Privacy Policy
Alto Vision Inc., a Delaware corporation (“Alto”, “we”, “us”), operates the website at alto.vision (the “Site”) and Alto Connect, the platform creators use to run their storefront, courses, live sessions, memberships and payments (“Connect”). This policy explains what data each one collects, why, and what we do with it. The first part covers the Site. The second part covers Connect, including a creator’s WhatsApp Business connection.
Part one: the Site
What the Site collects
- What you tell us when you ask for a call. Your email address and, optionally, which parts of your setup you are missing, what you are running today, and anything you choose to write in the note field.
- Server logs. Our hosting provider (Vercel) keeps standard request logs, including IP addresses, for security and debugging.
We do not collect payment information, government identifiers, or any sensitive categories of data on this Site. There are no user accounts on the Site.
How the Site uses it
- To reply to you about the call you asked for, and about the work you described.
- To understand which parts of the Site work and which don't, so we can improve it.
- To keep the Site secure (rate limiting, abuse prevention).
We do not sell your personal information, and we do not share it with third parties for their own advertising.
Who processes Site data
We use a small number of service providers to run the Site. Each receives only what it needs:
| Provider | What it does | What it receives |
|---|---|---|
| Resend | Stores enquiries and sends our replies | Your email address, what you told us you are missing, the date you wrote |
| Vercel | Hosting | Standard server request logs |
| Google Analytics | Counts visits, only after you accept | Page views, referrer, approximate location, device, its own cookie identifier |
| Amplitude | Measures how the page is used and records sessions, only after you accept | Pages opened, clicks and interactions, a session recording with typed input masked |
These providers store data primarily in the United States. If you are in the EU/UK, your data is transferred to the US under the providers' standard contractual safeguards.
Cookies and similar technologies
Nothing loads until you say yes. On your first visit the Site asks, on a banner, whether it may measure how the page is used. Until you answer, and for as long as your answer is no, no analytics or session-replay code is fetched and no analytics cookie is set. Your answer is remembered in your own browser, under alto_consent, so you are asked once.
If you accept, two tools load:
- Google Analytics 4 counts page views and where visits come from, using its own cookies.
- Amplitude, including its session-replay tool, records how the page gets used: which sections you open, what you click, and where a click did nothing. Replay is configured to mask what you type, so the contents of the enquiry form are not captured in a recording.
Changing your mind is a two-step: decline on a later visit by clearing this site's stored data in your browser, which removes the remembered answer and brings the banner back. The enquiry form needs no cookies at all, and the Site works fully whichever way you answer.
How long the Site keeps it
- What you send us: until the conversation it belongs to is finished, or until you ask us to remove it, whichever comes first. Every email we send includes a way to opt out.
- Analytics and session recordings: held by Google and Amplitude under their own retention settings for our account, and only for visitors who accepted. Ask us and we will tell you the current period, or delete what belongs to you.
Part two: Alto Connect
Connect is used by creators and their teams (“creators”) to sell to and teach their own customers (“members”). A creator decides what they collect from their members and why. Alto stores and processes that data on the creator’s behalf, to run the creator’s Connect workspace, and to keep Connect secure and working well. Alto does not sell it or use it for advertising.
What Connect collects
- Account data. Name, email address and sign-in details for creators and members.
- What a creator publishes. Storefront pages, courses, videos, events, posts and messages.
- Activity. Enrolments, progress, bookings, attendance, and how the dashboard gets used.
- Payments. Handled by Stripe on the creator’s own Stripe account. Alto never receives card numbers and never holds the money.
- Connected accounts. When a creator connects WhatsApp Business, the identifiers and access token needed to act for that creator, described below.
Who processes Connect data
| Provider | What it does |
|---|---|
| Amazon Web Services | Database, file storage and the Connect API, in the United States (us-east-1) |
| Vercel | Hosts the Connect web app |
| Clerk | Sign-in and accounts |
| Stripe | Payments, on each creator’s own Stripe account |
| Mux | Video hosting and playback |
| Knock and Resend | Notifications and email |
| Zoom | Live sessions, when a creator uses them |
| Meta (WhatsApp Business Platform) | WhatsApp messages, when a creator connects WhatsApp |
| Anthropic | The in-app assistant, when a creator uses it |
| Amplitude and Sentry | Product analytics and error reports |
WhatsApp Business
A creator can connect their own WhatsApp Business account to Connect through Meta’s signup. The account, the phone number and the bill for messages stay the creator’s own. When they connect, Meta gives Connect, and Connect stores:
- the WhatsApp Business account ID, the phone number ID, the display phone number and the verified business name;
- an access token that lets Connect send messages and manage message templates for that account only. It is encrypted before it is stored, and it is never shown in the app or sent back to a browser;
- the date the token expires, so Connect can renew it before it lapses.
Connect uses this only to send the messages the creator sets up (such as a session link, an event reminder or a booking confirmation), to create and list the creator’s message templates, and to show whether the connection is working. Meta also tells Connect whether a message was sent, delivered, read or failed, and whether the account has been restricted. Connect uses the restriction notice to show the creator that their connection needs attention, and keeps delivery updates in its service logs to diagnose problems. Connect does not use WhatsApp data for advertising, does not sell it, and does not share it with anyone other than the providers above, who process it only to run Connect.
How long Connect keeps it
- Creator and member data: for as long as the creator’s workspace is active, or until the creator or member asks us to delete it.
- WhatsApp connection: until the creator disconnects. Disconnecting deletes the stored account IDs and the access token straight away and tells Meta that Connect no longer receives that account’s updates.
Deleting your data
To remove a WhatsApp connection yourself, open Connect, go to Settings, then Connections, and disconnect WhatsApp. To delete anything else Alto holds about you, from the Site or from Connect, including data received through Facebook or WhatsApp, email hello@alto.vision from the address on your account with the subject “Delete my data”. We will confirm by email once it is done. If you are a member of a creator’s workspace, you can also ask the creator directly.
Your rights
Depending on where you live (including under the EU/UK GDPR and the California Consumer Privacy Act), you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict our use of it, and to withdraw consent at any time. We honor these requests regardless of where you live: email hello@alto.vision and we'll handle it. We will never discriminate against you for exercising a privacy right. California residents: we do not sell or share personal information as defined by the CCPA.
Children
The Site is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has written to us, email us and we'll delete the entry.
Changes
If we change this policy, we'll update this page and the date above. Material changes to how we handle what you send us will be announced by email.
Contact
The data controller for the Site, and for data Meta shares with Connect, is Alto Vision Inc., a Delaware corporation. Questions or requests: hello@alto.vision