Privacy statement — how Alygn handles your data

This Privacy Statement explains how Alygn Inc. ("Alygn," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the Alygn platform and related services (the "Service"). It applies to visitors, account holders, and users invited by an organization.

1. Who we are

Alygn provides a work-alignment and productivity platform for teams and organizations. For purposes of data protection law, Alygn Inc. is the controller of personal information described in this statement, except where we process data on behalf of your organization as a processor (see Section 8).

Contact: privacy@getalygn.com

2. Information we collect

Account and profile. Name, email address, role, team, timezone, profile preferences, and authentication events (including magic-link requests).

Work content. Tasks, assignments, comments, meeting notes, transcripts, alignment scores, files you upload, and AI chat history within focus sessions.

Usage and device data. Log data, IP address, browser type, feature usage, performance metrics, and error reports (which may include session identifiers).

Integrations. If you connect Microsoft 365 or other services, we receive data you authorize (for example, calendar events or email notifications needed for webhooks), according to the permissions you grant.

Support and communications. Messages you send to us and survey responses.

3. How we use information

We use personal information to:

Provide, maintain, and secure the Service;
Authenticate users and enforce organization policies;
Run AI-assisted features (retrieval, summarization, prioritization) within your tenant;
Send transactional messages (sign-in links, assignments, pulse notifications);
Monitor reliability, debug issues, and prevent abuse;
Comply with law and respond to lawful requests;
Improve the Service using aggregated or de-identified analytics where possible.

We rely on contractual necessity, legitimate interests, consent (where required), and legal obligations as applicable bases under GDPR and similar laws.

4. AI processing

AI features may send prompts and relevant context (such as task text or document excerpts) to model providers under agreements that restrict use of your data for training their public models, where those restrictions are offered. Outputs are generated automatically; do not submit information you are not permitted to share with your organization or Alygn.

5. How we share information

We may share personal information with:

Your organization — administrators and teammates according to product permissions;
Service providers — hosting, email, analytics, error monitoring, payment, and AI infrastructure under confidentiality obligations;
Integration partners — when you enable a connection (for example, Microsoft);
Legal and safety — when required by law or to protect rights, safety, and integrity of the Service.

We do not sell personal information.

6. International transfers

We may process data in the United States and other countries where we or our providers operate. When transferring data from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses where required.

7. Retention

We retain personal information while your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. Organization administrators may request deletion subject to backup and legal retention limits. Backups may persist for a limited period after deletion.

8. Organization accounts

If you access Alygn through an employer or customer, that organization controls many settings and may access work content you create in the Service. Alygn processes such content as a processor on the organization's instructions. Direct your privacy requests to your organization where they act as controller; we will assist them as required.

9. Security

We use technical and organizational measures such as encryption in transit, access controls, tenant isolation, and monitoring. No method of transmission or storage is completely secure; please use strong authentication and report suspected incidents to security@getalygn.com.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or port your personal information, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority.

To exercise rights, contact privacy@getalygn.com. We may verify your identity before responding.

11. Cookies and similar technologies

We use cookies and local storage for authentication, preferences, and security. Essential cookies are required for sign-in. We may use analytics cookies to understand usage; you can control non-essential cookies through your browser settings where available.

12. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. Contact us if you believe we have done so inadvertently.

13. Changes

We may update this Privacy Statement from time to time. We will post the revised version and update the "Last updated" date. Material changes will be communicated through the Service or email where appropriate.

14. Contact

Alygn Inc. — Privacy inquiries: privacy@getalygn.com