeguards. For example:
No system is perfectly secure. If we learn of a security breach that affects your personal information, we will tell you as the law requires.
You can ask us to:
Email corey@getalloro.com with your request. We may need to confirm who you are before we act. We will respond within 45 days. If we need more time, we will tell you why. We will not treat you differently for making a request.
If you are a customer of a business that uses Alloro, please contact that business first. If you contact us, we will pass your request to the business and help it respond.
Some state laws give residents specific privacy rights. We offer the rights above to everyone in the United States, whatever state you live in.
Alloro is a tool for businesses. It is not meant for children. You must be 18 or older to create an account, and children under 13 may not use Alloro. We do not knowingly collect personal information from children under 13. If you think a child has given us information, email corey@getalloro.com and we will delete it.
Alloro offers its service in the United States. We store information in the United States. Our team and our service providers may access it from other countries.
We may update this policy. We will post the new version with a new effective date. If a change matters, we will email account holders at least 30 days before it takes effect. We will not use information we already hold in a new way that this policy did not allow when we collected it, unless you give clear consent first.
Alloro, Inc. Email: corey@getalloro.com