Last updated: December 1, 2025
Introduction
This Privacy Policy explains how Altyaa LLC ("Altyaa", "we", "us", or "our") collects, uses, discloses, and protects information when you access or use our platform, website, integrations, AI tools, and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Services.
Information we collect
Personal information. When you create an account or express interest in Altyaa, we may collect your name, business name and type, email address, role, optional phone number, and login credentials (email plus a hashed password).
Billing information. We do not store credit card or ACH payment data. All billing is processed securely by Stripe; Altyaa receives only limited metadata such as the last four digits of the card, card brand, billing country, subscription plan, and payment status.
Business data you upload. Business descriptions and metadata, locations and service areas, templates, captions, review response drafts, AI-generated content, photos, images, logos, videos, and team member emails and role settings.
Diagnostic and technical information. Crash logs, system diagnostics, browser, OS, and device information, login timestamps, IP address, and session cookies, used to maintain platform stability and detect abuse.
Analytics information. Pages viewed, buttons clicked, time spent on features, navigation patterns, and device/browser type. We do not collect real-time GPS location.
Media content (photos and videos)
You retain ownership of all uploaded photos and videos. Altyaa processes Media Content only to provide the Services. We do not sell Media Content, share it with advertisers, use it to train external AI models, or publish it anywhere without your authorization.
How we use data
We use your information to provide, maintain, and improve the Services; power social posting, scheduling, and reputation monitoring; generate AI-assisted content and suggestions; secure accounts and prevent fraud; customize your dashboard and reporting; communicate service notices and support; and analyze usage to improve performance. Altyaa does not sell personal data.
AI tools and AI agents
Altyaa uses AI to suggest review responses, generate social posts, assist with content creation, and provide automated workflows ("AI Agents") as configured by you. AI output may be inaccurate ("hallucinations"); you are responsible for reviewing and approving AI-generated material before it is published. AI providers do not receive personally identifiable data unless technically required, and are contractually prohibited from training on your identifiable data.
Meta Platform Data
Our Services allow you to connect your Meta (Facebook and Instagram) accounts via the Meta Graph API. By connecting these accounts, you authorize Altyaa to access and process "Platform Data" (as defined by Meta), including Page ratings, reviews, comments, and media content, solely to provide social media management, reputation analysis, and engagement tools. All AI-generated content is provided as a draft only and requires your manual review and approval before publishing — we do not use fully automated agents to post to any Meta platform without human intervention. We retain Meta Platform Data only as long as necessary to provide the Services or until you disconnect your account, and we purge associated Platform Data within 30 days of disconnection or account termination unless retention is required by law. You may request deletion at any time via our data deletion page. Altyaa does not sell, rent, or trade Meta Platform Data to third-party data brokers or advertisers.
How we share information
We share information with trusted service providers (hosting, storage and security, email delivery, analytics, AI processing under strict contractual controls, and payment processing via Stripe). When you connect external accounts (Google, Meta, Instagram, TikTok), you authorize Altyaa to access certain data from those platforms; you may revoke access at any time. We may disclose information when required by law, subpoena, court order, or government request, and we will notify you where legally permitted. If Altyaa is acquired or reorganized, information may transfer to the successor under the same protections.
Retention
We retain your data as long as your account is active or as needed to provide the Services, comply with legal requirements, resolve disputes, and prevent fraud. When you delete your account, photos and videos are removed from active systems, some encrypted backups may persist temporarily, and content already posted to third-party platforms remains under their policies.
Your rights
Depending on your location, you may have rights to access, correct, delete ("right to be forgotten"), restrict, or port your personal information, and to object to marketing. We honor rights under GDPR, CCPA/CPRA, UK GDPR, and similar laws. See our GDPR statement and CCPA/CPRA notice for jurisdiction-specific detail. Submit requests to [email protected].
International data transfers
Your data may be processed in the United States. Where required by law, we use Standard Contractual Clauses, Data Privacy Framework participation (if applicable), and other legally approved safeguards.
Security
Altyaa uses encryption in transit (TLS), encrypted password storage, role-based access controls, regular monitoring and audits, and secure multi-region hosting. No method is completely secure, but we take commercially reasonable measures to protect your information. Suspected security incidents should be reported to [email protected].
Children's privacy
The Services are not intended for individuals under 18, and we do not knowingly collect personal data from minors.
Changes to this policy
We may update this Policy from time to time. Material changes will be communicated by email or in-app notice. Continued use of the Services after changes means you accept the updated Policy.
Contact
Privacy questions and data requests should be sent to [email protected].