Privacy Policy
At AlignHQ ("we," "us," "our," or "Company"), we are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you use our website and services (collectively, the "Service").
AlignHQ is a SaaS change management platform designed to help teams align, communicate, and manage organizational change. You can access our marketing site at alignhq.net and our application at alignhqocm.net. If you have questions about this policy, please contact us at support@alignhq.net.
1. Information We Collect
We collect information in several ways to provide and improve the Service. Here's what we gather:
Account Information
Information You Provide Directly
When you create an AlignHQ account, we collect: full name, email address, company name, phone number, and job title. This information helps us set up your account and communicate with you about your service.
Project and Work Data
User-Created Content
You create and upload content within the Service, including: projects, stakeholder information, risk assessments, communications, organizational assessments, timelines, and related change management data. This is the core data that the Service processes to help you manage organizational change.
Usage Data
Automatically Collected Information
When you interact with AlignHQ, we automatically collect certain information: login times and frequency, feature usage patterns, browser type and version, operating system, IP address, and general geographic location (country/region level). This helps us understand how you use the Service and identify areas for improvement.
Payment Information
Billing Data
We process payment through Stripe, a secure third-party payment processor. We do not store your credit card numbers or complete payment card information on our servers. Stripe handles all payment processing securely, and we only receive confirmation of successful transactions.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision and Maintenance: To create your account, maintain and operate the Service, and provide you with access to features and functionality
- Transaction Processing: To process your subscription payments and manage billing through our payment processor, Stripe
- Service Communications: To send you transactional emails including account confirmations, password resets, subscription updates, and security alerts
- Platform Improvement: To analyze usage patterns, identify bugs, optimize features, and develop new functionality that better serves your needs
- Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical support
- Legal Compliance: To comply with applicable laws, regulations, court orders, and legal processes
- Safety and Security: To detect, prevent, and address fraud, abuse, and security incidents
What We Do NOT Do
- We do not sell your personal data to third-party advertisers or data brokers
- We do not use your data for advertising purposes to build profiles or target ads to you
- We do not share project data with any third parties without your explicit consent
- We do not use your information for purposes other than those described in this policy without notifying you first
3. Data Storage & Security
Where Your Data is Stored
Your data is stored on Google Cloud Platform (GCP) and Firebase, which operate data centers in the United States. All data remains within the US unless you have a specific agreement with us for alternative storage locations.
How We Protect Your Data
We implement multiple layers of security to protect your information:
- Encryption in Transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS protocols
- Encryption at Rest: Data stored on our servers is encrypted using industry-standard encryption methods
- Firebase Authentication: We use Firebase Authentication to manage secure access to accounts, with password hashing and session management
- Access Controls: Data is isolated at the organizational level (orgId-based isolation), ensuring that users can only access data from their own organization
- Regular Security Reviews: We conduct regular security audits and vulnerability assessments to identify and address potential risks
- Limited Staff Access: Only authorized personnel can access user data, and only for legitimate business and support purposes
Data Breach Notification
In the unlikely event of a data breach that compromises your personal information, we will notify you without unreasonable delay, as required by law. We recommend maintaining strong passwords and enabling any additional security features we offer.
4. Data Sharing
We carefully limit data sharing and only share your information with trusted service providers who help us operate the Service.
Service Providers
We may share information with the following service providers who process data on our behalf:
- Google Cloud / Firebase: For hosting, data storage, and authentication infrastructure
- Stripe: For payment processing and billing
- SendGrid: For transactional email delivery
These service providers are contractually obligated to use your data only for the specific purposes we authorize and must maintain the confidentiality and security of your information.
Legal Requirements
We may disclose your information if required by law, such as in response to:
- Valid court orders or legal processes
- Government or regulatory agency requests
- Situations involving potential threats to public safety
When legally permitted, we will notify you of such requests unless prohibited by law.
Business Transactions
If AlignHQ is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice to you via email or prominent notice on our website before your information becomes subject to a different privacy policy.
What We Will Not Do
We do not sell, rent, or lease your personal information to third parties for their marketing purposes. We do not engage in data brokering or allow third parties to use your data for their own business purposes without your explicit consent.
5. Your Rights
You have several rights regarding your personal information:
Universal Rights (All Users)
- Access Your Data: You can view and download your account information and project data through your AlignHQ account Settings
- Correct Inaccurate Data: You can update your account information at any time through your account Settings
- Delete Your Account: You can request deletion of your account and associated data by contacting support@alignhq.net
- Export Your Data: You can export your project data in standard formats through the Settings menu
- Opt Out of Marketing: You can opt out of non-essential marketing communications by clicking "Unsubscribe" in our emails or updating your preferences in Settings
California Residents (CCPA Rights)
Under the California Consumer Privacy Act (CCPA), you have the following additional rights:
- Right to Know: You have the right to request what personal information we collect, use, and disclose
- Right to Delete: You have the right to request deletion of personal information we have collected (with certain exceptions)
- Right to Opt-Out of Sale: You have the right to opt out of the "sale" of your personal information (note: we do not sell personal information)
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
To exercise these rights, contact us at support@alignhq.net. We will respond to verified requests within 45 days as required by law.
EU Residents (GDPR Rights)
If you are a resident of the European Union, United Kingdom, or EEA, you have rights under the General Data Protection Regulation (GDPR):
- Right of Access: You can request a copy of the personal data we hold about you
- Right to Rectification: You can request correction of inaccurate or incomplete data
- Right to Erasure: You can request deletion of your personal data (with certain exceptions)
- Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances
- Right to Data Portability: You can request your data in a portable, machine-readable format
- Right to Object: You can object to certain types of processing, including direct marketing
- Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority
To exercise these rights, contact us at support@alignhq.net. We will respond within 30 days. If you have unresolved concerns about our privacy practices, you have the right to lodge a complaint with your supervisory authority.
6. Cookies & Tracking
We use cookies and similar technologies to enhance your experience and understand how you use the Service.
Types of Cookies We Use
Essential Cookies
These cookies are necessary for the Service to function. They enable authentication, maintain your session, and protect against fraud. These cookies are required and cannot be disabled.
Analytical Cookies
We may use analytics cookies to understand how users interact with the Service, which features are most used, and where improvements can be made. These help us optimize the platform. Where required by law (e.g., in the EU), we will only use these cookies with your consent.
No Advertising Cookies
We do not use third-party advertising cookies or tracking pixels to track you across the internet or build advertising profiles.
Managing Cookies
Most web browsers allow you to control cookies through their settings. However, disabling essential cookies may impair the functionality of the Service. You can control analytical cookies through your browser preferences if you prefer not to be tracked.
7. Data Retention
We retain your data for as long as necessary to provide the Service and fulfill the purposes outlined in this policy.
Active Accounts
While your account is active, we retain all account information, project data, and usage logs to maintain the Service.
After Account Deletion
Once you request account deletion, we will:
- Remove your account information and project data within 30 days
- Retain anonymized usage data for analytics purposes
- Retain certain data if required by law (e.g., for tax, legal, or audit purposes)
- Retain backup copies for a reasonable period to ensure data integrity
Legal and Compliance Holds
If we receive a legal hold request or are involved in litigation, we may retain your data for longer periods as required by law.
8. Children's Privacy
AlignHQ is not intended for use by children under the age of 16. We do not knowingly collect personal information from anyone under 16 years of age. If we become aware that we have collected information from a child under 16, we will promptly delete such information and terminate the child's account.
If you have reason to believe that a child under 16 has created an account or provided information to us, please contact us immediately at support@alignhq.net.
9. International Data Transfers
AlignHQ stores and processes data on servers in the United States. If you are located outside the United States, your data will be transferred to and processed in the US, which may have different data protection laws than your home country.
EU/EEA Residents
If you are an EU or EEA resident, we comply with GDPR requirements for international data transfers. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Binding Corporate Rules (where applicable)
- Your explicit consent to the transfer
By using AlignHQ, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws. If you do not consent to such transfer, please do not use the Service.
10. Third-Party Links and Services
The Service may contain links to third-party websites and services that are not operated by AlignHQ. This Privacy Policy applies only to the Service and does not cover third-party websites or services. We encourage you to review the privacy policies of any third-party services before providing your information.
We are not responsible for the privacy practices of third-party websites, and your use of third-party services is at your own risk.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify you by:
- Sending you an email notification to your registered email address
- Displaying a prominent notice in the Service
- Requesting your explicit consent if required by law
Your continued use of the Service after any updates to this Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this policy periodically to stay informed about how we protect your information.
The "Last Updated" date at the top of this policy indicates when it was last modified.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Company
AlignHQ LLC
Registered in the State of Texas
Web
alignhq.net (Marketing)
alignhqocm.net (Application)
We will respond to your inquiries within 30 days of receipt. If you are unsatisfied with our response, you may have the right to lodge a complaint with your local data protection authority (particularly if you are in the EU or EEA).
About Our Pricing
AlignHQ offers flexible pricing plans to support organizations of all sizes:
- Starter Plan: $49/month - Perfect for small teams getting started with change management
- Professional Plan: $129/month - Ideal for mid-sized organizations with advanced features
- Enterprise Plan: Custom pricing - For large organizations with specialized requirements
Your payment information is securely processed by Stripe, and we never store your complete credit card details on our servers.