Privacy Policy
On this page
Overview
This Privacy Policy explains how OrgAlyne, Inc. ("OrgAlyne," "we," "us") collects, uses, shares, and protects information when you or your organization uses the OrgAlyne platform (the "Service"). It applies to visitors of our marketing site and to authenticated users of the application at your organization's OrgAlyne workspace.
OrgAlyne is built for member-led organizations: boards, committees, and the volunteers who run them. We collect the minimum information reasonably necessary to provide the Service and we do not sell personal information.
Information we collect
Account information
When you or your organization creates an account, we collect your name, email address, password (stored as a salted hash, never in plain text), and the organization you belong to.
Organization content
The Service is a workspace for your organization's operational data, which may include: strategic priorities, committee records, action items, meeting agendas and minutes, decisions, event details, member engagement records, uploaded documents, and organization branding assets (logo, colors, name).
Usage and device information
We automatically collect limited technical information such as IP address, browser type, device information, pages visited, and timestamps, primarily for security, audit logging, and service reliability purposes.
Payment information
Subscription payments are processed by a third-party payment processor (for example, Stripe). OrgAlyne does not store full credit card numbers on its own servers.
How we use information
- To provide, maintain, and secure the Service, including authentication and tenant data isolation between organizations.
- To send administrative communications, such as account verification, password resets, and billing notices.
- To send optional notifications you or your organization have configured (reminders, mentions, digest emails), which you can adjust in Settings.
- To provide customer support and respond to inquiries.
- To detect, investigate, and prevent fraud, abuse, and security incidents, including maintaining audit logs of account and data activity.
- To improve the Service, including aggregated and de-identified analysis of feature usage.
How we share information
We do not sell personal information. We share information only in the following circumstances:
- Within your organization. Information you enter is visible to other authorized members of your organization according to their role and permissions.
- Service providers. We use third-party providers for hosting, database management, object storage (for uploaded files and logos), email delivery, and payment processing. These providers are contractually restricted from using your data for any purpose other than providing services to us.
- Legal requirements. We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of OrgAlyne, our users, or the public.
- Business transfers. If OrgAlyne is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.
AI features and your data
OrgAlyne offers optional AI-assisted features (for example, drafting meeting agendas, summarizing committee reports, or proposing action items from notes). See our AI Use Disclosure for full detail. In summary: AI-generated content is always labeled, always requires human review before being saved to official records, and your organization's data is not used to train publicly available AI models without your organization's explicit, separate authorization. AI features can be disabled entirely by an organization administrator in Settings.
Cookies
We use a minimal set of cookies necessary for authentication and session security, and optionally, analytics cookies to understand aggregate usage of the marketing site. See our Cookie Policy for details and your choices.
Data retention
We retain organization data for as long as your organization maintains an active subscription, plus a reasonable period thereafter to allow for account recovery and as required for legitimate business, legal, or audit purposes. Upon written request following account closure, we will delete or anonymize personal information within a commercially reasonable timeframe, except where retention is required by law or for legitimate audit and dispute-resolution purposes.
Security
We use industry-standard safeguards including encryption in transit (TLS) and at rest, role-based access controls, tenant data isolation, audit logging, and regular backups. See our Security Overview for more detail. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Your rights and choices
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Your organization's administrator can export or delete organization data through account settings; individual requests can also be directed to us using the contact information below, and we will coordinate with your organization's administrator as appropriate, since much of the content in the Service is controlled by your organization rather than by OrgAlyne directly.
Children's privacy
The Service is intended for use by adults administering organizations and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can address it.
International users
OrgAlyne is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. [Placeholder: describe specific international transfer mechanisms, e.g. Standard Contractual Clauses, once counsel confirms applicability based on customer base.]
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and, for material changes, provide additional notice such as an in-app notification or email to organization administrators.
Contact us
Questions about this Privacy Policy can be directed to: privacy@orgalyne.com [Placeholder: confirm final support/legal contact address and mailing address before publishing.]