Aluro Privacy Policy

Effective Date: March 7, 2026 Last Updated: March 7, 2026

1. Introduction

Aluro ("Aluro," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our commercial invoicing and fulfillment platform ("Platform").

By using our Platform, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you use our Platform, we may collect:

• Full name
• Email address
• Business name and type
• Country of residence or registration
• Payment information for subscription fees (processed by third-party payment processors)
• Invoice data and records you enter into the Platform
• Communications with our support team

2.2 Information Collected Automatically

When you access our Platform, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Access times and dates
• Pages viewed and actions taken
• Referring website

2.3 Information from Third Parties

We may receive information from:

• Payment processors (subscription payment confirmation)
• Identity verification services (if applicable)
• Sanctions screening services

3. How We Use Your Information

We use your information to:

• Provide and operate the Platform
• Manage your account and subscription
• Communicate with you about your account and the Platform
• Send service-related notifications
• Conduct compliance screening of business customers
• Detect and prevent fraud, abuse, or misuse of the Platform
• Comply with legal obligations
• Improve and optimize the Platform
• Respond to your inquiries and support requests

4. Legal Basis for Processing

We process your information based on:

• Contract: Processing necessary to provide the Platform you subscribed to
• Legal obligation: Processing required to comply with applicable laws
• Legitimate interests: Processing for security, fraud prevention, and service improvement
• Consent: Where you have provided explicit consent

5. Information Sharing and Disclosure

5.1 We Do Not Sell Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.2 Service Providers

We may share information with third-party service providers who assist us in operating the Platform, including:

• Cloud hosting providers
• Payment processors (for subscription billing)
• Sanctions screening services
• Customer support tools
• Analytics providers

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or government request, including:

• Court orders or subpoenas
• Regulatory inquiries
• Law enforcement requests
• National security requirements

5.4 Protection of Rights

We may disclose information to:

• Enforce our Terms of Service
• Protect our rights, property, or safety
• Protect the rights, property, or safety of others
• Investigate potential violations

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Platform
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Account and billing records are retained for a minimum of five (5) years to comply with financial recordkeeping requirements.

After the retention period, information is securely deleted or anonymized.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Secure infrastructure providers

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information (subject to legal retention requirements)
• Restrict or object to certain processing
• Data portability
• Withdraw consent (where processing is based on consent)

To exercise these rights, contact us at support@aluro.io.

We will respond to requests within thirty (30) days or as required by applicable law.

8.1 Complaints (EEA/UK)

If you are located in the EEA or UK, you may have the right to lodge a complaint with your local data protection authority.

9. International Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States.

These countries may have different data protection laws. By using the Platform, you consent to such transfers.

We take appropriate safeguards to protect your information in accordance with this Privacy Policy.

9.1 International Transfer Safeguards (EEA/UK)

If you are located in the United Kingdom, European Economic Area (EEA), or Switzerland, and your personal information is transferred outside your jurisdiction (including to the United States), Aluro relies on appropriate safeguards for such transfers, which may include standard contractual clauses approved by the relevant authorities and/or other lawful transfer mechanisms.

You may request information about these safeguards by contacting us at support@aluro.io.

10. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

If we learn that we have collected information from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

For questions about this Privacy Policy or our data practices:

Email: support@aluro.io