Legal & trust
Privacy should be understandable enough to earn trust. This policy explains what AlignTide is trying to protect, why data may be processed, and where we draw clear boundaries.
We will not invent certifications, customers, guarantees, or security claims to make AlignTide appear more mature than it is. When a protection is planned rather than live, we intend to say so clearly.
AlignTide is being built around a simple rule: your organization’s data should be used to provide the service you asked for, not quietly repurposed for unrelated commercial activity.
We do not want privacy to be a decorative promise. We aim to make data use understandable, limited, and tied to a legitimate product purpose.
Depending on how you use AlignTide, we may process account details, organization and team information, objectives, key results, check-ins, product usage data, support communications, billing-related records, and technical logs needed to operate and secure the service.
If you request a resource such as the Viva Goals Migration Kit, we may collect your work email, company or team, role, optional country, the source that referred you to the resource, and whether you separately chose to receive product or migration updates.
During early access, some features may still be evolving. We will not claim to collect less data than the product technically requires, and we will not describe future protections as if they are already implemented.
We use information to operate AlignTide, authenticate users, keep organization data separated, provide requested product functionality and resources, improve reliability, prevent abuse, answer support requests, process lawful billing activity, and communicate important service information.
Marketing consent for resource downloads is optional and separate from access to the resource. If you do not opt in, requesting the resource does not by itself authorize us to place you on a promotional mailing list.
We do not intend to sell personal data to data brokers or use customer content to create misleading profiles for unrelated advertising purposes.
AlignTide is designed as a multi-tenant service. Protecting one organization from unauthorized access by another is a core security requirement, not an optional feature.
The current architecture uses Supabase and Row Level Security controls to enforce data boundaries. New data structures are expected to be tested for unauthorized access before they are trusted with real customer information.
We use managed infrastructure and security controls intended to reduce avoidable risk, including encrypted transport, access control, least-privilege principles, authentication safeguards, secret management, dependency review, and audit-oriented development practices.
No internet service can promise absolute security. We will not make an ‘unhackable’ claim. Our commitment is to reduce risk responsibly, respond to issues seriously, and communicate material security matters truthfully.
AlignTide may use AI to help interpret plain-language check-ins, connect updates to Key Results, and generate summaries. AI-generated suggestions may be incorrect or incomplete and should not be treated as an infallible source of truth.
Where AI processing is used, we aim to limit submitted information to what is reasonably necessary for the requested feature and to select providers and configurations consistent with our security and privacy responsibilities.
We may rely on reputable third-party infrastructure and service providers for hosting, database services, authentication, payments, email delivery, monitoring, analytics, or AI functionality. These providers process information only as needed to support the service or meet legal obligations.
Using established providers does not transfer our responsibility to be transparent about the systems we choose and how they affect customers.
We aim to retain personal and organization data only for as long as needed to provide the service or requested resource, meet legitimate operational requirements, resolve disputes, prevent abuse, or comply with law.
As account-management features mature, we intend to provide clear processes for access, export, correction, and deletion where applicable. Requests can be sent to hello@aligntide.com.
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information. We will review legitimate requests in good faith and may need to verify identity before acting on them.
You can decline Analytics tracking through the site’s consent control. You can also decline marketing updates while still requesting free resources where that option is offered.
If your organization controls your account, some requests may also need to be handled through that organization because it may act as the controller of workspace data.
AlignTide is intended for legitimate business collaboration and goal management. We do not support impersonation, fraudulent account creation, deceptive payment activity, unauthorized access, fabricated business relationships, or use of the service to mislead third parties.
We may suspend or restrict activity that creates a credible risk of fraud, abuse, security harm, or unlawful conduct.
We may update this policy as the product, legal requirements, and infrastructure evolve. Material changes should be reflected here with an updated effective date rather than being hidden in unrelated product updates.
Contact us if something in this policy is unclear or if you believe our actual product behavior does not match what we say here. That kind of feedback is important to us.