---
title: "Altss | Privacy Policy"
description: "How ALTSS LLC handles organizational intelligence, professional information, private customer data and privacy requests across App and Console."
canonical: "https://altss.com/privacy-policy"
---

# Privacy Policy

**Version 2026-10-25.1 · Prepared October 25, 2026**

This policy explains how ALTSS LLC handles information about customers, website visitors and people included in its professional intelligence.

## 1. Who we are and how to contact us

ALTSS LLC ("Altss", "we", "our" or "us") provides organizational and professional intelligence through altss.com, the Altss App at app.altss.com and the separate Altss Console at console.altss.com. Our contact address is 390 NE 191st St, STE 8906, Miami, FL 33179, United States. For privacy requests or complaints, email [privacy@altss.com](mailto:privacy@altss.com) or write to that address, marked "Privacy". You can also contact us through [our contact page](https://altss.com/contact); a form is not required.

This policy applies even if you do not have an account. Reading it or using a website is not consent on behalf of people in an intelligence dataset, a waiver of privacy rights, or consent to every processing activity described here. Product availability and contractual access rights are separate from this notice.

## 2. Our roles

Altss determines the purposes and means of its independently maintained intelligence, website operations, account administration, billing, security and rights handling. For those activities it acts as a controller, or the equivalent business under applicable law. A customer receiving that intelligence ordinarily determines its own purposes and acts as a separate controller; an intelligence license is not automatically a processor agreement.

When we process customer-private workspace content solely on a customer's documented instructions, our role depends on the relevant service and agreement. Processor obligations belong in an applicable data processing agreement for that activity. We do not classify every customer relationship as processing on instructions or every intelligence supplier as a subprocessor. This policy is not an executed DPA or an international transfer agreement.

## 3. Information and sources

- **Accounts and payments:** names, business contact details, organization membership, authentication and acceptance records, orders, payment status, wallet and usage ledger entries and receipts. Payment providers process payment credentials; Altss uses transaction references and payment confirmations to administer access and funds.
- **Service activity:** requested tools, search criteria, approved executions, saved results, technical events, device/browser information and IP addresses. Logs support security, reliability, metering and dispute investigation. We seek to avoid duplicating full intelligence or private communication content in operational logs.
- **Independently collected public-source intelligence:** organizational identity, activities, investments, transactions, professional names and roles, published professional disclosures and relevant history from public registries, regulatory filings, company websites and other published business information. We retain source references, collection dates and relevant evidence and account for known source restrictions. Direct submissions are handled according to their stated submission scope.
- **Altss-developed research and derived intelligence:** normalized data, classifications, record matching, relationship analysis and other research developed by Altss from supporting evidence. An inference is an assessment, not a verified fact. A historical founder or employment relationship does not by itself establish a current appointment or investment authority. Derived information retains applicable restrictions inherited from its inputs.
- **Commercially licensed enrichment:** professional email addresses, telephone numbers and other contact information supplied by enrichment providers under their applicable agreements. Contact fields may include work addresses and, where included and permitted, personal addresses used as professional contacts. The permitted fields and uses depend on the relevant provider or dataset agreement and applicable privacy requirements.
- **Customer-private information:** uploaded lists, notes, prompts, connected-account material and private correspondence used for the customer's selected service. These are distinct from our independent intelligence product. Private inputs do not become public-profile content or another customer's intelligence merely because they are submitted to Altss.
- **Requests and support:** correspondence, information needed to locate records, proportionate verification evidence, investigation notes and decisions. Please avoid sending identity documents or sensitive information unless needed and requested through an appropriate channel.

Independently researched public facts are not treated as commercially licensed supplier content merely because they were collected from a web page. We maintain reasonable provenance and account for relevant source restrictions. Public availability, a professional context, enrichment or AI generation does not automatically remove personal information from privacy law or permit reuse of protected expression. A supplier's authority to collect information is distinct from Altss's authority to redistribute it. We do not authorize access-control circumvention or purchase of breached or leaked datasets.

## 4. Purposes and legal bases

Where a law requires a legal basis, we assess it by meaningful processing category, purpose, data type and circumstances. An assessment may cover comparable activities and records; it is not a separate legal memorandum for every person. Individual rights requests and material differences still receive their own assessment:

- **Providing contracted services:** creating accounts, delivering authorized services, processing payments and supporting customers. Contract necessity applies where the individual is a party to the contract; managing a business customer's representatives may instead involve legitimate interests.
- **Independent research and distribution:** researching, verifying, correcting, matching and supplying relevant organizational and professional intelligence. Where appropriate, this relies on assessed legitimate interests in reliable business research and customers' lawful professional uses, balanced against people's rights, reasonable expectations and the nature of the data. It is not a universal justification for every field, source or customer use.
- **Security and administration:** preventing fraud and misuse, securing accounts, maintaining service reliability and keeping proportionate audit records, based on legitimate interests or applicable legal obligations.
- **Legal duties and claims:** financial records, responding to binding requests, rights handling and necessary establishment, exercise or defence of legal claims, on the applicable legal basis.
- **Optional marketing and tracking:** consent where required and otherwise a permitted legal basis, with applicable objection and opt-out rights. See our [Cookie Policy](https://altss.com/cookie-policy). Withdrawal does not affect the lawfulness of earlier consent-based processing.

Professional matching, ranking or inferred relevance may constitute profiling. Our intelligence is intended to support human judgment. Access does not authorize unapproved decisions about credit, employment, insurance, housing or other consequential eligibility. We do not claim that profiling never occurs simply because a person can review an output.

### 4.8 Google User Data

This Section 4.8 applies to information Altss receives from Google APIs when you choose to connect a Google account (Gmail or Google Workspace mail and Google Calendar) to the Services ("Google user data"). Where this Section conflicts with any other part of this Policy, this Section controls for Google user data.

Data we access. Only with your permission, given on Google's consent screen. The consent screen identifies the requested Gmail and Calendar permissions:

- Gmail: your email address and the messages and threads in your mailbox, including headers, message bodies and attachments (read-only access);
- Gmail: the ability to send email messages that you approve in the Services from your own address;
- Google Calendar: events on your primary owned calendar, the ability to create meetings you confirm there, and your free/busy availability.

How we use it. We use Google user data only to provide user-facing features of the Services that you use: showing your email correspondence and upcoming meetings in the Services, matching messages to the firms and contacts in your pipeline, detecting replies and delivery failures, preparing draft replies and outreach for your review, answering your questions in the Altss assistant, sending messages you approve, checking your availability, and creating meetings you confirm. Altss does not modify, label or delete messages in your mailbox. Altss personnel do not read Google user data unless you give us affirmative consent for specific messages (for example, for support), it is necessary for security purposes such as investigating abuse, or it is required by applicable law.

What we never do. We do not sell Google user data. We do not transfer it to data brokers, data providers, data-enhancement partners or information resellers; use it for advertising, including retargeting and personalized or interest-based advertising; use it to determine creditworthiness or for lending purposes; or use it to develop, improve or train generalized or non-personalized artificial intelligence or machine-learning models.

Sharing. We transfer Google user data only (a) to service providers that process it on our behalf solely to operate these features, such as our cloud hosting providers and, where AI features are enabled, configured AI and embedding service providers that process relevant email excerpts and derived summaries to prepare drafts, summaries and structured information for these features; (b) when necessary to comply with applicable law or to protect against fraud, abuse or security threats; or (c) as part of a merger, acquisition or sale of assets, only after obtaining your explicit prior consent.

Storage and security. Altss uses HTTPS for connections to Google APIs and stores imported data in access-controlled databases. OAuth access and refresh tokens are additionally encrypted at rest with AES-256-GCM.

Retention and deletion. Disconnecting a Google mailbox in Altss clears its local OAuth tokens and attempts to revoke the Google grant. Disconnecting alone does not delete previously imported history. You can also revoke Altss's access in your Google Account permissions at [https://myaccount.google.com/permissions](https://myaccount.google.com/permissions). To request deletion of imported Google user data held by Altss, contact [privacy@altss.com](mailto:privacy@altss.com).

Limited Use. Altss's use and transfer to any other app of information received from Google APIs will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

### 4.9 Microsoft and other customer-private connected data

Connected Microsoft accounts and other private communications remain customer-private. We use them only for the connected features the customer authorizes and applicable contractual instructions. They are not sold as independent intelligence, contributed to public profiles, disclosed to other tenants, or used to train generalized models. Changing this notice does not expand OAuth permissions or authorize access to a mailbox. Disconnecting a connection and deleting previously imported material are separate actions; contact us about deletion. Applicable provider restrictions and more protective service-specific commitments continue to apply.

## 5. Publication, licensing and recipients

Approved public organization profiles and research can be read without payment. Proprietary App intelligence is supplied under its applicable paid subscription and access terms. Console proprietary results require an authorized paid execution or an existing valid purchase; funding alone does not unlock the database. Documentation and clearly identified synthetic examples may be public.

Depending on the purchased service, authorized customers may receive permitted intelligence through the UI, authenticated APIs, MCP, exports or integrations. Availability of a delivery format does not mean every source or field is licensed for it. Future monitoring or agent-to-agent workflows are subject to their actual availability and permissions; this policy does not announce their launch.

Licensing independently maintained professional intelligence for consideration may constitute a sale of personal information under applicable definitions. We therefore do not make a business-wide claim that we never sell personal information. **We do not sell customer-private workspace information, connected Google or Microsoft data, or private communications as intelligence.** Sale and sharing for cross-context behavioural advertising have different statutory meanings; a data license does not establish that advertising sharing occurs.

Other recipients may include hosting, identity, payment, security and support providers processing for the relevant service; advisers and authorities where necessary and lawful; and parties to a corporate transaction subject to applicable protections. The stronger Google-specific restrictions above control for Google user data. Intelligence sources may be independent controllers rather than service providers acting on our instructions.

For licensed enrichment, we assess the existing agreement at the provider or dataset level for storage, enrichment, paid customer delivery and API, MCP or customer-agent delivery where applicable. Approved field and use categories govern eligible deliveries, subject to necessary exceptions and current privacy restrictions. An eligible lookup does not require a new supplier agreement solely because it returns another record. Established permissions are reconsidered when relevant contractual changes or new evidence affect their scope.

We protect supplier credentials and confidential commercial terms. This does not limit required attribution, evidentiary citations, or source and recipient information that we must provide under applicable law.

### Recipients by service

Our infrastructure includes Amazon Web Services for application computing and databases, Vercel for the public website and delivery infrastructure, and Sanity for public website content. Auth0 (Okta) supports authentication. Stripe processes payments; Cal.com supports requested scheduling; Microsoft 365 supports business correspondence. DocuSign supports orders routed for electronic signature. These providers receive the information needed for the selected activity, not an unrestricted license to our independent intelligence. Customer recipients receive only the intelligence and uses covered by their agreement and source permissions. Provider locations and contractual roles depend on the service and agreement.

## 6. Retention and security

We retain account and contractual records for service administration and applicable financial or legal requirements; execution and payment records for purchase access, accounting and disputes; security logs for proportionate detection and investigation; and independent intelligence while it remains relevant, accurate enough for its stated purpose and lawfully usable. Source contracts may impose shorter storage periods. Historical information may remain useful when clearly identified as historical, but there is no blanket indefinite-retention exception.

- **Professional intelligence and history:** review continued relevance, source validity, accuracy, historical context, permitted purpose, contractual limits and applicable rights decisions. A current-role correction does not make a properly sourced historical relationship disappear. Historical usefulness is assessed; it is not an exemption from privacy law.
- **Accounts and customer-private content:** retain for the selected service and account administration, then apply the governing service terms, deletion decisions and necessary legal retention. Disconnecting a connected account and deleting already imported content are separate actions.
- **Orders, accepted licenses and financial records:** retain for accounting, purchase administration, disputes and applicable legal recordkeeping. Retaining a payment receipt does not authorize continued delivery of restricted intelligence.
- **Requests, restrictions and security evidence:** retain proportionate evidence to handle the request, demonstrate the decision, prevent prohibited reintroduction, investigate security events and address claims. Review necessity and restrict access; do not reuse a suppression record for marketing.
- **Browser storage:** tab-session and persistent controls differ. The [Cookie Policy](https://altss.com/cookie-policy) identifies the actual storage and clearing behavior.

We review the scope of corrections, restrictions and erasure across relevant outputs and retained copies. Backups follow their applicable rotation and restoration controls; protected retention for a legal claim does not authorize commercial distribution. A minimal protected restriction record may be retained to prevent prohibited reintroduction. We do not promise that deletion from an active service instantly removes every backup or remotely erases a customer's external copy.

We use access controls and technical and organizational safeguards appropriate to the service, including restrictions on access to customer-private information. Contact us for information about the controls and retention criteria relevant to your information.

## 7. Organization profiles and personal-information requests

We preserve accurate, relevant and lawfully published organizational profiles, their canonical URLs and unrelated business information by default. A removal request does not by itself require deleting a company profile. We investigate factual inaccuracies and correct or contextualize them. Statutory personal-information requests are assessed individually; legally justified retention does not remove any restriction that we must apply. We do not use re-enrichment to circumvent a binding restriction.

Requests concerning personal information are assessed separately under applicable law. A decision affecting particular personal information does not necessarily require deletion of an organization's profile or unrelated information whose continued processing remains lawful. Where applicable law permits continued processing, we may retain relevant professional and historical information. Where restriction, erasure or cessation is required, we implement it within its proper scope.

You may request access, correction, erasure, restriction, portability, objection, withdrawal of consent, or applicable sale/share and sensitive-information choices. Rights and exceptions depend on the activity and law; neither commercial value nor technical inconvenience alone overrides them. You do not need to prove financial damage or obtain a court order to have a request assessed. Direct-marketing objections are assessed separately from objections to other processing.

**Your right to object.** Where EU or UK law applies, you may object to processing based on legitimate interests on grounds relating to your particular situation. We must then stop that processing unless we establish compelling legitimate grounds overriding your interests, rights and freedoms, or processing is necessary for legal claims. You may object at any time to processing for direct marketing, including related profiling; we will stop using your personal information for that purpose. Send objections to [privacy@altss.com](mailto:privacy@altss.com).

Contact [privacy@altss.com](mailto:privacy@altss.com), use [our contact page](https://altss.com/contact), or write to the address above. No account, payment, purchase or particular form is required. Identify the relevant information or page and the action requested where possible. We may request proportionate identity or agent-authority verification when justified; we do not use verification requirements to obstruct applicable opt-outs.

Under the EU/UK GDPR, applicable rights requests are generally answered without undue delay and within one month, with an extension of up to two further months only where legally permitted and notified with reasons within the initial period. California access, correction and deletion requests generally require acknowledgment within 10 business days and a response within 45 calendar days, with a permitted additional 45 days notified with reasons. Other requests, including sale/share opt-outs, may have shorter deadlines. We apply the governing deadline, not an unrestricted 90-day response period.

**Your privacy choices.** You may opt out of a sale or sharing of personal information where applicable by emailing [privacy@altss.com](mailto:privacy@altss.com?subject=Privacy%20opt-out) or using our contact page. We do not require an account or charge for this request. Optional Bing advertising, optional performance telemetry and automatic marketing-attribution storage are disabled on this website. Neither the absence of Global Privacy Control (GPC) or Do Not Track (DNT), nor a previously stored preference, turns them on. Browser/device controls concern that browser; an intelligence-record sale opt-out concerns the identified information and its distribution. An anonymous browser signal does not identify every professional record. To request a record-level opt-out, provide enough information to locate the record through the free routes above; we do not require an account, a purchase or verification beyond what the applicable opt-out permits. Requests linked to a known person must be assessed across the relevant processing, independently of advertising controls. Any applicable California data-broker obligations, including DROP, operate separately from these request routes.

## 8. Complaints, indirect collection and international processing

You can complain to us through the same routes. Where the UK complaints requirements apply, we acknowledge a data-protection complaint within 30 days, investigate and keep you informed without undue delay, and communicate the outcome. That acknowledgment period does not replace a rights-request deadline. You may complain to your competent supervisory authority, including the [UK ICO](https://ico.org.uk/make-a-complaint/), or the relevant state regulator, and exercise available judicial remedies. We do not retaliate or unlawfully discriminate for exercising privacy rights.

For information collected indirectly, we assess applicable notice obligations, including EU/UK Article 14 timing and any specific, substantiated exception. A public website notice or the size of a database is not, by itself, proof of an exception.

Altss operates in the United States. Its current application/reference database infrastructure uses AWS US East (Northern Virginia); the public website uses Vercel delivery infrastructure, which can serve requests through locations outside the United States. Other provider and support locations depend on the selected service. A provider’s corporate address is not a complete list of processing locations. Contact privacy@altss.com for the locations and transfer information relevant to your data. This notice does not represent that an unverified transfer agreement, adequacy basis or representative appointment exists, and website use is not consent to a restricted transfer.

## 9. Changes and previous versions

We publish material changes at this canonical URL and provide additional notice where required. Changes do not retroactively authorize unlawful processing or rewrite an accepted contract. [Previous version: 2026-10-24.2](https://altss.com/legal/privacy-policy/2026-10-24.2). This revision clarifies our three primary intelligence sources, public-source provenance, provider-level enrichment permissions, category-level assessments and the distinction between organizational profiles and individual privacy rights. Earlier versions remain available: [2026-10-24](https://altss.com/legal/privacy-policy/2026-10-24) and [2026-10-24.1](https://altss.com/legal/privacy-policy/2026-10-24.1).

## Canonical URL

https://altss.com/privacy-policy