Last updated: February, 2023 (Prior Version)
Thank you for choosing to be part of our community at Allma, Inc. (together with our subsidiaries and affiliates, "Allma", "we", "us", "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this Privacy Policy, or our practices with regards to your personal information, please contact us at privacy@allma.io.
When you use any of our websites, applications, technology services, and solutions that link to this Privacy Policy (collectively, the “Site”), and our related services, events, social media pages, and email and other electronic communications (collectively, and together with the Site, the “Services”) we appreciate that you are trusting us with your personal information. We take your privacy seriously. In this Privacy Policy, we seek to explain to you in the clearest way possible what information we collect, how we use and share it, and what rights you have in relation to it. Please note, our privacy practices are subject to the applicable laws of the places in which we operate. You will see additional region-specific terms that only apply to customers located in those geographic regions, or as required by applicable laws. We hope you take some time to read through it carefully, as it is important.
This Privacy Policy covers the following topics:
In Short: We collect personal information that you voluntarily provide to us.
We collect personal information that you voluntarily provide to us, for example, when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services or otherwise when you contact us.
The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make and the products and features you use. The personal information we collect may include the following:
Contact and Other Identifying Information. We collect names, email addresses, avatars, job titles, contact or authentication data, and other similar information.
Communications Data. We collect messages, emoji reactions, and attachment metadata related to communications when using our Services (e.g., in Allma-facilitated chat rooms and Allma’s browser extension). This information is directly utilized and exposed by the product to enable features related to triaging notifications and taking actions to search and share information across various software tools.
Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is stored by Stripe. You may find their privacy policy here: https://stripe.com/privacy. Allma does not access or keep information related to credit cards, banking information, or other sensitive financial information.
Account Information. We collect your log-in details, information that you store in your account, and any marketing or communications preferences.
Chat and Survey Responses. We and our service providers collect the information associated with your requests, inquiries, and any feedback you provide when you communicate with us, including through support requests and the Sites’ chat feature. We and our service providers also collect information you provide in response to our surveys, questionnaires, or contests.
Unless we specifically request it, we ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Services, or otherwise to us.
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Sites and use our Services.
We, our service providers, and third parties automatically collect certain information when you visit, use or navigate the Services. This information may include device and usage information, information about how and when you use our Services and other technical information.
Like many businesses, we also collect information through cookies and similar technologies. Please see the section below titled, “DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?,” and visit our Cookie Policy for more information.
The information we collect includes:
In Short: We collect information from third parties, such as Slack and other partners.
Allma may receive personal information from third parties, such as our service providers, advertising partners, data analytics partners, operating systems and platforms, social media platforms, event sponsors, publicly available sources, or data providers. For example, when you connect your Slack account to our Services, we receive from Slack your name, email address, profile image, user ID, and team ID. We may merge or combine such personal information with the personal information we collect from you directly or automatically.
Users of the Services may have the opportunity to refer colleagues or other contacts to us and share their contact information. Please do not provide us with someone’s contact information unless you have their permission to do so.
In Short: We primarily process your personal information to provide the Services that you request.
We use personal information collected via our Services for a variety of business purposes described below and as otherwise described in this Privacy Policy or at the time of collection. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below.
We use the information we collect:
In Short: We may share personal information with your consent, to comply with laws, to provide you with or advertise our Services, to protect your rights, or to fulfill business obligations.
We may share your personal information in the following situations or as otherwise described in this Privacy Policy or at the time of collection:
Where required by applicable law, we may rely on the following legal bases when we share your personal information as described above:
In Short: Allma, our service providers, and our advertising partners may use cookies and other tracking technologies to collect and store your personal information. For more information, please visit our Cookie Policy.
We may use cookies and similar technologies such as local storage, pixel tags, web beacons, clear GIFs, and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser and tell us how and when you visit and use our Services, to analyze trends, learn about our user base and operate and improve our Services. For example, we use Cookies to deliver content specific to your interests, and to track whether emails we send you have been viewed. Cookies are small files placed on your computer, tablet, phone, or similar device when you use that device to visit our Sites. We sometimes combine information collected through Cookies with personal information that we have about you, for example, to tell us who you are or whether you have an account with us. We may also supplement the information we collect from you with information received from third parties.
We use Cookies to store your preferences so that they are available for the next visit, and to keep a more accurate account of how often you visit our Services, how often you return, how your use of the Services may vary over time. We also use Cookies to measure the effectiveness of advertising efforts. Through these Cookies, we may collect information about your online activity after you leave our Services.
Some Cookies are placed by a third party on your device and may provide information to us and third parties about your browsing habits (such as your visits to our Services, the pages you have visited and the links and advertisements you have clicked). These Cookies can be used to determine whether certain third-party services are being used, to identify your interests, to retarget advertisements to you and to serve advertisements to you that we or others believe are relevant to you. We do not control third party Cookies.
In Short: We may transfer, store, and process your information in countries other than your own.
Allma is operated from and our servers are located in the United States. If you are accessing our Services from outside United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information , who may be located in the United States and potentially other countries. Privacy laws in the locations where we handle your personal information may not be as protective as the privacy laws in your home country. By providing your personal information, where applicable law permits, you specifically and expressly consent to such transfer and processing and the collection, use, and disclosure set forth herein.
If you are a resident in the European Economic Area or United Kingdom, and we transfer your personal information outside of your home country such that we are required to apply additional safeguards to your personal information under European data protection laws, we will do so. Please contact us as provided below for further information about any such transfers or the specific safeguards applies.
In Short: We keep your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy or at the time of collection unless otherwise required by law.
We will keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy or at the time of collection, including for the purposes of satisfying any legal requirements (such as tax, accounting or other reporting requirements), to establish and defend legal claims, and for fraud prevention purposes.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
In Short: We aim to protect your personal information through a system of reasonable organizational and technical security measures.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our reasonable safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
In Short: The Services are not intended for use by, and we do not knowingly collect data from, children under 18 years of age.
We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@allma.io.
The Services may contain links to other websites and online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or online services that are not associated with us. We do not control third party websites or online services, and we are not responsible for their actions. Other websites and services follow different rules regarding the collection, use, and sharing of your personal information. We encourage you to read the privacy policies of the other websites and online services you use.
In Short: You may review, change, or terminate your account at any time, and control your marketing preferences.
If you are located in the European Economic Area or the United Kingdom, please view the section titled “DO EUROPEAN RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?” for additional rights.
If you are a resident of California, please view the section titled, “DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?” for additional rights.
Review or Request Changes to Account Information: If you would at any time like to review or change the information in your account or terminate your account, you can:
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Service and/or comply with applicable legal requirements.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features of our Services. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.
Analytics: The Sites may use Google Analytics to help us analyze how the Site is being accessed and used. You can learn more about Google Analytics cookies by clicking here and about how Google protects your data by clicking here. To opt-out of Google Analytics, you can download and install the Google Analytics Opt-out Browser Add-on, available here.
Advertising choices: You can limit the use of your information for interest-based advertising by blocking third-party cookies in your browser settings, using browser plug-ins/extensions, and/or using your mobile device settings to limit the use of the advertising ID associated with your mobile device. You can also opt out of interest-based ads from companies participating in the following industry opt-out programs by visiting the linked websites: the Network Advertising Initiative (http://www.networkadvertising.org/managing/opt_out.asp) and the Digital Advertising Alliance (https://optout.aboutads.info). Some of the companies we work with may offer their own opt-out mechanisms. For example, you can learn more about how Google uses cookies for advertising purposes by clicking here and opt-out of ad personalization by Google by clicking here.
Many of the opt-out preferences described in this section must be set on each device and/or browser for which you want them to apply. Please note that some of the advertising companies we work with may not participate in the opt-out mechanisms described above, so even after opting-out, you may still receive interest-based advertisements from other companies. If you opt-out of interest-based advertisements, you will still see advertisements online but they may be less relevant to you.
Opting out of email marketing: You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list — however, we may still communicate with you, for example to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes. To otherwise opt-out, you may:
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. The Site does not currently respond to DNT browser signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
In Short: Yes, if you are a resident of California, you are granted specific rights regarding your personal information.
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for the third parties’ direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with the Site, you have the right to request removal of unwanted data that you publicly post on the Site. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Site, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups, etc.).
In Short: Yes, if you are located in the European Economic Area or the United Kingdom (collectively, “Europe”), you are granted specific rights regarding your personal information.
Except as otherwise specified, references to “personal information” in this Privacy Policy are equivalent to “personal data” governed by European data protection legislation.
Controller. The controller of your personal information covered by this Privacy Policy for purposes of European data protection legislation is Allma, Inc., 1201 Pacific Ave., Suite 600, Tacoma, WA 98402, United States.
Legal Bases for Processing. The legal bases of our processing of your personal information as described in this Privacy Policy will depend on the type of personal information and the specific context in which we process it. Please see the sections above titled, “HOW DO WE USE YOUR PERSONAL INFORMATION?” and “HOW DO WE SHARE YOUR PERSONAL INFORMATION” for more information about the legal bases for using and sharing your personal information. If you have questions about the legal basis of how we process your personal information, contact us at privacy@allma.io.
Use for New Purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.
Your Rights. European data protection laws may give you certain rights regarding your personal information. You may ask us to take the following actions in relation to your personal information that we hold:
You may submit these requests by contacting us at privacy@allma.io. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us or submit a complaint to the data protection regulator in your jurisdiction. In the European Economic Area, you can find your data protection regulator here. In the United Kingdom, you can find your data protection regulator here.
In Short: Yes, we reserve the right, at any time, to modify this Privacy Policy.
We may update this Privacy Policy periodically to reflect modifications in how we collect, use, or share personal information, and to comply with applicable laws. The updated version will be posted to this page and indicated by an updated "Last Updated" date. In some cases, such as where required by applicable law, we may notify you of material changes to this Privacy Policy either by prominently posting a notice of such changes on the Site or by directly sending you a notification, including through the Services. In all cases, your continued use of the Services following posting of an updated Privacy Policy or other notification of changes constitutes your acknowledgement of such changes. We encourage you to review this Privacy Policy frequently to be informed of our current policies and practices.
If you have questions or comments about this Privacy Policy or any other privacy or security matter, you may contact by email at privacy@allma.io, or by post to:
Allma, Inc.
Attn: Privacy
1201 Pacific Ave.
Suite 600
Tacoma, WA 98402
United States
