Privacy policy

Who we are. Align Labs (“Align Labs,” “we,” “us,” “our”) provides AlignContent, a B2B AI content platform for creators, brands, and agencies to research, generate, optimize, and publish content across channels (the “Service”).

Contact: build@alignlabs.xyz

1. Scope

This Policy explains what we collect, how we use and share it, the choices you have, and your rights. It applies to our website, web app, APIs, and integrations.

2. Data we collect

• Account & Business Data: name, work email, company, role, phone, billing details, team membership.
• Auth & Connections: OAuth tokens/IDs for connected platforms (e.g. Google Analytics, Google Search Console, Google Business Profile, WordPress, Webflow, Framer, and social publishing destinations), account identifiers, and permission scopes you grant.
• Customer Content (“Customer Data”): brand information, prompts, generated outputs (articles, images, Reddit posts, social posts), keyword and topic research, and publishing configuration you choose to create or ingest.
• Technical/Usage Data: device, browser, IP, locale, log files, diagnostics, feature usage, crash reports, cookie IDs.
• Support/Feedback: tickets, chat/email transcripts, surveys.
• Marketing (B2B): events/webinars, newsletter preferences, referral data.

3. How we use data

• Provide the Service: authenticate users; connect to analytics, local-presence, and publishing platforms; research keywords and generate content; render and store outputs; report performance; support; bill; prevent abuse.
• Improve & secure: debugging, analytics, A/B tests, threat detection, capacity planning.
• Communications: service announcements, onboarding, product updates, and (with your choice) marketing.
• Compliance: enforce Terms, legal obligations, and connected-platform policies (e.g. Meta Platform Terms where applicable).

4. AI models & data use

• Your Customer Data is yours. We process Customer Data only to provide the Service to you, improve the platform, and per your instructions.
• Model training: you may optionally enable “Improve AlignContent” to allow de-identified snippets for quality improvements; disable anytime in workspace settings. (Enterprise default: off.)
• Third-party models: when generating research, text, or images, your prompts/outputs transit the relevant AI model provider solely to fulfill your request.

5. Legal bases

We rely on: contract performance; legitimate interests (product safety, fraud prevention, analytics); consent (where required, e.g. certain cookies/marketing); and legal obligations.

6. Meta/Facebook, Instagram & Threads data (“Platform Data”)

If you connect a Meta property (Facebook Page, Instagram, or Threads account) to publish or manage content, we process Platform Data only for your chosen purpose (e.g. publishing content, reporting) and in compliance with Meta Platform Terms and Developer Policies. We do not sell Platform Data, do not transfer it to data brokers, and do not combine it with third-party data to build profiles except as permitted to provide the Service you requested. We honor user data deletion requests and remove Platform Data when you remove the app or revoke permissions — see §12 for how to request deletion.

7. Sharing

• Processors/Sub-processors: cloud hosting, storage, log/error monitoring, analytics, email, payments, and AI model providers — each bound by contract and security obligations. A current list is available on request.
• Legal/Safety: as required by law or to protect rights, security, or the Service.
• Business transfers: merger, acquisition, or asset sale with notice and continued protections.

8. International transfers

We use global infrastructure. Where required, we use approved transfer mechanisms (e.g. EU SCCs/UK IDTA).

9. Retention

We retain Customer Data for your subscription term and for a limited period after termination for backup/audit purposes, then delete or irreversibly anonymize. You can request earlier deletion (see §12).

10. Security

We employ administrative, technical, and physical controls appropriate to the risk (encryption in transit, access controls, audit logging, vulnerability management). No system is 100% secure.

11. Your rights

• Subject to law, you may request: access, correction, deletion, portability, restriction/objection, and complaint to a regulator.
• EU/UK: contact your local DPA/ICO.
• California: rights to know/access, delete, correct, opt out of “sale/share,” limit sensitive data use, and non-discrimination. We do not sell or share personal information as defined by CPRA.
• India (DPDPA): we align with the Digital Personal Data Protection Act, 2023 and its Rules; we will honor data principal rights as they come into force.

12. Choices & data deletion

• Workspace settings for integrations, data retention, model providers, and training opt-in/out.
• Email preferences in profile or unsubscribe link.
• Cookie controls via banner and browser settings.
• To request deletion of your data, including any Meta/Facebook, Instagram, or Threads Platform Data, disconnect the relevant integration in workspace settings or email build@alignlabs.xyz. We process deletion requests within a reasonable timeframe, subject to legal retention requirements.

13. Cookies & similar tech

We use strictly necessary cookies and, with consent where required, functional/analytics cookies.

14. Children

The Service is for business use only and not directed to children under 16 (or as defined by local law).

15. Changes

We will post updates here and revise the “Effective” date. Material changes will be notified via email or in-product.

Questions or concerns?

If you have any questions about this Privacy Policy, we’re here to help. Contact Support