Snapshot 5561
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Policy
Effective date: February 28, 2026
We at Alpharun know you care about how your personal information is used and shared, and we
take your privacy seriously. Please read the following to learn more about our Privacy Policy. By
using or accessing the Services in any manner, you acknowledge that you accept the practices
and policies outlined in this Privacy Policy, and you hereby consent that we will collect, use, and
share your information in the following ways.
Remember that your use of Alpharun's Services is at all times subject to the Cloud Service
agreement signed as part of your corporate contract with Alpharun upon the start of
subscription.
What does this Privacy Policy cover?
This Privacy Policy covers our treatment of personally identifiable information ("Personal
Information") that we gather when you are accessing or using our Services, but not to the
practices of companies we don't own or control, or people that we don't manage. We gather
various types of Personal Information from our users, as explained in more detail below, and we
use this Personal Information internally in connection with our Services, including to
personalize, provide, and improve our services, to allow you to set up your account, to contact
you and allow other users to contact you, to fulfill your requests for certain products and
services, and to analyze how you use the Services. In certain cases, we may also share some
Personal Information with third parties, but only as described below.
This Privacy Policy also describes how we handle data that our enterprise customers provide to
us for processing through the Alpharun platform, including call recordings and related metadata
that may contain personal information about our customers' end users or consumers.
We do not knowingly collect or solicit personal information from anyone under the age of 13. If
you are under 13, please do not attempt to register for the Services or send any personal
information about yourself to us. If we learn that we have collected personal information from a
child under age 13, we will delete that information as quickly as possible. If you believe that a
child under 13 may have provided us personal information, please contact us at
privacy@alpharun.com.
Will Alpharun ever change this Privacy Policy?
We're constantly trying to improve our Services, so we may need to change this Privacy Policy
from time to time as well, but we will alert you to changes by placing a notice on
www.alpharun.com, by sending you an email, and/or by some other means. Please note that if
you've opted not to receive legal notice emails from us (or you haven't provided us with your
email address), those legal notices will still govern your use of the Services, and you are still
responsible for reading and understanding them. If you use the Services after any changes to
the Privacy Policy have been posted, that means you agree to all of the changes.
What Information does Alpharun collect?
Information You Provide to Us
We receive and store any information you knowingly provide to us. For example, we may
receive or collect Personal Information such as your name, email address, and Connected
Account credentials (for example, your log-in credentials for Google, Microsoft Azure AD, or
other third party accounts that you use to sign into the Services via OAuth or SSO SAML). If you
provide your Connected Account credentials to us or otherwise sign in to the Services through a
third party site or service, you understand some content and/or information in those Connected
Accounts ("Third Party Account Information") may be transmitted to us, and that Third Party
Account Information transmitted to our Services is covered by this Privacy Policy. Certain
information may be required to register with us or to take advantage of some of our features.
We may communicate with you if you've provided us the means to do so. For example, if you've
given us your email address, we may email you about your use of the Services. Also, we may
receive a confirmation when you open an email from us. This confirmation helps us make our
communications with you more interesting and improve our services. If you do not want to
receive communications from us, please indicate your preference by using the "unsubscribe"
link at the bottom of our emails.
Data Provided by Customers
Alpharun provides an AI-powered sales performance and compliance monitoring platform for
enterprise customers in regulated industries such as financial services and insurance. As part of
delivering these services, our enterprise customers may provide us with data including call
recordings, transcripts, metadata, and configuration data.
When Alpharun processes this data on behalf of a customer, the customer is the data controller
and Alpharun acts as a data processor. The processing is governed by the Data Processing
Agreement between Alpharun and the customer. Alpharun processes this data solely for the
purpose of delivering the contracted services — specifically, producing call analysis, compliance
scores, performance insights, and coaching recommendations. We do not use
customer-provided data for any other purpose, including marketing, advertising, or training AI
models. A particular customer’s data is never shared with other customers, nor ever used to
train shared AI models for the benefit of other Alpharun customers. Customer data shared with
Alpharun is used by Alpharun solely to deliver and improve the quality of service for that
particular customer.
AI Model Providers and Zero Data Retention
To provide our call transcription and analysis services, Alpharun transmits customer-provided
call data to third-party AI model providers (such as OpenAI) via encrypted API connections.
These providers operate under zero data retention agreements with Alpharun — meaning
customer data sent for processing is not stored, cached, logged, or used for model training by
the provider. Data exists on the provider's systems only for the duration of the API request.
Information Collected Automatically
Whenever you interact with our Services, we automatically receive and record information on
our server logs from your browser or device, which may include your IP address, geolocation
data, device identification, "cookie" information, the type of browser and/or device you're using
to access our Services, and the page or feature you requested. "Cookies" are identifiers we
transfer to your browser or device that allow us to recognize your browser or device and tell us
how and when pages and features in our Services are visited and by how many people. You
may be able to change the preferences on your browser or device to prevent or limit your
device's acceptance of cookies, but this may prevent you from taking advantage of some of our
features.
If you click on a link to a third party website or service, a third party may also transmit cookies to
you. Again, this Privacy Policy does not cover the use of cookies by any third parties, and we
are note responsible for their privacy policies and practices. Please be aware that cookies
placed by third parties may continue to track your activities online even after you have left our
Services, and those third parties may not honor "Do Not Track" requests you have set using
your browser or device.
We may use this data to customize content for you that we think you might like, based on your
usage patterns. We may also use it to improve the Services — for example, this data can tell us
how often users use a particular feature of the Services, and we can use that knowledge to
make the Services interesting to as many users as possible.
Information We Do Not Collect
Alpharun does not directly collect personal information from our enterprise customers' end
consumers. Any personal information about end consumers that Alpharun processes is
provided to us by our customers through call recordings, and Alpharun supports automated
redaction processes to strip those call recordings of end consumer information.
Will Alpharun Share Any of the Personal Information it
Receives?
We will not rent, sell, or share your personal information except in accordance with this policy:
Sub-processors: We use third-party service providers to help us deliver and improve our
Services. These providers process data only as directed by Alpharun and are bound by data
processing agreements. All sub-processors are located in the United States.
For the most current list of sub-processors, please review our Data Processing Agreement.
Unless we tell you differently, our sub-processors do not have any right to use the Personal
Information we share with them beyond what is necessary to assist us.
User Profiles and Submissions: Certain user profile information, including your name,
location, and any content relating to the Connected Account that you use in connection with the
Services, may be displayed to other users within your company or team's instance of Alpharun
to facilitate user interaction within the Services or address your request for our services.
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets,
customer information may be transferred as part of the transaction. In such cases, the acquiring
party will be required to honor the commitments made in this Privacy Policy and any applicable
Data Processing Agreements. We will notify affected customers before their Personal
Information becomes subject to a different privacy policy. For enterprise customers with active
Data Processing Agreements, any transfer of customer data in connection with a change of
control will remain subject to the terms and protections of the applicable DPA.
Protection of Alpharun and Others: We reserve the right to access, read, preserve, and
disclose any information that we believe is necessary to comply with law or court order; enforce
or apply our Terms of Service and other agreements; or protect the rights, property, or safety of
Alpharun, our employees, our users, or others.
Is Personal Information about me secure?
Your account is protected by your identity provider's authentication controls. Alpharun uses
OAuth (Google, Microsoft Azure AD) and SSO SAML for all user authentication — we do not
store user passwords. Multi-factor authentication and password policies are managed by your
identity provider.
If you access the Services via a third party site or service, you may have additional or different
sign-on protections via that third party site or service. You must prevent unauthorized access to
your account and Personal Information by securing your identity provider account appropriately
and limiting access to your computer or device by signing off after you have finished accessing
your account.
We endeavor to protect the privacy of your Personal Information we hold in our records and
maintain enterprise security controls independently validated through our SOC 2 Type II audit.
More details can be found on our Trust and Security page.
Key security measures include:
● Encryption of all data at rest (AES-256) and in transit (TLS 1.2+)
● Role-based access controls with least-privilege principles
● Multi-tenant data segregation ensuring each customer's data is logically isolated
● Continuous security monitoring across all production systems
● Quarterly vulnerability scans and annual penetration testing by independent third parties
● Documented incident response and breach notification procedures
How Long Do We Retain Personal Information?
Platform user data: We retain Personal Information about you for as long as you have an
active account with us or as otherwise necessary to provide you Services. In some cases we
retain Personal Information for longer, if doing so is necessary to comply with our legal
obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by
applicable law. Afterwards, we retain some information in a depersonalized or aggregated form
but not in a way that would identify you personally.
Customer data: Data provided by our customers (call recordings, transcripts, metadata, and
derived analytics) is retained for the duration of the customer engagement. Upon contract
termination, customer data is deleted from all active systems within 60 days, unless a different
retention period is specified in the applicable service agreement or Data Processing Agreement.
Customers may request deletion of their data at any time by emailing privacy@alpharun.com,
and Alpharun will process such requests within 30 days.
AI model providers: Data sent to AI model providers for transcription and analysis is not
retained by the provider — it exists only for the duration of the API request under our zero data
retention agreements.
What Personal Information can I access?
Through your account settings, you may access, and, in some cases, edit or delete the following
information you've provided to us:
● Name
● Email address
● Username
● Company information
● Connected Account settings
The information you can view, update, and delete may also depend on the Connected Account
you use and the permissions that you grant through your Connected Account, and may change
as the Services change. If you have any questions about viewing or updating information we
have on file about you, please contact us at support@alpharun.com.
What choices do I have?
You can always opt not to disclose information to us, but keep in mind some information may be
needed to take advantage of some of our features.
You may be able to add, update, or delete information as explained above. When you update
information, however, we may maintain a copy of the unrevised information in our records.
Some information may remain in our records after ceasing using the Services. We may use any
aggregated data derived from or incorporating your Personal Information after you update or
delete it, but not in a manner that would identify you personally.
California Residents — Your Privacy Rights
If you are a California resident, you have the following rights under the California Consumer
Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
● Right to Know: You have the right to request that we disclose the categories and
specific pieces of Personal Information we have collected about you, the categories of
sources from which it was collected, the business or commercial purpose for collecting it,
and the categories of third parties with whom we share it.
● Right to Delete: You have the right to request that we delete the Personal Information
we have collected from you, subject to certain exceptions.
● Right to Correct: You have the right to request that we correct inaccurate Personal
Information that we maintain about you.
● Right to Opt-Out of Sale or Sharing: Alpharun does not sell your Personal Information.
Alpharun does not share your Personal Information for cross-context behavioral
advertising purposes.
● Right to Non-Discrimination: We will not discriminate against you for exercising any of
your CCPA/CPRA rights.
To exercise any of these rights, please submit a request to privacy@alpharun.com. We will
verify your identity before fulfilling your request.
Alpharun as a Service Provider: When Alpharun processes data on behalf of our customers,
we act as a "service provider" under the CCPA. In this capacity, we process Personal
Information only as directed by our customer (the "business") and in accordance with our Data
Processing Agreement. We do not sell or share any Personal Information provided by our
customers. If you are an end consumer whose data has been processed through the Alpharun
platform on behalf of one of our enterprise customers, please direct any data subject requests to
that enterprise customer, as they are the data controller responsible for responding to your
request.
EU Residents
If you are a resident of the European Union ("EU"), United Kingdom, Lichtenstein, Norway, or
Iceland, you may have additional rights under the EU General Data Protection Regulation (the
"GDPR") with respect to your Personal Data, as outlined below.
For this section, we use the terms "Personal Data" and "processing" as they are defined in the
GDPR, but "Personal Data" generally means information that can be used to individually identify
a person, and "processing" generally covers actions that can be performed in connection with
data such as collection, use, storage and disclosure. If Alpharun is not processing your Personal
Data on behalf of a third party, Alpharun will be the controller of your Personal Data processed
in connection with the Services.
If there are any conflicts between this section and any other provision of this Privacy Policy, the
policy or portion that is more protective of Personal Data shall control to the extent of such
conflict. If you have any questions about this section or whether any of the following applies to
you, please contact us at privacy@alpharun.com.
What Personal Data Do We Collect and How Do We Use It?
We collect Personal Data about you when you provide it directly to us, when third parties
provide it to us, or when it is collected automatically through your use of our Services:
Category of Source Purpose of Grounds Specific Retention
Data Processing for Legitimate Period
Processing Interest
Customer Data To provide the Legitimate To protect the As long as
Contact Data Subject Services to interests security of your your
(Name, Email you account, to account is
Address) communicate active
with you about
the Services,
and to allow you
to access the
functionality of
the Services
Call recording Customer To provide call Performanc N/A — Duration of
and analysis (Data analysis, e of a processed as a customer
data Controller) compliance contract data processor contract +
monitoring, (DPA) on behalf of the 60 days
and data controller post-termin
performance ation (or
coaching less
depending
services to our on
customers customer
contract
specificatio
ns)
Company Data To provide the Legitimate To allow you to As long as
Profile Data Subject Services to interests use the your
(e.g. company you functionality of account is
website URL, the Services active
company
product
name)
Credit Card Data To provide the Legitimate To enable you to As long as
Information Subject Services to interests purchase the your
and Billing you paid portions of account is
Address the Services active
Device Data To provide the Legitimate To allow you to As long as
Information Subject Services to interests access the your
(operating you functionality of account is
system, web the Services active
browser)
IP address Data To provide the Legitimate To allow you to As long as
Subject Services to interests access the your
you functionality of account is
the Services active
Web Session Data To provide the Legitimate To allow you to As long as
Data Subject Services to interests access the your
you functionality of account is
the Services active
Cookie Data To provide the Legitimate To allow you to As long as
information Subject Services to interests access the your
you functionality of account is
the Services active
How and With Whom Do We Share Your Data?
We share Personal Data with vendors, third party service providers and agents who work on our
behalf and provide us with services related to the purposes described in this Privacy Policy or
our Terms of Service. These parties include:
● Cloud hosting and infrastructure providers (AWS, Supabase, Cloudflare)
● AI model providers for call transcription and analysis (operating under zero data
retention agreements)
● Payment processors (Stripe)
● Analytics service providers (PostHog — anonymized data only)
● Error monitoring providers (Sentry)
● Messaging and email service providers (Front, Postmark)
See our Data Processing Agreement for the complete list of sub-processors, including their
locations and anticipated processing tasks. All sub-processors are located in the United States.
We also share Personal Data when we believe it is necessary to:
● Comply with applicable law or respond to valid legal process, including from law
enforcement or other government agencies
● Protect us, our business or our users, for example to enforce our terms of service,
prevent spam or other unwanted communications and investigate or protect against
fraud
● Maintain the security of our products and services
In the event of a merger, acquisition, reorganization, or sale of assets, user information may be
transferred as part of the transaction. In such cases, the acquiring party will be required to honor
the commitments made in this Privacy Policy and any applicable Data Processing Agreements,
and affected customers will be notified before their Personal Data becomes subject to a different
privacy policy.
How Long Do We Retain Your Personal Data?
We retain Personal Data about you for as long as you have an open account with us or as
otherwise necessary to provide you Services. Customer data (including call recordings and
derived analytics) is retained for the duration of the customer engagement and deleted within 60
days of contract termination, unless otherwise specified in the applicable Data Processing
Agreement or customer Cloud Service Agreement. In some cases we retain Personal Data for
longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect
fees owed, or is otherwise permitted or required by applicable law. Afterwards, we retain some
information in a depersonalized or aggregated form but not in a way that would identify you
personally.
What Security Measures Do We Use?
We seek to protect Personal Data using appropriate technical and organizational measures
based on the type of Personal Data and applicable processing activity. Our security controls are
independently validated through a SOC 2 Type II audit (clean opinion, no exceptions). Key
measures include encryption of all data at rest (AES-256) and in transit (TLS 1.2+), role-based
access controls, multi-tenant data segregation, continuous security monitoring, and quarterly
vulnerability scans and annual penetration testing by independent third parties. We use OAuth
and SSO SAML to ensure a secure authentication process — we do not store user passwords.
AI model providers operate under zero data retention agreements. A full overview of our
technical security measures can be found on our Trust and Security page.
What Rights Do You Have Regarding Your Personal Data?
You have certain rights with respect to your Personal Data, including those set forth below. For
more information about these rights, or to submit a request, please email
privacy@alpharun.com. Please note that in some circumstances, we may not be able to fully
comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the
rights of others, or if it is not required by law, but in those circumstances, we will still respond to
notify you of such a decision. In some cases, we may also need you to provide us with
additional information, which may include Personal Data, if necessary to verify your identity and
the nature of your request.
● Access: You can request more information about the Personal Data we hold about you
and request a copy of such Personal Data. You can also access certain parts of your
Personal Data by logging into Alpharun and viewing your account settings.
● Rectification: If you believe that any Personal Data we are holding about you is
incorrect or incomplete, you can request that we correct or supplement such data. You
can also correct some of this information directly by logging into Alpharun and editing
your information from the account settings page.
● Erasure: You can request that we erase some or all of your Personal Data from our
systems.
● Withdrawal of Consent: If we are processing your Personal Data based on your
consent (as indicated at the time of collection of such data), you have the right to
withdraw your consent at any time. Please note, however, that if you exercise this right,
you may have to then provide express consent on a case-by-case basis for the use or
disclosure of certain of your Personal Data, if such use or disclosure is necessary to
enable you to utilize some or all of our Services.
● Portability: You can ask for a copy of your Personal Data in a machine-readable format.
You can also request that we transmit the data to another controller where technically
feasible.
● Objection: You can contact us to let us know that you object to the further use or
disclosure of your Personal Data for certain purposes.
● Restriction of Processing: You can ask us to restrict further processing of your
Personal Data.
● Right to File Complaint: You have the right to lodge a complaint about Alpharun's
practices with respect to your Personal Data with the supervisory authority of your
country or EU Member State.
Note for end consumers: If your Personal Data has been processed through the Alpharun
platform on behalf of one of our enterprise customers (for example, if your call with a financial
services representative was analyzed by Alpharun), you should direct any data subject requests
to that enterprise customer, as they are the data controller. If you contact Alpharun directly, we
will promptly notify the relevant enterprise customer and follow their instructions regarding your
request.
Children
We request individuals under 16 not provide personal data to Alpharun. If we learn that we have
collected the personal data from a child under 16, we will take steps to delete the information as
soon as possible.
Transfers of Personal Data
The Services are hosted and operated in the United States ("U.S.") through Alpharun and its
service providers, and if you do not reside in the U.S., laws in the U.S. may differ from the laws
where you reside. By using the Services, you acknowledge that any Personal Data about you,
regardless of whether provided by you or obtained from a third party, is being provided to
Alpharun in the U.S. and will be hosted on U.S. servers, and you authorize Alpharun to transfer,
store and process your information to and in the U.S., and possibly other countries. You hereby
consent to the transfer of your data to the U.S. pursuant to a data processing agreement
incorporating standard data protection clauses promulgated by the European Commission, a
copy of which can be obtained at
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32010D0087.
What if I have questions about this policy?
If you have any questions or concerns regarding our privacy policies, please send a detailed
message to privacy@alpharun.com and we will try to resolve your concerns.