Privacy

Alon holds the work you put into it — your clients’ names and email addresses, your projects, files, messages and payment requests — so it can show them back to the right person. We do not sell it, we do not use it to train anything, and we do not send you marketing you did not ask for.

• Your account: the email address and name Google gives us when you sign in. Google is the only way to sign in, so we never hold a password for you.
• Your workspace: business name, logo and brand color.
• Your clients: the name and email address you enter for each client, so we can send them their portal link.
• Your work: projects, milestones, files you upload, messages in both directions, and payment requests.
• Basic usage data: anonymous page analytics through Vercel Analytics. No cookies for tracking, no advertising networks.

We do not collect card numbers or bank details. Payment requests carry a link to your own PayPal, Wise or GCash — the money moves between you and your client, never through Alon.

Data is stored in Supabase (Postgres and file storage) and the site runs on Vercel. Uploaded files sit in a private bucket and are only ever served through short-lived links that expire after about an hour. Every record is tagged to a workspace and the separation between workspaces is enforced in the database, not just in the app.

Only the services Alon needs to work:

• Supabase — database, authentication and file storage.
• Vercel — hosting and anonymous analytics.
• Resend— sending the notification and sign-in emails, which means the recipient’s address and the contents of that email.
• Paddle — our merchant of record for paid plans. Paddle handles the payment and holds the billing details; we only receive which plan you are on.
• Google — it verifies who you are when you sign in to your Alon account.

Your clients never create an account. We hold their name and email address because you entered them, and we use the address only to send their sign-in link and the notifications about your work together. A client can ask you or us to remove them at any time.

Delete a client or a project in the app and it goes. To delete your whole account and everything in it, email support@alonapp.com and we will remove it within 30 days. Backups roll off within 30 days after that.

If this policy changes in a way that matters, we will email account holders before it takes effect. Questions about any of it go to support@alonapp.com.