Privacy Policy
Aleflow · https://aleflow.com Last updated: July 20, 2026
1. Who we are
Aleflow ("we," "us," "our") operates the website https://aleflow.com and related services: AI-visibility scanning, scoring, monitoring, and structured-data delivery for small businesses (together, the "Services"). We are based in California, United States.
You can contact us about privacy at privacy@aleflow.com, or by mail at 2261 Market Street STE 80451, San Francisco, CA 94114.
The Services are intended for businesses and their authorized representatives, aged 18 or over. We do not knowingly collect information from children.
2. Information we collect
Information you provide directly:
- Contact details: your name, email address, and phone number (your email address is how you sign in — we use one-time sign-in links instead of passwords).
- Business information: your business name, website address, mailing/business address, services offered, service areas, business hours, license numbers, FAQs, and similar details you enter so we can deliver the Services.
- Correspondence: anything you send us by email or through the Services.
- Website access credentials — only if you choose to have us install for you. Most customers install our plugin themselves using a licence key, and in that case we never receive a login. If you ask us to perform the installation (our setup-assistance option, and during our beta programme), you may send us a username and password, or an invitation to your website's admin area. We treat these as described in Section 7 and delete them once the installation is complete.
Information collected automatically:
- Basic server logs: IP address, timestamps, and requested pages, kept for security and troubleshooting. We do not use advertising trackers and we do not track you across other sites.
- Essential cookies only: a session cookie for sign-in. No analytics or advertising cookies.
Information from public sources:
- The Services work by examining publicly available information about your business — your website, business listings, and search results. We collect and process this public information to produce your scans, scores, reports, and monitoring.
Reviews written by other people:
- Your public reviews are part of how AI systems describe your business, so we read them. Those reviews are written by your customers, and a review may contain a reviewer's display name and whatever they chose to write — information about someone who is not our customer. We use it only to measure and describe your business's public presence: we count reviews, look for the topics and places they mention, and quote short extracts back to you. We do not build profiles of reviewers, do not attempt to identify them, and do not sell or share this information. We keep what we read for the period in Section 6, and we do not republish reviews anywhere public.
Payment information:
- Payments are processed by Stripe. Your card number and billing details are collected by Stripe on its own systems and never touch our servers. We store only your subscription status and plan. Stripe's privacy policy: https://stripe.com/privacy
3. How we use information
- To provide the Services: scans, scores, reports, monitoring, and generating structured data (schema) about your business.
- To operate your account: sign-in links, receipts, service notifications, and support.
- To notify you of changes to the Services or to our legal terms (from legal@aleflow.com).
- To secure and improve the Services.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
4. AI providers — a plain-language disclosure
Measuring your visibility in AI systems requires asking those systems about your business. When we run scans and monitoring, information about your business (such as its name, services, and cities) is included in queries sent to third-party AI providers — currently OpenAI, Google, Perplexity, and DataForSEO (which we use to read Google's AI Overview and search results). This is the core of the Service, not an incidental use. These queries concern your business's public presence; we do not send them your account credentials, payment information, or website access credentials.
We use these providers through their business or API offerings. Under the terms those providers publish for such use, data sent through the API is not used to train their models by default. We do not opt in to any training programme. We cannot control what a provider does with information that is already public about your business, which it may have collected independently of us.
5. Who we share information with
We share information only with service providers that help us run the Services:
| Provider | Purpose |
|---|---|
| Amazon Web Services (US) | Hosting and infrastructure |
| Neon (US) | Database |
| Stripe | Payment processing |
| Amazon SES / Google Workspace | Transactional email and correspondence |
| OpenAI, Google, Perplexity | AI visibility measurement (see Section 4) |
| DataForSEO | Search-results measurement |
We may also disclose information if required by law, or as part of a business transaction such as a merger or acquisition (in which case this policy continues to apply to information collected before the transaction).
6. How long we keep information
| What | How long |
|---|---|
| Account and business information | While your account is active, then 12 months after closure, so you can reactivate |
| Scan results, scores and the AI answers behind them | 13 months (395 days), so year-over-year comparisons work |
| Cached AI answers shared across customers | 7 days |
| Server logs | 90 days |
| Billing and tax records | 7 years, as tax law requires — this survives an account deletion request |
| Website access credentials | Deleted as soon as the installation is complete (Section 7) |
You can request deletion at any time (Section 8). When you do, we delete your account and business information and your scan history within 30 days. Two things necessarily remain: billing and tax records, which we are legally required to keep, and cached AI answers, which contain no information identifying you and expire on their own within 7 days.
7. Security
We use industry-standard safeguards: encrypted connections (HTTPS), passwordless sign-in via one-time email links, access controls, and payment handling delegated entirely to Stripe. No internet service can promise perfect security, but we design so that the most sensitive data (your card details) never reaches us at all.
Website access credentials. Where you have asked us to install on your behalf and have shared a login, we use it only for that installation, never store it in our product database, and delete it once the work is done. We ask you to create a separate account for us where your platform allows it, and to remove that account afterwards. You can revoke our access at any time.
8. Your rights and choices
Updating or deleting your information: you can update your business and account information at any time by signing in to your account settings, or by contacting us at privacy@aleflow.com — the same address handles deletion requests.
California residents have the right to know what personal information we collect (this policy is that disclosure), to request a copy, to request correction or deletion, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CCPA/CPRA, so there is nothing to opt out of. Requests: privacy@aleflow.com.
Canadian users may access and correct their personal information and withdraw consent (subject to legal and contractual limits) by contacting privacy@aleflow.com. Information is stored and processed in the United States.
Public information note: reports and scores are derived in part from information that is already public. Deleting your account removes your data from our systems as described in Section 6; it does not remove public information from the public sources it came from.
9. Where data lives
We are a US company and process data in the United States. If you use the Services from outside the US, your information is transferred to and processed in the US.
10. Changes to this policy
When we make material changes, we will email the address on your account and update the date at the top. Continued use after the effective date means the updated policy applies.
11. Contact
Email: privacy@aleflow.com Mail: 2261 Market Street STE 80451, San Francisco, CA 94114, United States