Privacy Policy

Welcome to Align ("Align," "we," "us," or "our").

Align is an AI-powered financial assistant designed to help users understand and manage their financial information, including spending, recurring financial commitments, and other financial information that the user chooses to connect to the service.

This Privacy Policy explains how Align collects, accesses, uses, stores, protects, shares, and deletes information when you use our website, application, and related services.

By using Align, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We collect information that you provide directly, information obtained from services you choose to connect, and technical information generated when you use Align.

1.1 Account Information

When you create an Align account, we may collect:

• Name
• Email address
• Account credentials or authentication identifiers
• Profile information
• Account preferences
• Information necessary to maintain your Align account

2. Financial Information

Align allows users to connect financial accounts and information through third-party financial data providers such as Plaid.

Depending on the financial institutions and products you connect, this information may include:

• Financial institution name
• Account type
• Account name
• Account and balance information
• Transaction information
• Transaction dates
• Transaction descriptions
• Merchant information
• Spending categories
• Account identifiers
• Contact information associated with the financial account
• Other financial information made available through the services you authorize

We use this information to provide financial management features, including:

• Spending analysis
• Financial summaries
• Financial insights
• Recurring expense identification
• Financial recommendations
• Financial organization and management
• Other user-requested financial features

We only request financial information that is necessary for the features you use.

3. Google Account and Google User Data

Align allows you to connect your Google account to provide Google-related features that you explicitly authorize.

Depending on the permissions you grant, Align may access information from Google services including Gmail and Google Calendar.

Gmail Data

When you authorize Gmail access, Align may access:

• Gmail messages
• Email message content
• Relevant email headers and metadata
• Information contained within emails that is necessary to provide the requested Align feature

Align currently uses Gmail data for user-facing features including:

Email Search

The Email Search feature allows you to search your own Gmail account through Align when you explicitly request an email search.

Align may need access to the content of email messages because information requested by you may be contained in the body of an email and cannot reliably be obtained from metadata alone.

Subscription Information

Align may analyze relevant Gmail messages to identify subscription-related information, such as recurring services and subscription details, and present that information to you within Align.

Subscription information may appear inside the body of an email. Therefore, access to message content may be required to provide this functionality.

Align does not use Gmail data for advertising or sell Gmail data to third parties.

4. Google Calendar Data

If you authorize Google Calendar access, Align may access calendar information necessary to provide calendar-related functionality.

Depending on the functionality you use, this may include:

• Calendar events
• Event titles
• Event dates and times
• Event descriptions
• Event locations
• Other information associated with calendar events

Align uses this information to provide calendar functionality that you explicitly request, including creating, viewing, editing, or managing calendar events where supported.

Align does not use Google Calendar data for advertising or sell Google Calendar data to third parties.

5. Sending Email Through Gmail

If you authorize Gmail sending permissions, Align may send emails through your Gmail account when you explicitly request that Align send an email on your behalf.

For example, you may ask Align to send:

• A confirmation
• A reminder
• A message you have composed or approved
• Other communications that you explicitly request

Align does not independently send marketing or advertising emails through your Gmail account without your request or authorization.

6. How We Use Your Information

We use information collected through Align to:

• Provide and operate Align
• Authenticate your account
• Connect services you authorize
• Analyze financial information you choose to provide
• Help you understand your spending
• Identify recurring financial commitments
• Provide personalized financial insights
• Provide user-requested recommendations
• Provide Gmail search functionality
• Identify subscription-related information from your authorized Gmail data
• Provide authorized Google Calendar functionality
• Send emails when explicitly requested by you
• Maintain and improve the functionality of Align
• Detect, prevent, and investigate security incidents and abuse
• Comply with applicable legal obligations

We do not use your Google user data for purposes unrelated to the user-facing functionality for which you granted access.

7. Google API Services Limited Use Disclosure

Align's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is used only to provide or improve user-facing features of Align that you have requested or authorized.

Align does not:

• Sell Google user data
• Transfer Google user data to data brokers
• Use Google user data for advertising
• Use Google user data for targeted advertising
• Use Google user data for retargeting
• Use Google user data to determine creditworthiness
• Use Google user data for lending purposes
• Use Google user data to create advertising profiles
• Use Google user data to train generalized or non-personalized AI or machine-learning models

Google's policy specifically requires applications using Workspace data to limit use to appropriate user-facing functionality and prohibits uses such as selling data, advertising, creditworthiness determination, and generalized AI/ML training.

8. AI Processing

Align uses artificial intelligence to provide features such as financial analysis, organization, summaries, search, and personalized assistance.

When you use an AI-powered feature, relevant information may be processed to generate the response or perform the requested action.

For Google user data specifically, Align limits processing to the user-facing functionality described in this Privacy Policy and does not use Google user data to train generalized AI or machine-learning models.

We do not use your personal information to create a generalized AI model about you for sale to third parties.

9. Information Sharing

We do not sell your personal information or Google user data.

We may share information only when necessary to provide Align's services, maintain security, comply with law, or perform another purpose described in this Privacy Policy.

Depending on the services you use, information may be processed by service providers that help us operate Align, such as:

• Cloud hosting providers
• Database and infrastructure providers
• Authentication providers
• Financial data providers such as Plaid
• AI or software service providers used to provide a requested Align feature
• Security, monitoring, and infrastructure providers

These providers are permitted to process information only as necessary to provide services to Align and are subject to appropriate contractual or technical safeguards where applicable.

We do not authorize service providers to sell your personal information or use your Google user data for advertising.

10. Google User Data Sharing

Align does not sell Google user data.

We do not transfer Google user data to advertising platforms, data brokers, or information resellers.

Google user data may be transferred only when necessary to:

• Provide or improve an Align feature that is visible to and requested by the user;
• Maintain security and prevent abuse;
• Comply with applicable law; or
• Complete a corporate transaction where permitted by applicable requirements and appropriate user protections are provided.

Google's Workspace policy places specific restrictions on transfers and human access to Google user data.

11. Human Access to Google User Data

Access to user data is restricted.

Align does not allow employees or contractors to routinely read users' Gmail messages or other Google user data.

Human access may occur only where necessary and permitted, such as:

• When you explicitly authorize or request assistance involving specific data;
• To investigate security incidents, fraud, abuse, or technical problems;
• To comply with applicable legal obligations; or
• Where otherwise permitted by applicable Google policies.

We apply access controls designed to limit access to authorized personnel and systems.

12. Data Security

We take reasonable technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction.

Depending on the type of information and system involved, our security measures may include:

Encryption in Transit

Information transmitted between your device and Align's services is protected using HTTPS/TLS.

Encryption at Rest

Sensitive information stored by Align is protected using encryption at rest where supported by the relevant infrastructure and storage systems.

OAuth Token Protection

OAuth access and refresh tokens used to connect authorized services are treated as sensitive credentials and are protected using access controls and secure storage mechanisms.

Access Controls

Access to sensitive systems and user information is restricted to authorized systems and personnel based on operational requirements.

Authentication and Authorization

Align uses authentication and authorization controls to prevent unauthorized access to accounts and protected resources.

Monitoring and Logging

Where applicable, security-relevant events and system activity are monitored and logged to help detect unauthorized access, abuse, and security incidents.

Secure Development

We use reasonable measures to identify and address security vulnerabilities affecting the application and its dependencies.

We continuously evaluate and improve our security practices as Align evolves.

Google requires applications using Google user data to use secure transmission protocols and appropriate encryption/security protections, including protection of OAuth tokens and data at rest.

13. Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide Align's services;
• Maintain your account;
• Provide features you have requested;
• Maintain security and prevent abuse;
• Resolve disputes;
• Comply with legal obligations; or
• Enforce applicable agreements.

The retention period may vary depending on the type of information and the purpose for which it was collected.

Google user data is not retained indefinitely for unrelated purposes.

Where Google API policies require deletion or restrict retention of specific Google user data, Align will follow those requirements.

14. Deleting Your Data

You may request deletion of your Align account and associated personal information.

To request deletion, contact us at: privacy@alignagent.app

When you request account deletion, we will delete or anonymize information that we are not required or permitted to retain.

Some information may need to be retained where required by law, for security purposes, fraud prevention, dispute resolution, or other legitimate legal obligations.

15. Disconnecting Google Services

You can stop Align's access to your Google account by disconnecting the Google integration from Align where the functionality is available.

You can also revoke Align's access through your Google Account settings.

When Google access is revoked, Align will no longer be able to obtain new data through the revoked authorization.

Revoking access does not necessarily automatically delete information that Align previously received. To request deletion of stored information, contact us using the information provided in this Privacy Policy.

16. Disconnecting Financial Accounts

You may disconnect financial accounts from Align through the functionality provided by the application.

Disconnecting a financial account prevents Align from obtaining new information through the connection, subject to the behavior of the relevant financial data provider.

Previously stored information may remain for the retention period described in this Privacy Policy unless you request deletion or applicable law requires otherwise.

17. Cookies and Similar Technologies

Align may use cookies and similar technologies that are necessary to:

• Keep users signed in;
• Maintain sessions;
• Protect accounts;
• Remember preferences;
• Maintain application functionality;
• Understand application performance.

Where applicable, non-essential cookies or analytics technologies will be used in accordance with applicable law and available user choices.

18. Analytics and Technical Information

When you use Align, we may automatically receive certain technical information, including:

• IP address
• Browser type
• Device type
• Operating system
• Application version
• Log information
• Approximate usage information
• Error and diagnostic information

We use this information to operate, secure, troubleshoot, and improve Align.

19. Children's Privacy

Align is not intended for children under the age required by applicable law to independently consent to online services.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to Align improperly, please contact us so that we can investigate and take appropriate action.

20. International Data Processing

Align may use service providers and infrastructure located in countries other than the country in which you live.

Where information is transferred internationally, we take reasonable steps to protect the information in accordance with applicable legal requirements.

21. Third-Party Services

Align integrates with third-party services that you may choose to authorize.

These services may include:

Google

Used for authorized Google account, Gmail, and Calendar functionality.

Plaid

Used to securely connect supported financial accounts and provide financial data requested by the user.

Third-party services operate under their own terms and privacy policies. You should review the applicable policies of services that you choose to connect.

22. Your Privacy Choices

Depending on your location and applicable law, you may have rights regarding your personal information, including the ability to:

• Request access to your personal information;
• Request correction of inaccurate information;
• Request deletion of information;
• Disconnect connected accounts;
• Request information about how your data is processed;
• Withdraw authorization for connected services;
• Object to or restrict certain processing where applicable.

To exercise applicable rights, contact: privacy@alignagent.app

We may need to verify your identity before fulfilling certain requests.

23. Google Account Permissions

You control whether Align receives access to your Google account.

Before connecting Google services, Google will display the permissions requested by Align.

You may decline authorization.

You can also revoke previously granted access through your Google Account settings.

Align requests only the Google permissions necessary for the functionality being provided.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to Align's services;
• Changes to our data practices;
• Changes to applicable legal requirements;
• Changes to security practices; or
• Changes to third-party integrations.

When we make material changes, we will update the Last Updated date at the top of this Privacy Policy and, where appropriate, provide additional notice.

25. Contact Us

If you have questions about this Privacy Policy, your personal information, or data deletion requests, contact us at:

• Company: BEYOND ASSOCIATES TECH SOLUTIONS GROUP
• Product: Align
• Website: https://alignagent.app
• Privacy Email: privacy@alignagent.app

26. Google API Services Disclosure

Align's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

This includes data accessed through Gmail and Google Calendar APIs.

Google user data is used only to provide or improve the user-facing functionality described in this Privacy Policy. Align does not sell Google user data, use Google user data for advertising, or use Google user data for generalized AI model training.