Privacy policy

aalo ("we," "our," or "us") is committed to protecting your privacy. This policy explains how we collect, use, and share information when you use our voice-first form builder (the "Service").

Information you give us

• Account details such as name, email, and password, or profile information from Google or GitHub if you sign in that way
• Form descriptions you type, and the forms, themes, and assets you create or upload
• Payment details when you subscribe, processed by our payment provider — we do not store full card numbers
• Messages you send to support

Voice input

If you build a form by speaking, your audio is sent to a speech-to-text provider so we can turn it into text. We use that transcript to generate your form. We do not sell voice recordings, and we do not use them to advertise to you.

Information collected automatically

• Device and browser information, IP address, and basic usage logs needed to run and secure the Service
• Essential cookies, including session cookies that keep you signed in

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate forms from your voice or text using third-party AI providers
• Process payments and send billing notices
• Send product updates, security alerts, and support replies
• Detect, prevent, and fix abuse or technical issues

When someone fills out a form you published with aalo, we store that response so you can view it, export it, and ask questions about it in your dashboard.

You are the controller of respondent data. You are responsible for telling people what you collect, why, and for having a lawful basis to collect it. We process those responses on your behalf to operate the Service.

To generate forms and insights, we send relevant prompts — such as your description, form structure, or aggregated response data — to third-party AI providers. Those providers process the data only to return a result to us so we can show it to you.

We do not sell your content, and we do not use form responses to train our own public models.

We share information with service providers who help us run aalo, including hosting and database infrastructure, authentication, speech-to-text, AI generation, and payment processing. They may only use the data to provide their service to us.

We may also share information if required by law, to protect the Service or our users, or as part of a merger, acquisition, or sale of assets.

We do not sell personal information.

We use technical and organizational measures appropriate to the risk, including encryption in transit and access controls. No internet transmission or storage method is perfectly secure. We cannot guarantee absolute security.

We use essential cookies to keep you signed in and to make the Service work. We do not currently use third-party advertising cookies. If that changes, we will update this policy.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate data
• Ask us to delete your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise these rights, email privacy@aalo.io.

aalo is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date. If a change is material, we will also notify you by email or through the Service.

Questions about this policy: privacy@aalo.io

30 N Gould St, STE R, Sheridan, WY 82801, USA