Legal

Privacy Policy

Effective Date: August 15, 2026

The Promise Alignment Company, LLC (“we,” “us,” or “our”) operates promisealignment.com and the Promise Alignment platform (the “Services”). This Privacy Policy describes how we collect, use, process, and protect personal and organizational data when you use our platform, website, and AI-powered diagnostic tools.

For the purposes of applicable data protection laws (such as GDPR and CCPA), when we process diagnostic data provided by a customer organization, our customer acts as the Data Controller (or Business), and The Promise Alignment Company, LLC acts as a Data Processor (or Service Provider).

1. Information We Collect

  • Account & Contact Data: When you register for an account, claim an organizational domain, or subscribe to a plan, we collect your name, business email address, company name, job title, and authentication credentials via our identity provider, Clerk.
  • Diagnostic Inputs & Customer Data: When using the platform and our AIdvisor engine, we collect the diagnostic inputs, survey answers, company context, operational promises, and uploaded documentation you provide. This information is used to generate your Promise Audit, Cost of Drift analysis, and related platform insights.
  • Payment & Billing Information: Subscription payments are processed directly by our third-party billing providers. We collect billing contact details, plan tier, and transaction history, but we do not collect or store full payment card numbers on our servers.
  • Usage & Telemetry Data: We collect standard technical information regarding your interactions with the platform, including access times, features utilized, report view counts, and device details.
  • Cookies & Tracking:
    • Essential Cookies: Strictly necessary cookies required for session management, user authentication (Clerk), and security. These cannot be disabled.
    • Analytics Cookies: Optional cookies set by Google Analytics (site performance and navigation) and Microsoft Clarity (session replay and heatmaps, with sensitive content masked). These load only after you grant consent via our cookie preferences banner. You may opt out or update your choices at any time via the “Cookie Preferences” link in our site footer.

2. How We Use Your Information

We process collected data to:

  • Operate, maintain, and deliver the Services, including generating Promise Audit and Cost of Drift reports.
  • Process payments, manage subscriptions, and send billing updates.
  • Communicate administrative notices, security alerts, and system updates.
  • Monitor system performance, protect against unauthorized access or impersonation, and secure our infrastructure.
  • Create anonymized, aggregated, and non-identifiable industry benchmarks as permitted under our Terms of Service.

3. AI Processing & Third-Party AI Models

Our platform utilizes advanced AI models, including Claude developed by Anthropic, Inc., to power the AIdvisor diagnostic engine and generate platform outputs.

  • Commercial API Processing: Diagnostic data processed by our AI subprocessors is transmitted securely via enterprise commercial API endpoints.
  • No AI Model Training on Customer Data: Inputs and customer data provided to our platform are not used by third-party AI providers (such as Anthropic) to train, fine-tune, or improve their foundation models.
  • Data Minimization: We pass only the diagnostic inputs and company context necessary to generate your analysis. Personal account credentials (e.g., passwords) are never transmitted to AI processing engines.

4. Third-Party Subprocessors

To deliver our SaaS platform, we share limited data with trusted third-party service providers acting as our subprocessors:

  • Clerk: Identity management, authentication, and user security.
  • Supabase: Cloud database, data storage, and encrypted data hosting.
  • Anthropic: AI processing for the AIdvisor diagnostic engine.
  • Vercel: Application hosting and web infrastructure.
  • Resend: Transactional email and billing notification delivery.
  • Google Analytics: Voluntary website analytics and usage metrics.
  • Microsoft Clarity: Voluntary session replay and heatmaps, loaded only with your analytics consent.

All subprocessors are vetted for security compliance and are contractually bound to process data solely on our instructions and in compliance with applicable privacy laws.

5. Data Ownership & Retention

  • Customer Control: As detailed in our Terms of Service, you retain ownership of your raw diagnostic inputs and Customer Data.
  • Retention Period: We retain your account information and diagnostic outputs for as long as your account remains active or as needed to provide you with the Services.
  • Data Deletion: Upon cancellation or written request to hi@promisealignment.com, we will delete or anonymize your personal account data and diagnostic inputs within thirty (30) days, except where retention is required by law or necessary for tax and accounting purposes.

6. Security Standards

We implement administrative, technical, and physical safeguards designed to protect your data against unauthorized access, loss, or disclosure. These measures include SSL/TLS encryption for data in transit, AES-256 encryption at rest (via Supabase), role-based access controls, and secure multi-factor authentication protocols.

7. Your Data Rights & Regional Compliance

Depending on your jurisdiction (including the EU/UK GDPR and US state privacy laws like the CCPA/CPRA), you have the following rights regarding your personal information:

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Correction: Request updates or corrections to inaccurate profile details.
  • Deletion: Request the erasure of your personal data.
  • Data Processing Agreements (DPA): B2B customers requiring a signed DPA may request our standard DPA by contacting us.

To exercise any of these rights, email us at hi@promisealignment.com. We will verify and respond to your request within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect platform updates, regulatory changes, or operational shifts. Material changes will be communicated via email or a prominent notification within the platform dashboard prior to the change taking effect.

9. Contact

The Promise Alignment Company, LLC
Email: hi@promisealignment.com
Website: promisealignment.com