Privacy Policy

01 Introduction

This Privacy Policy explains how AltoSignal, located in the United States, collects, uses, and protects your personal information when you use our SaaS communication software. It applies to all users of our Services, including enterprises and offices across 30+ industries. For questions, contact us at sales@altosignal.com or 408-884-2591.

02 Information We Collect

We collect the following personal information:

• User account details (via Outseta, including names, email addresses, industry preferences)
• Messaging logs (content and metadata of communications, including acknowledgments and device info)
• Device information (IP address, device type, operating system)
• Website analytics data (usage patterns, session duration). This applies to our website only. The AltoSignal mobile and tablet apps contain no analytics or advertising SDKs and do not collect behavioral usage data.
• Enterprise-specific data (e.g., API access logs, role-based permissions for multi-user accounts)

This information is collected directly from you when you create an account or use our Services, and indirectly through automated technologies.

03 Use of Information

We use the collected information for the following purposes:

• To create and manage user accounts, including multi-user logins and roles
• To facilitate communication services (messaging, channel history, acknowledgments)
• To improve and personalize our Services, including customizable features and API integrations
• To conduct research and analysis for service enhancement
• To comply with legal obligations and support audit logs for enterprises

04 Sharing of Information

We may share your personal information with:

• Third-party service providers, including DigitalOcean for cloud hosting and storage, Outseta for account management and subscription billing, Stripe for payment processing, and BetterStack for application logging and diagnostics
• Legal authorities if required by law
• Other third parties only with your consent or as necessary to fulfill the purposes outlined above, such as enterprise partners for custom integrations.

05 Data Security

We implement security measures including encryption in transit, network firewalls, and role-based access controls to protect your personal information from unauthorized access. Our Services are hosted on DigitalOcean infrastructure in the United States.

06 User Rights

Under applicable privacy laws, you have the right to:

• Access, correct, or delete your personal data
• Restrict or object to processing
• Data portability (where applicable)
• Opt-out of certain data uses, including through universal opt-out mechanisms (UOOMs) as required by U.S. state privacy laws

To exercise these rights, contact us at sales@altosignal.com.

07 Cookies and Other Trackers (Website)

We use cookies and similar tracking technologies to collect analytics data and enhance user experience. You can manage cookie preferences through your browser settings.

Cookies and similar technologies are used on our website only. The AltoSignal mobile and tablet apps do not use cookies or tracking technologies, and we do not share data collected from the apps with advertising networks or data brokers.

08 Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect data from minors. If you believe we have collected information from a child, please contact us at sales@altosignal.com to request deletion.

09 International Data Transfers

Our infrastructure is located in the United States. If you access our Services from outside the United States, your information will be transferred to and processed in the United States. We implement appropriate safeguards for cross-border transfers as required by applicable law, including the GDPR.

10 Data Retention

We retain account information for as long as your account is active. Message content and delivery metadata are retained as part of your account's communication history and remain available to you until your account is closed. Diagnostic and application logs expire automatically on a rolling basis. When an account is closed, we delete or anonymize associated personal information within a reasonable period.

11 Data Deletion Requests

AltoSignal accounts are provisioned and administered by the organization that subscribes to the service, typically your employer. Individual users cannot delete an organization's account or its message history.

To request deletion of your personal information, or for an administrator to request deletion of an organization's account and associated data, email support@altosignal.com from the address associated with the account. We respond to deletion requests within 30 days.

What we delete. When an account is closed, we delete the account record and the personal information associated with it, including the email address and any user profile details. When an organization's account is closed, the signals, messages, and delivery history associated with that organization are deleted with it.

What we keep. Diagnostic and application logs contain device and platform information such as operating system version, app version, and device model. These expire automatically on a rolling basis and are not retained after expiry. We may also retain records required for legal, tax, or accounting purposes for as long as applicable law requires, and we retain aggregated information that does not identify any individual.

12 Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data processing activities or legal requirements. The last update date will be indicated at the top. We encourage you to review this policy regularly.

13 Contact Information

For questions or concerns, contact us at: