Privacy Policy

Alnara ("Alnara", "we", "us", or "our") provides a dashboard that connects to third-party social and messaging platforms on your behalf and offers self-hosted website analytics. This Privacy Policy describes what information we collect, how we use it, and the choices you have.

By using Alnara, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the service.

Account information. Your name, email address, password (hashed, never stored in plain text), and any profile details you provide.

Connected account data. When you connect a third-party platform (for example Facebook, Instagram, LinkedIn, Telegram, Discord, Slack, WhatsApp, Twitch, YouTube, IRC, or Google), we store an encrypted access token and the minimum account metadata (such as page or channel names and IDs) required to operate the features you use — reading and sending messages, publishing posts, or moderating chat.

Content you create or manage. Posts, messages, comments, and media you compose, schedule, or moderate through Alnara, along with the metadata needed to deliver them (timestamps, target account, delivery status).

Website analytics data. If you enable Alnara's first-party analytics on your own site, we collect page views, referrers, and aggregate session data about your site's visitors. This tracker is self-hosted and does not use third-party cookies.

Usage and device data. Log data such as IP address, browser type, and pages visited within the Alnara dashboard itself, used for security and reliability.

• To provide, operate, and maintain the dashboard and its features.
• To authenticate you and keep your account and connected platforms secure.
• To send transactional email (password resets, verification, security alerts).
• To detect, prevent, and respond to fraud, abuse, or security incidents.
• To improve the product, informed by aggregate, de-identified usage patterns.
• To comply with legal obligations.

We do not sell your personal information.

Alnara connects to third-party platforms using each platform's official API and OAuth authorization flow. Each platform has its own privacy policy and terms governing how it handles your data, and your use of a connected platform through Alnara remains subject to that platform's own policies in addition to this one. We only request the permission scopes required for the features you use, and you can disconnect any account at any time from your dashboard, which revokes our access and deletes the stored token.

Alnara’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not use it to train machine-learning models. Alnara requests no Gmail or Drive permission of any kind. See Connected Platforms for the full disclosure.

We use a minimal, first-party session cookie to keep you signed in. We do not embed third-party advertising or tracking pixels in the Alnara dashboard. Alnara's own analytics product, when enabled on a customer's site, is described in Section 2 above and is designed to avoid third-party cookies.

We share information only in the following circumstances:

• With the third-party platforms you explicitly connect, to perform the actions you request.
• With service providers who process data on our behalf (for example, hosting and email delivery) under confidentiality obligations.
• If required by law, regulation, legal process, or governmental request.
• To protect the rights, property, or safety of Alnara, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, with notice to you.

We retain account and connected-platform data for as long as your account is active. Access tokens are deleted immediately when you disconnect an account. You may request deletion of your account and associated data at any time; see Section 9.

Access tokens and other sensitive credentials are encrypted at rest. Sessions are stored server-side. We use industry-standard measures to protect your information, but no system is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly from your account settings, or by contacting us at the address below.

Alnara is not directed at children and is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children.

Alnara may process and store information in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above, and, where appropriate, by additional notice.

Questions about this policy or your data can be sent to [email protected].