Privacy Policy

Introduction & Organizational Info

We, at Alumate, are dedicated to serving our customers and contacts to the best of our abilities. Part of our commitment involves the responsible management of personal information collected through our website alumate.io, and any related interactions. Our primary goals in processing this information include:

• Enhancing the user experience on our platform by understanding customer needs and preferences.
• Providing timely support and responding to inquiries or service requests.
• Improving our products and services to meet the evolving demands of our users.
• Conducting necessary business operations, such as billing and account management.

It is our policy to process personal information with the utmost respect for privacy and security. We adhere to all relevant regulations and guidelines to ensure that the data we handle is protected against unauthorized access, disclosure, alteration, and destruction. Our practices are designed to safeguard the confidentiality and integrity of your personal information, while enabling us to deliver the services you trust us with.

We do not have a designated Data Protection Officer (DPO) but remain fully committed to addressing your privacy concerns. Should you have any questions or require further information about how we manage personal information, please feel free to contact us at admin@alumate.io.

Your privacy is our priority. We are committed to processing your personal information transparently and with your safety in mind. This commitment extends to our collaboration with third-party services that may process personal information on our behalf, such as in the case of sending invoices. Rest assured, all activities are conducted in strict compliance with applicable privacy laws.

Scope and Application

Our privacy policy is designed to protect the personal information of all our stakeholders, including website visitors, registered users, and customers. Whether you are just browsing our website alumate.io, using our services as a registered user, or engaging with us as a valued customer, we ensure that your personal data is processed with the highest standards of privacy and security. This policy outlines our practices and your rights related to personal information.

Google API Services Disclosure

Alumate integrates with Google Calendar via Google API Services. This section explains how Alumate accesses, uses, stores, and shares Google user data in alignment with the Google API Services User Data Policy and Google APIs Terms of Service.

Data Accessed

• Basic Google account information (such as name and email) when you choose to sign in with Google, used for authentication and account identification.
• Calendar metadata (for example, calendar IDs, names, and time zones) for calendars you choose to connect.
• Free/busy information to determine availability and suggest meeting times.
• Event data that you create or modify through Alumate (for example, title, description, attendees, start/end times, and conferencing details such as Google Meet links).

Alumate does not access Gmail content, Google Drive files, or your Google Contacts through this integration.

Data Usage

• Authenticate your account and establish a secure connection to your selected calendars.
• Read availability to propose suitable meeting times.
• Create and update events on the calendars you explicitly choose.
• Generate conferencing links (for example, Google Meet) when requested as part of event creation.

Google user data is used solely to provide the calendar and scheduling features. We do not sell Google user data and do not use it for advertising.

Data Sharing

We do not share Google user data with third parties except in the following limited circumstances:

• Trusted service providers (for example, cloud hosting, logging, or error monitoring) that process data on our behalf under agreements requiring appropriate confidentiality and security safeguards.
• Event invitees that you add to an event, who will see information typically included in calendar invitations (for example, event title, time, location/conference link, and attendee names/emails).

Data Storage & Protection

• OAuth tokens are stored server-side in encrypted form and are not exposed to the client. Tokens are used only to access Google APIs as needed to provide the features you request.
• All communications with Google APIs occur over TLS/HTTPS.
• Access to systems and data is restricted to authorized personnel following the principle of least privilege.

Data Retention & Deletion

• OAuth tokens and related connection records are retained while your Google account remains connected and are deleted when you disconnect Google Calendar or delete your Alumate account, subject to minimal operational logging requirements.
• Events created on your Google Calendar remain in your Google account until you modify or delete them there.
• You can revoke Alumate’s access at any time via your Google Account settings at myaccount.google.com/permissions.

To request deletion of data stored by Alumate, you may contact us at admin@alumate.io. We will respond in accordance with applicable laws and remove stored tokens and associated records except where retention is required for security, fraud prevention, or legal compliance.

Data Storage and Protection

Data Storage

Personal information is stored in secure servers located in the following locations: . For services that require international data transfer, we ensure that such transfers comply with all applicable laws and maintain data protection standards equivalent to those in our primary location.

Data Hosting Partners: We partner with reputable data hosting providers committed to using state-of-the-art security measures. These partners are selected based on their adherence to stringent data protection standards.

Data Protection Measures

• Encryption: To protect data during transfer and at rest, we employ robust encryption technologies.
• Access Control: Access to personal information is strictly limited to authorized personnel who have a legitimate business need to access the data. We enforce strict access controls and regularly review permissions.

Data Processing Agreements

When we share your data with third-party service providers, we do so under the protection of Data Processing Agreements (DPAs) that ensure your information is managed in accordance with GDPR and other relevant data protection laws. These agreements mandate that third parties implement adequate technical and organizational measures to ensure the security of your data.

Transparency and Control

We believe in transparency and providing you with control over your personal information. You will always be informed about any significant changes to our sharing practices, and where applicable, you will have the option to consent to such changes.

Your trust is important to us, and we strive to ensure that your personal information is disclosed only in accordance with this policy and when there is a justified reason to do so. For any queries or concerns about how we share and disclose personal information, please reach out to us at admin@alumate.io.

User Rights and Choices

At Alumate, we recognize and respect your rights regarding your personal information, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We are committed to ensuring you can exercise your rights effectively. Below is an overview of your rights and how you can exercise them:

Your Rights

• Right of Access (Article 15 GDPR): You have the right to request access to the personal information we hold about you and to obtain information about how we process it.
• Right to Rectification (Article 16 GDPR): If you believe that any personal information we hold about you is incorrect or incomplete, you have the right to request its correction or completion.
• Right to Erasure (Article 17 GDPR): You have the right to request the deletion of your personal information when it is no longer necessary for the purposes for which it was collected, among other circumstances.
• Right to Restriction of Processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal information under certain conditions.
• Right to Data Portability (Article 20 GDPR): You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
• Right to Object (Article 21 GDPR): You have the right to object to the processing of your personal information, under certain conditions, including processing for direct marketing.
• Right to Withdraw Consent (Article 7(3) GDPR): Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.

Exercising Your Rights

To exercise any of these rights, please contact us at admin@alumate.io. We will respond to your request in accordance with applicable data protection laws and within the timeframes stipulated by those laws. Please note, in some cases, we may need to verify your identity as part of the process to ensure the security of your personal information.

We are committed to facilitating the exercise of your rights and to ensuring you have full control over your personal information. If you have any questions or concerns about how your personal information is handled, please do not hesitate to get in touch with us.

Cookies and Tracking Technologies

At Alumate, we value your privacy and are committed to being transparent about our use of cookies and other tracking technologies on our website alumate.io. These technologies play a crucial role in ensuring the smooth operation of our digital platforms, enhancing your user experience, and providing insights that help us improve.

Understanding Cookies and Tracking Technologies

Cookies are small data files placed on your device that enable us to remember your preferences and collect information about your website usage. Tracking technologies, such as web beacons and pixel tags, help us understand how you interact with our site and which pages you visit.

How We Use These Technologies

• Essential Cookies: Necessary for the website’s functionality, such as authentication and security. They do not require consent.
• Performance and Analytics Cookies: These collect information about how visitors use our website, which pages are visited most frequently, and if error messages are received from web pages. These cookies help us improve our website.
• Functional Cookies: Enable the website to provide enhanced functionality and personalization, like remembering your preferences.
• Advertising and Targeting Cookies: Used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and help measure the effectiveness of the advertising campaign.

Your Choices and Consent

Upon your first visit, our website will present you with a cookie consent banner, where you can:

• Accept All Cookies: Consent to the use of all cookies and tracking technologies.
• Reject Non-Essential Cookies: Only essential cookies will be used to provide you with necessary website functions.
• Customize Your Preferences: Choose which categories of cookies you wish to allow.

Children's Privacy

At Alumate, we are committed to protecting the privacy of children who use our services. We recognize the importance of safeguarding the personal information of minors, and we take steps to ensure compliance with applicable laws and regulations, including the Children’s Online Privacy Protection Act (COPPA) in the United States and similar regulations in other jurisdictions.

Age Requirements

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under this age without verifiable parental consent. If you are under the age of 16, please do not use our services or provide any personal information to us.

Collection and Use of Children’s Information

If we become aware that we have inadvertently collected personal information from a child under the age of 16 without verifiable parental consent, we will take prompt steps to delete such information from our records. If you believe that we may have collected personal information from a child under the age of 16 without parental consent, please contact us immediately at admin@alumate.io.

Verifiable Parental Consent

For certain features or services that may be directed towards children, we may obtain verifiable parental consent before collecting, using, or disclosing personal information from a child. Verifiable parental consent may be obtained through methods such as:

• Providing a consent form to be signed and returned by the child’s parent or guardian.
• Verifying a parent’s identity through a credit card transaction or other means.

Parental Rights

Parents or legal guardians of children under the age of 16 have the right to review, update, or delete any personal information collected from their child. To exercise these rights or to request the deletion of a child’s information, please contact us at admin@alumate.io.