Privacy Policy

1. Introduction

Altus Labs, LLC ("Altus Labs," "we," "our," or "us") operates the website at altuslabs.net and develops business software applications and services ("our Applications"). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website or use our Applications.

By using our website or Applications, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account information: Business name, contact name, email address, phone number, and billing information when you register for any of our Applications.
• Communications: Any messages, support requests, or inquiries you send us.

2.2 Information Collected Automatically (Website)

When you visit altuslabs.net, we may automatically collect:

• IP address and approximate location (country/state)
• Browser type and version
• Pages visited and time spent
• Referring URL
• Device type and operating system

This data is collected through standard web server logs and analytics tools and is used solely to understand how our website is used and to improve it.

2.3 Financial Data (via Plaid)

Where our Applications support bank account connectivity, we retrieve financial data on your behalf through Plaid, Inc. This may include:

• Bank account name, type, and masked account number
• Financial institution name
• Account balances and transaction history
• Transaction descriptions, amounts, dates, and merchant categories

Important: Altus Labs never receives, stores, or has access to your bank login credentials (username, password, or security questions). These are entered directly into Plaid's secure interface and are never transmitted to Altus Labs. See Plaid's Privacy Policy for details on how Plaid handles your credentials.

2.4 Usage Data

When you use our Applications, we collect:

• Feature usage and activity logs
• Error and diagnostic data to maintain reliability
• API request metadata for security monitoring and billing

3. How We Use Your Information

We do not use financial data retrieved via Plaid for advertising, marketing profiling, or resale. We do not sell your data — ever.

4. How We Share Your Information

Altus Labs does not sell personal or financial data. We share data only in the following limited circumstances:

• Service providers: We share data with sub-processors (including Google Cloud Platform and Salesforce) solely to operate and deliver our Applications. All sub-processors are contractually required to protect your data to an equivalent standard.
• Plaid, Inc.: Financial data is retrieved from Plaid pursuant to your authorization. Plaid's own privacy policy governs their data practices.
• Legal requirements: We may disclose data if required by law, court order, or a lawful government request, or to protect the rights, property, or safety of Altus Labs, our customers, or others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may transfer as part of that transaction, subject to equivalent privacy protections.

5. Data Retention

We retain data only as long as necessary to provide our services and meet legal obligations:

• Financial transaction data: 7 years to satisfy applicable financial recordkeeping requirements.
• Account and contact data: Duration of your subscription plus 5 years.
• Website analytics data: 12 months.
• Plaid access tokens: Duration of active authorization; deleted within 30 days of revocation.

You may request deletion of your data at any time (see Section 7). Data subject to legal retention obligations will be retained for the required period regardless of deletion requests.

6. Data Security

We implement technical and organizational measures to protect your information:

• AES-256 encryption for all data at rest
• TLS 1.2 or higher for all data in transit
• Multi-factor authentication required for all system access
• Role-based access controls limiting data access to authorized personnel only
• All infrastructure hosted on Google Cloud Platform (SOC 2 Type II, ISO 27001 certified)

No method of transmission or storage is 100% secure. We are committed to protecting your data and will notify you promptly in the event of a breach affecting your information.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Portability: Request your data in a structured, machine-readable format.
• Disconnect: Disconnect any linked bank account at any time, which revokes Plaid's authorization and stops ongoing data retrieval. Historical data may be retained for legal compliance periods.
• Opt out of analytics: You may disable cookies or use browser settings to limit website tracking.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking

Our website may use cookies and similar technologies to:

• Remember your preferences
• Understand how visitors use the site (analytics)
• Improve site performance

You can control cookie settings through your browser. Disabling cookies may affect some website functionality. We do not use cookies to serve advertising or track you across third-party websites.

9. Third-Party Links

Our website and Applications may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Children's Privacy

Our Applications are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify affected users by email or in-application notice. Your continued use of our website or Applications after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices: