This privacy policy explains what information AlphaLine collects, how we use it, and the choices you have. AlphaLine exists to help investors see the deal flow moving through their trusted network — and that only works if you can trust us with your data. We take that seriously.

The short version: we collect only what we need to run AlphaLine for you, we never sell your data, and we never share your personal information with advertisers or data brokers. AlphaLine may update this policy from time to time by updating this page; we'll change the date above when we do.

Who we are and how to reach us

AlphaLine ('we' or 'us') collects, uses and is responsible for certain personal information about you. Where the EU/UK General Data Protection Regulation applies, we act as the 'controller' of that information. If you have any questions about this policy or your data, email us at hello@alphaline.co — a human reads it.

What we collect when you sign up

You sign in to AlphaLine with your Google account. From it we collect your name, email address and profile picture. We use these to create your account, and so your connections can recognize you — a real name and face is what makes a trusted network trustworthy.

How we use your Google Calendar

AlphaLine's core service is built on your calendar: by understanding which companies and founders you meet, we can organize your deal flow for you, remind you of companies you've met, and show you when companies in your network are getting attention — so good deals don't slip past you.

To do that, we read your Google Calendar events, including event times and the names and email addresses of attendees. We use attendee email addresses to recognize when a meeting involves a company or founder, and we keep that meeting history so we can build your pipeline for you automatically — no manual data entry.

AlphaLine's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In plain terms: we use your Google data only to provide the features described here, we don't sell it, we don't use it for advertising, and humans don't read it except with your permission, for security reasons, or where required by law. You can disconnect AlphaLine's access at any time from your Google account permissions page.

What your connections can see

Sharing deal flow with people you trust is the point of AlphaLine — and it's always based on mutual, accepted connections. When you and another investor have connected, they may see companies you've met, when you met them, and any status or note you've chosen to share, just as you see theirs. That's how your network helps you: a company you passed on quietly might be one your connection is looking for.

People who are not your accepted connections never see your identified activity. At most, they may see anonymous, aggregate signals — for example, that a number of investors on AlphaLine have met a company — which never identify you.

The browser extension

The AlphaLine browser extension shows you intel about the company or founder whose page you're on. It was designed privacy-first: the extension checks the address of the page you're viewing against a list on your own device, which means your browsing activity stays on your machine and is not sent to our servers.

Information is only sent to AlphaLine when you take an explicit action — for example, opening the panel on a company's site, adding a company or profile to your Watchlist, or asking the research analyst a question. In those cases we receive the site's domain or the profile you're viewing (and for analyst questions, the page title), because that's what the feature you asked for needs in order to work.

AI-powered research

Some AlphaLine features use AI to save you research time — for example, the analyst in the extension that can answer questions about a company or founder, and the highlights we generate for company cards. When you ask the analyst a question, your question and the relevant context (such as the company's domain or the page title) are processed by our AI provider (OpenAI) to research and write the answer, including searching the public web on your behalf.

AI-generated answers are a research starting point, not a verified record — they can contain mistakes, so treat them the way you'd treat a smart associate's first pass: helpful, fast, and worth double-checking before you rely on them.

Information about people you meet

To make your pipeline useful, AlphaLine keeps information about the companies and people that appear in your meetings — such as names, work email addresses, company domains, and public professional information (like a company's website or a founder's public profile). We may supplement this with information from business-data providers so your view of a company is complete without you having to research it yourself.

This is professional information, used to help investors organize meetings they were already part of. If you're not an AlphaLine user and would like information about you corrected or removed, email hello@alphaline.co and we'll take care of it.

Service providers who help us run AlphaLine

Like nearly every online service, we rely on a small number of specialist providers to operate. They process data only on our instructions, only for the purposes below, and are bound by their own contractual and legal confidentiality obligations:

• Google — sign-in and calendar access, as described above
• Hosting and storage providers (Heroku and Amazon Web Services) — running the service and storing data securely
• SendGrid — delivering the emails you've asked for, like your weekly pipeline updates
• OpenAI — powering the AI research features described above
• Business-data providers — enriching company and professional profiles so your pipeline is complete
• Sentry — error monitoring, so we can find and fix bugs quickly

We never sell your personal information, and we don't share it with advertisers or data brokers. Beyond the providers above, we would only disclose personal information where the law requires it — for example, to law enforcement in connection with an investigation.

Cookies

We use a small number of essential cookies to keep you signed in and to remember your preferences. We don't use advertising cookies or third-party tracking cookies. For general information about cookies, visit aboutcookies.org.

Like most services, our servers also record standard technical information — such as IP address, browser type and operating system — which we use to keep AlphaLine secure and reliable and to diagnose problems.

How long we keep your information, and deleting it

We keep your personal information while your account is active, so your pipeline and history keep working for you. If you'd like to delete your account, email hello@alphaline.co and we'll delete your account and associated personal data.

Keeping your information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. All data is encrypted in transit (TLS), and sensitive credentials such as calendar access tokens are additionally encrypted at rest. We limit access to your personal information to those who have a genuine business need to know it.

We also have procedures in place to deal with any suspected data security breach, and we will notify you and any applicable regulator of a breach where we are legally required to do so. While we work hard to protect your data, no internet service can guarantee perfect security — if you have any particular concerns about your information, please contact us.

What rights do you have?

Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:

• fair processing of information and transparency over how we use your personal information
• access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address
• require us to correct any mistakes in your information which we hold
• require the erasure of personal information concerning you in certain situations
• receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
• object at any time to processing of personal information concerning you for direct marketing
• object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
• object in certain other situations to our continued processing of your personal information
• otherwise restrict our processing of your personal information in certain circumstances
• claim compensation for damages caused by our breach of any data protection laws

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner's Office (ICO) on individual's rights under the General Data Protection Regulations (http://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/). If you have a concern we haven't resolved, you also have the right to complain to your local data protection supervisory authority (in the UK, the ICO).

If you would like to exercise any of these rights, email hello@alphaline.co with enough information to identify you and the information your request relates to.

Every email we send that isn't essential to your account includes an unsubscribe link, and you can choose exactly which email updates you receive from your notification settings at any time.