Privacy Policy

Altos IQ LLC ("Altos IQ," "we," "us") is a Florida limited liability company operating the business valuation platform at altosiq.com. This Privacy Policy explains how we collect, use, share, and protect your personal information. We do not sell your personal data. Contact us at [email protected].

1. Information We Collect

We collect information you provide directly, including account data (name, email, company, job title, phone number), financial documents you upload for valuation analysis (tax returns, P&L statements, balance sheets), payment and billing details processed by Stripe, support and feedback communications, and lead data (name, email, company) collected through free tool downloads.

We also collect information automatically, including usage data (pages visited, features used, click behavior), device data (IP address, browser type, OS), server and API logs, and session and analytics cookies.

We may receive information from third parties including payment confirmation and fraud signals from Stripe, financial data you authorize through integrations (QuickBooks, Xero), and authentication data from third-party sign-in providers.

2. How We Use Your Information

We use your information to: provide, operate, and improve the Platform; process payments and manage subscriptions; generate valuation analyses and reports from your uploaded data; send transactional communications such as confirmations, invoices, and verification emails; send marketing communications (you may opt out at any time); monitor compliance with our Terms and detect fraud or abuse; comply with legal obligations; and analyze usage patterns to improve Platform performance.

3. Legal Bases for Processing (GDPR)

For users in the European Economic Area, we process personal data under the following legal bases: Contract Performance — delivering services you subscribed to; Legitimate Interests — security monitoring, fraud prevention, and Platform improvement; Legal Obligation — compliance with applicable laws; and Consent — marketing communications, which may be withdrawn at any time.

4. How We Share Your Information

We do not sell your personal data. We share information with trusted service providers who help us operate the Platform (Stripe, Resend, DigitalOcean, Google, database providers), who are contractually bound to process data only on our behalf. We may disclose information when required by law, court order, or government request. In a merger, acquisition, or sale of assets, your data may transfer to the successor entity with advance notice. We may also share information with explicit your consent.

5. Financial Document Handling

Financial documents you upload are treated with heightened confidentiality. They are encrypted in transit and at rest, accessible only to authorized personnel on a need-to-know basis, never sold or shared with unauthorized parties, retained only for the duration of your account plus 90 days, and permanently deleted upon written request subject to legal hold obligations.

6. Cookies & Tracking

We use essential cookies required for Platform functionality (these cannot be disabled), preference cookies that store your Platform settings, and analytics cookies that help us understand how the Platform is used.

For analytics we use Google Tag Manager and Google Analytics, which set cookies in your browser and share usage data with Google — pages visited, approximate location derived from your IP address, and device and browser type. We do not send Google your name, your email address, or any financial information you upload for valuation.

You can stop Google Analytics collecting your activity by installing Google's browser opt-out add-on, or by blocking third-party cookies in your browser. Blocking essential cookies may impair Platform functionality.

7. Data Retention

We retain account data for the duration of your subscription plus 3 years; financial documents for account duration plus 90 days; payment records for 7 years as required by tax regulations; usage logs for 12 months; and lead data until you unsubscribe from marketing communications.

8. Data Security

We implement enterprise-grade security including TLS 1.2+ encryption in transit, AES-256 encryption at rest, role-based access controls, regular security audits, Cloudflare WAF and DDoS protection, and multi-factor authentication for administrative access. We will notify you of any breach affecting your personal information within the timeframes required by applicable law.

9. Your Rights & Choices

Depending on your jurisdiction, you may have the right to: access a copy of personal information we hold; request correction of inaccurate information; request deletion of your personal information subject to retention requirements; request your data in a portable format; request limits on processing; object to processing based on legitimate interests or for marketing; and withdraw consent at any time where processing is consent-based. California residents may opt out of the sale of personal information — we do not sell personal information. To exercise any right, email [email protected]. We respond within 30 days.

10. Marketing Communications

If you opt into marketing, we may send product and service updates. Unsubscribe at any time via any marketing email or by emailing [email protected]. Unsubscribing from marketing does not affect transactional account communications.

11. International Data Transfers

Altos IQ is U.S.-based. Users outside the U.S. consent to data transfer to and processing in the United States. For EEA and UK users, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions for cross-border transfers.

12. Children's Privacy

The Platform is not directed to individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us information, contact [email protected] and we will delete it promptly.

13. Artificial Intelligence & Automated Processing

The Platform uses AI and machine learning to analyze financial data and generate insights. This processing is automated but does not produce legally binding decisions without human review. We do not use your specific financial data to train AI models without your explicit written consent.

14. Third-Party Links

The Platform may contain links to third-party websites. These third parties have their own privacy policies and we are not responsible for their practices. We encourage you to review the privacy policy of any third-party site you visit.

15. Changes to This Policy

We may update this Policy at any time. We will notify you of material changes via email or Platform notice at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.

16. Contact

Altos IQ LLC — Privacy Office
[email protected]
altosiq.com
EEA and UK users may also lodge complaints with their local data protection supervisory authority.