Privacy Policy

1. Personal Data We Collect

1.1 Information You Provide Directly

We collect Personal Data you choose to provide, such as when you:

• Create an account. Name, business email, password, company name, phone number, and billing details.
• Submit forms or request support. Contact details, the content of your messages, and any files you upload.
• Complete a transaction. Payment‑card number, expiration date, and billing address (processed by our payment processor—currently Stripe—on our behalf).
• Provide testimonials or participate in surveys. Any information you include in your responses.

1.2 Information We Process on Behalf of Customers

Our customers (suppliers and retailers) may upload to the Platform catalogs, inventory data, pricing, end‑customer shipping information, and other content that may include Personal Data. In such cases, Alcheme acts as a processor or service provider and processes that data only under the customer's instructions and the relevant data‑processing addendum ("DPA"). Our customers are responsible for ensuring that their collection and use of Personal Data comply with applicable law.

1.3 Information We Collect Automatically

When you interact with the Sites or Platform, we automatically collect:

• Usage Data. Log files, click‑stream data, device identifiers, browser type, operating system, referring URLs, pages viewed, and the date/time of each visit.
• Device Data. For mobile access: device type, OS version, app version, and advertising identifiers.
• Cookies & Similar Technologies. We and our partners use cookies, pixel tags, local storage, and similar tools to recognize you across sessions. See Section 6 for details.

1.4 Information from Third Parties

We may receive Personal Data about you from:

• Integration Partners. If you connect a third‑party service (e.g., Shopify, Amazon, or an ERP), we may receive account identifiers and authorized data.
• Marketing & Data Providers. Business‑profile data, including professional contact information.
• Public Sources. Information available in public registries, social‑media profiles, or company websites.

2. How We Use Personal Data

We use Personal Data for the following purposes:

• Service Delivery & Account Management. To provide, operate, maintain, and improve the Sites and Platform; to create and manage user accounts; to process transactions; and to provide customer support.
• Research & Development. To develop new features and improve the user experience, including by analyzing Platform usage and performance.
• Security & Abuse Prevention. To detect, prevent, and respond to fraud, abuse, security risks, and technical issues.
• Communications. To send administrative messages, service notifications, and information about changes to our terms, conditions, or policies.
• Marketing (with Consent or as Permitted by Law). To send promotional emails or display advertising about products, features, or Events that may be of interest. You can opt out at any time (see Section 7).
• Legal Compliance. To comply with applicable laws, regulations, court orders, or legal process, and to protect our rights, privacy, safety, or property and/or that of our affiliates, customers, or others.

3. How We Share Personal Data

We disclose Personal Data only as described below:

• Service Providers. Cloud hosting (AWS), analytics (Google Analytics), payment processing (Stripe), customer‑support tooling (Slack), artificial‑intelligence services (OpenAI), and similar providers that process Personal Data on our behalf and under contractual obligations of confidentiality and data protection.
• Partners. If you request a third‑party integration or authorize data sharing, we share the relevant data to fulfill that request.
• Corporate Transactions. In connection with a merger, acquisition, financing, due diligence, reorganization, or sale of assets, Personal Data may be transferred as part of the transaction, provided the recipient agrees to honor this Privacy Policy.
• Legal Requirements & Protection. To comply with subpoenas, court orders, or other legal process, or to protect the rights, property, or safety of Alcheme, our users, or the public.
• With Consent. We may share Personal Data for any other purpose disclosed to you with your consent.

We do not sell Personal Data to third parties for monetary consideration.

4. International Transfers

Alcheme is headquartered in the United States and uses service providers in multiple jurisdictions. Where we transfer Personal Data from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been deemed to provide an adequate level of protection, we rely on approved data‑transfer mechanisms, such as the European Commission's Standard Contractual Clauses.

5. Data Security & Retention

We employ administrative, technical, and physical safeguards designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure. No method of transmission or storage is 100 % secure; therefore, we cannot guarantee absolute security.

We retain Personal Data for as long as necessary to (i) provide the Services; (ii) comply with our legal obligations; (iii) resolve disputes; and (iv) enforce our agreements. Customer‑uploaded data is retained and deleted in accordance with the DPA and the customer's instructions.

6. Cookies & Similar Technologies

We use the following categories of cookies:

• Essential Cookies – required for basic platform functionality and security.
• Analytics Cookies – help us understand how visitors engage with the Sites.
• Functional Cookies – remember your preferences to personalize your experience.
• Advertising Cookies – deliver relevant ads (only where permitted by law).

You can control cookies through your browser settings and other tools. For more information, please see our Cookie Policy (link on the Sites).

7. Your Privacy Rights

Depending on your location, you may have the right to:

• Access, correct, update, or delete Personal Data we hold about you;
• Object to or restrict our processing of your Personal Data;
• Withdraw consent at any time, where processing is based on consent;
• Receive a portable copy of your Personal Data;
• Lodge a complaint with a supervisory authority.

To exercise your rights, email privacy@alcheme.ai. We may require you to verify your identity before responding.

8. California Privacy Notice

If you are a California resident, additional disclosures and rights under the California Consumer Privacy Act (CCPA), as amended, are set forth in our California Privacy Notice (link on the Sites).

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the revised policy on the Sites and, if we have your contact information, by sending you an email. The "Last updated" date at the end of this policy indicates when it was last revised.

10. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@alcheme.ai
• Postal: Renn Labs LLC d/b/a Alcheme, 901 Yamato Road, Suite 260, Boca Raton, FL 33431, USA

11. Acceptance of Terms

By accessing or using the Sites, Platform, or attending our Events, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your Personal Data as described in this Privacy Policy.