← Home

Privacy Policy

Last updated: June 19, 2026

Overview

Alineteam, Inc. (the "Company") collects and processes only the minimum personal data needed to provide the embeddable widget service "Aline Widget" (the "Service"). This policy explains how we handle data of (1) users who sign up, and (2) visitors who interact with the widget on a user's website.

1. Data We Collect — Users (Accounts)

  • At sign-up: email address, password (stored only as a one-way hash; the plaintext is never kept).
  • Email verification: a verification token (discarded once verified).
  • During use: project settings you create (site name, allowed domains, notification channel, recipient email, webhook URL).

2. Data We Collect — Visitors (Widget Responses)

Information a visitor submits through the widget on a user's site, which may include:

  • Survey responses: selected options and any "other" free text.
  • Contact inquiries: the name, email, category, and message the visitor enters (and a screenshot if attached).
  • Anonymous session identifier: a random ID stored in the visitor's browser local storage to prevent duplicate responses (does not directly identify a person).
  • Country code: the approximate country inferred from infrastructure (CDN) headers (the raw IP address is not stored).

3. Data We Do Not Collect

The Service does not collect a visitor's raw IP address, precise location, advertising identifiers, or behavioral tracking unrelated to widget submissions.

4. Purpose of Processing

  • Account authentication and dashboard access control.
  • Delivering widgets for the projects you register and collecting/displaying responses and inquiries.
  • Sending notifications for new responses/inquiries (via the Google Chat webhook or email you configure).
  • Sending email-verification messages.

5. Retention Period

Account and project data is retained while the account exists. When you delete your account, the projects it owns and all collected responses/inquiries are deleted with it. Where retention is required by law, we keep data for that period.

6. Storage Location and Sub-processing

All data is stored and processed in a managed environment on Google Cloud Platform (GCP) infrastructure (US us-west1 region). An SMTP provider may be used to send emails.

7. Third-Party Disclosure

We do not provide personal data to third parties except as required by law or with your consent. Delivery to the notification channel you configure (e.g., your own Google Chat, your own recipient email) is processing carried out on your instruction.

8. Cookies and Local Storage

  • Service (dashboard): a session cookie (aw_session) and a language cookie (locale).
  • Widget: an anonymous session ID and announcement "don't show again" state stored in the visitor's browser localStorage.

9. Security Measures

  • HTTPS encryption in transit.
  • One-way password hashing (scrypt).
  • Per-project domain allowlist (CORS) and per-account data isolation.

10. Your Rights

Users can view and edit their account and project settings in the dashboard and may delete their account at any time to erase their data. Requests regarding visitor data are handled through the user who operates the relevant site.

11. Privacy Officer

Alineteam, Inc. Privacy Protection Team — Email: [email protected]

12. Changes to This Policy

This policy may be revised due to changes in law or the Service; changes will be announced within the Service.