Alecto AI Privacy Notice

Welcome to Alecto AI. Alecto AI is built and owned by Alecto AI, Inc. (“Alecto AI,” “we,” “us,” “our”). This Privacy Notice (“Notice”) applies to your (“you,” “your”) use of the Alecto AI app, website, and services (“our Services”). Your use of our Services constitutes your acknowledgement of this Notice. If you object to the terms of this Notice, please do not use our Services.

We may update this Notice from time to time, and we will update the date that the Notice was Last Updated when we do so. You should regularly review the Notice when you use our Services.

Face Data Notice

Some features of Alecto AI may ask you to complete a face liveness check or submit photo or video content that includes your face. We use this information only to help verify that a real person is present, to help protect the security and integrity of our Services, to prevent fraud, abuse, or unauthorized use, and to support features that require user verification.

When a face liveness check is performed, face-related images or video frames may be processed to generate a liveness result, confidence score, reference image, and audit images. We do not use face data to identify you, advertise to you, track you across apps or websites, or create a persistent face recognition profile.

We store face data only for as long as reasonably necessary to complete the applicable liveness check, provide the requested feature, maintain security and audit records, troubleshoot technical issues, comply with legal obligations, resolve disputes, and enforce our agreements. We do not store face data indefinitely. Unless a longer retention period is required for security, legal, compliance, dispute-resolution, or fraud-prevention purposes, face data collected for a liveness check is deleted or de-identified within 30 days after the check is completed. We use this retention period because it gives us a limited time to investigate technical errors, abuse, fraud, or account-security issues while avoiding indefinite storage of face data.

We may share face data with service providers that help us provide, secure, and operate our Services. For face liveness checks, we use Amazon Web Services, including Amazon Rekognition Face Liveness and related AWS services, to process face-related images or video frames and return liveness results. Amazon Rekognition Face Liveness is designed to verify that a user is physically present by using a short video selfie and returning results such as a confidence score, reference image, and audit images. AWS documentation also states that Face Liveness can return a high-quality image and up to four audit images, and that the high-quality frame and additional frames may be returned as raw bytes or uploaded to an Amazon S3 bucket depending on the app’s configuration.

We share face data with these service providers only so they can provide services to us, including liveness detection, security, fraud prevention, hosting, storage, debugging, and technical operations. These service providers may process and store face data only as necessary to provide those services to us, comply with their legal obligations, maintain security, prevent abuse, and operate their systems. Their retention of face data depends on our configuration of the service and their applicable service terms and privacy practices. We configure our systems so that face data is not retained longer than reasonably necessary for the purposes described in this Notice.

We do not sell face data or share face data with third parties for cross-contextual behavioral advertising.

Information We Collect

When you use our Services, we collect the following categories of information:

Identifiers: We collect information that can be used to identify you, such as your email, phone number, username and password. We also may collect names of business partners that use our Services.
Electronic network activity information: We collect information related to your electronic network activity, such as information about your interactions with our Services and information about your device.
Audio and visual information: We may collect audio and visual information when you use our Services, for example, when you submit an image and video of yourself to access certain features of our Services.
Biometric data: We may collect certain biometric data, such as a faceprint, when you choose to share photo or video content with us [and with your consent]. We do not use or intend to use this data to identify you.
Inferences: We may collect inferences drawn from the other information described above.

We may aggregate or de-identify the information described above. Aggregated or de-identified data that we do not attempt to reidentify is not subject to this Privacy Notice.

We do not intend for our Services to be used by individuals under the age of 13, and we do not knowingly collect the personal information of individuals under 13.

Sources of Information

We collect information from you when you use our Services, such as when you register to use our Services, visit the app, fill out a form, respond to a survey, subscribe to our newsletters, request information and advice from us, or your business requests a quote for using our Services. We may collect your information in connection with other activities, services, features, or resources we make available in the app.

How We Use Your Information

We use your information for business purposes, as described below:

To provide our Services: We may process your information when you access our Services, including to process your requests, facilitate your communications with other users in the app, maintain and service accounts, debug to identify and repair errors that impair functionality, facilitate functionality of our Services, and customize experiences.
To communicate with you: We may use your information to contact you with information about our Services such as programs and events, to provide customer care and support, and to notify you of changes to our Services.
For research, development, and improvement of our Services: We may process your information to maintain, improve, and analyze our Services, and help ensure the security and integrity of our Services, including to detect, prevent, or investigate suspicious activity or fraud.
To enforce our terms, agreements, or policies: We may be required to process certain information to ensure that our terms, policies, and agreements with you and any third parties are enforced.
To comply with applicable laws: We may be required to process certain information under certain laws and regulations or to maintain appropriate records for internal administrative purposes.

We use sensitive personal information for the purposes described above.

How We Disclose Your Information

We may disclose your information to fulfill the purposes described in this notice, as follows:

When we work with business partners: We may share identifiers, electronic network activity information, audio and visual information, biometric identifiers, and inferences when we work with service providers, such as to support technical operations, or to third parties with whom we partner to provide our Services.
When we work on business transactions: If we become involved with a merger, corporate transaction or another situation involving the transfer of some or all of our business assets, we may share identifiers, electronic network activity information, audio and visual information, biometric identifiers, and inferences with business entities or people involved in the negotiation or transfer.
To help us protect safety and lawful interests: We may share your personal information, including identifiers, electronic network activity information, audio and visual information, or biometric identifiers, if required by a government entity or if we believe such action is necessary to comply with legal requirements or to protect the rights, interests, property, or safety of yourself or others.
With your consent: We may share your information, including identifiers, electronic network activity information, audio and visual information, biometric identifiers, and inferences, with other third parties if you give us permission or direct us to share the information.

We do not sell your information or share it with third parties for purposes of providing cross-contextual behavioral advertising.

Retention

Personal data will be stored for as long as reasonably necessary and proportionate to accomplish the purposes identified in this Notice based on criteria such as the length of time needed to provide our Services to you, to enforce our agreements, to establish, exercise, or defend legal claims, and to comply with our legal obligations.

How We Protect Your Information

We take protection of your information seriously and maintain safeguards designed to protect the information we collect in connection with our Services. However, no security system is perfect, and due to risks that inherently arise on the Internet, we cannot guarantee that data, including personal information, is absolutely safe from intrusion or other unauthorized access by others. You are responsible for protecting your password(s) and maintaining the security of your devices.

Your Rights

You may request to review or make changes to personally identifiable information we have collected from you. To do so, contact us at info@alectoai.com. We may request additional information necessary to verify that you are the accountholder of the account associated with your request.

If you have any questions, you can contact us directly at info@alectoai.com.

Let's keep the flame burning,
share your story,
and stand with us for a better future!