Privacy Policy
Last updated: March 2026
Authority Ally ("we", "us", "our") operates authorityally.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
1. Information We Collect
Account information
- Name, email address, and password when you sign up
- Profile information you provide: job title, company, industry, bio, writing samples, authority goals, content pillars
Usage data
- Posts you generate, save, or publish via the Service
- Content planner entries and scheduled posts
- Number of generations per month (for usage limits)
- Settings and preferences you configure
LinkedIn data (if you connect your account)
- LinkedIn access token (used to publish on your behalf)
- LinkedIn person ID
- We do not store your LinkedIn password
Payment data
- Subscription plan and billing status
- We do not store card numbers — payments are handled entirely by Paddle
Technical data
- IP address, browser type, and device information collected automatically
- Log data such as pages visited and features used
2. How We Use Your Information
- To provide and operate the Service
- To generate AI content personalised to your voice and goals
- To enforce usage limits based on your subscription tier
- To send transactional emails (account creation, usage alerts)
- To detect and prevent abuse or fraud
- To improve the Service (aggregate, anonymised analytics only)
We do not sell your personal data to third parties.
3. AI Processing
When you generate content, your profile context and generation inputs are sent to third-party AI providers (Anthropic, OpenAI, and/or Google) to produce the output. These providers process your data under their own privacy policies and data processing agreements. We minimise what is sent — only what is necessary for content generation.
4. Third-Party Services
- Supabase — database and authentication hosting
- Paddle — payment processing and subscription management (Merchant of Record)
- Anthropic, OpenAI, Google — AI content generation
- LinkedIn — OAuth authentication and post publishing (when you connect)
- Resend — transactional email delivery
Each provider processes data under their own privacy policies and applicable data protection regulations.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., billing records retained for accounting purposes for up to 7 years).
Generated posts are retained until you delete them or close your account.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Data portability (receive your data in a machine-readable format)
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact us at hello@authorityally.com. We will respond within 30 days.
7. Cookies
We use essential cookies to maintain your login session. We do not use tracking or advertising cookies. Third-party services (Paddle, Supabase) may set their own cookies subject to their respective policies.
8. Security
We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, and row-level security on our database. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
9. Children
The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the Service. The updated policy will include the revised "last updated" date above.
11. Contact
For privacy questions or to exercise your rights, contact us at: hello@authorityally.com