Privacy Policy

1. Overview

This Privacy Policy describes how Aplo CFO Inc., operating as Get Allan ("Get Allan", "we", "us", or "our") collects, uses, and shares personal and business data when you ("you", "your", "User") interact with our platform at www.getallan.com, our application, API, or any associated services (collectively, the "Platform").

By using our Platform, you agree to the terms of this Privacy Policy and our Terms of Use. If you do not agree, you must not use our services.

2. What Information We Collect

a. Information You Provide Directly: We may collect personal and business information that you voluntarily provide when you register for an account, submit or import data through our web app or API, or contact us for support or inquiries. Examples include: Name, email address, company name, phone number, billing details, forecasting assumptions, SKU mappings, uploaded documents, and messages or chats initiated through the Platform.

b. Information from Connected Services: When you connect your Shopify store (or other integrations like Amazon or 3PL systems in future releases), we collect data made available through those platforms' APIs, including inventory levels, product information, orders and customers, and financial/performance metrics. Note: All integrations are read-only by default — we do not modify source data.

c. Automatically Collected Data: We may collect technical data automatically when you use the Platform (IP address, browser type, device identifiers, pages viewed, usage frequency, time zone, session length, referring URLs). When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you. You may opt out of receiving this advertising by visiting https://app.retention.com/optout or exercise your GDPR opt-out at https://www.rb2b.com/rb2b-gdpr-opt-out.

3. How We Use Your Information

We process your data to:

• Provide and operate the Platform
• Build and display forecasts, models, and dashboards
• Analyze usage patterns and optimize performance
• Improve product features (Note: Customer Personal Data processed on behalf of clients is never used to train public, foundational, or third-party AI models)
• Communicate with you (support, product updates, billing)
• Comply with legal and regulatory obligations

Where possible, we may aggregate and anonymize data for benchmarking, product improvement, or analytics purposes.

4. Legal Basis for Processing (Canada, EU, and UK)

We rely on the following legal bases:

• Consent: Where you voluntarily submit personal information or connect third-party services
• Contract: When data processing is necessary to deliver services you've requested
• Legitimate Interest: For purposes such as product improvement, fraud prevention, or security
• Legal Obligation: If required to comply with laws or court orders

5. How We Share Your Information

We do not sell or rent your data to third parties. We may share your information with:

• Service providers who assist with data hosting, security, payments, or analytics
• Affiliates (such as Aplo Group Ltd.) where relevant and under shared control
• Regulatory bodies, legal authorities, or others if required by law
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Service Implementation Partners: We may share access to your Account and Personal Data with our affiliate, Aplo Group Ltd specifically for the purpose of providing onboarding, implementation, and managed support services requested by you. These partners are bound by confidentiality obligations consistent with this Policy.

All such sharing is governed by appropriate confidentiality agreements and data protection obligations. We also reserve the right to refer to you as a user of the Platform for our marketing and promotional purposes.

6. Data Storage and Security

We implement organizational and technical safeguards to protect your data, including:

• Encrypted data transmission (HTTPS/TLS) and encryption at rest (AES-256)
• Role-based access controls
• Secure API access
• Data backups and monitoring

However, no method of electronic transmission or storage is 100% secure. By using the Platform, you acknowledge this risk.

7. Your Rights

Depending on your jurisdiction (including Canada, the EU, and the UK), you have specific rights regarding your Personal Data, including:

• The right to access, update, or correct your personal data
• The right to request deletion or erasure of your personal data
• The right to restrict or object to certain processing activities
• The right to data portability

To exercise any of these rights, please contact us at liam@getallan.com. If we process your data on behalf of a business client (as a Data Processor), we will forward your request to the relevant Data Controller.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain session authentication
• Track feature usage and improve UX
• Run analytics to understand product usage

You may manage cookies through your browser settings, but disabling cookies may affect platform functionality.

9. Third-Party Links

Our Platform may link to third-party websites or tools (e.g., Shopify, Meta Ads, Google Ads). We are not responsible for the privacy practices or content of those third parties. Please review their respective policies.

10. Data Retention

We retain your data for as long as needed to:

• Provide the Platform
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

If your account is inactive for more than 24 months, we may delete or anonymize stored data unless otherwise required to retain it. Personal Data processed on behalf of clients is retained and deleted in accordance with our Data Processing Agreement (DPA).

11. Children's Privacy

Our Platform is intended for business users. We do not knowingly collect data from individuals under the age of 18. If you believe we have collected such data, please contact us for immediate deletion.

12. International Users and Data Transfers

We currently store and process data in Canada and the United States. Where Personal Data subject to EU or UK Data Protection Laws is transferred outside the EEA or UK, such transfers are governed by appropriate safeguards, including the EU Standard Contractual Clauses (Module 2) and the UK International Data Transfer Addendum incorporated into our Data Processing Agreement (DPA).

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" will reflect the latest version. Material changes will be communicated via email or a notice in the Platform.

14. Contact Us

Get Allan

+1 (249) 508 5889

info@getallan.com

135 Laurier Ave W, Ottawa, ON, Canada, K1P 5J2