Privacy Policy

1. Introduction

The privacy and security of your data is foundational to Alder. We take this responsibility seriously and aim to make this policy clear and easy to understand so you know exactly how your data is handled and what your rights are.

This Privacy Policy applies to all software products and websites operated by Viridian Technologies, LLC. (“we”, “us”, “our”) (collectively, the “Services”).

This policy describes how we collect, use, process, store, and share your data. We will never sell your data.

By using our Services, you agree to the practices described in this policy.

2. Data Collection and Usage

We collect and use data only to provide and improve the Services.

We do not sell your personal information.

2.1 When you create an account

We may collect:

• Name
• Email address
• Password (stored securely as a hash)
• Profile image (if provided)
• IP address
• Company name
• Country
• Use case or onboarding information

We use this data to:

• Create and manage your account
• Provide access to the Services
• Send transactional emails (e.g. login, password reset)
• Provide customer support
• Monitor system performance and errors
• Prevent fraud and abuse
• Improve the product

You may opt out of non-essential communications at any time.

2.2 When you use the Services

You may input content into Alder such as:

• Documents (e.g. PRDs, specifications)
• Descriptions of work
• Technical decisions
• Plans and generated outputs

This content (“User Content”) is:

• Stored securely in our systems
• Used to provide core product functionality (e.g. generating plans and recommendations)
• Processed within our infrastructure for logging, debugging, and performance monitoring
• Used in aggregated and anonymized form to improve the product

We retain logs of system interactions (including inputs and outputs) within our infrastructure for reliability, debugging, and product improvement purposes.

2.3 AI and LLM Processing

We use artificial intelligence, including large language models (“LLMs”), to generate outputs based on the information you provide.

When you use AI-powered features:

• Your inputs (including User Content) may be transmitted to third-party AI providers to generate outputs
• These providers may temporarily retain data as part of providing their services
• We do not control all aspects of third-party retention policies, but we select providers that offer strong privacy and security commitments

We may also:

• Process and store prompts and outputs within our own infrastructure for debugging, monitoring, and improving system performance
• Use aggregated and anonymized data to improve our models, systems, and product features

We may develop and train internal models or systems in the future using data that has been anonymized or aggregated.

Important considerations:

• AI-generated outputs may be inaccurate or incomplete
• You are responsible for reviewing and validating outputs before use
• You should avoid including highly sensitive information unless appropriate for your use case

2.4 When you become a customer

If you subscribe to a paid plan, we may collect:

• Billing address
• Payment information

Payment data is:

• Processed and stored by a PCI-compliant payment provider
• Not stored directly on our servers

We use this information to:

• Process payments
• Prevent fraud
• Comply with tax obligations

2.5 When you visit our website

We automatically collect:

• IP address (used for approximate location)
• Device and browser information
• Pages visited and usage behavior

We use this data to:

• Analyze usage and improve performance
• Detect abuse or security issues

2.6 When you contact us

If you contact us, we may collect:

• Name
• Email
• Company
• Message content

This is used to:

• Respond to your inquiry
• Provide support

2.7 Information we do not intentionally collect

We do not intentionally collect sensitive personal data such as race, religion, sexual orientation, or health information.

If you include such data in User Content, it will be processed as described in this policy.

2.8 Children's data

Our Services are not intended for individuals under 16. We do not knowingly collect data from children.

2.9 How we share your information

We do not sell or rent your data.

We may share data with trusted third-party providers to operate the service, including:

• Hosting and infrastructure providers
• Payment processors
• Analytics providers
• AI/LLM providers

We may also disclose data:

• If required by law
• To comply with legal processes
• To protect the security and integrity of the Services

2.10 Business Transfers

If Alder is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction.

In such cases, we will take reasonable steps to ensure that your data continues to be treated in accordance with this Privacy Policy.

3. Your Data Rights

You have the right to:

• Access your data
• Correct inaccurate data
• Delete your data
• Restrict processing
• Export your data
• Object to certain uses

If you request deletion, we will delete your data within 30 days, subject to legal obligations.

4. International Data Transfers

Alder is based in the United States. Your data may be processed in the U.S. and other countries.

5. Data Retention

We retain data only as long as necessary to provide the Services and comply with legal obligations.

When you delete your account, your data is deleted within 30 days.

6. Updates to This Policy

We may update this policy from time to time. Continued use of the Services indicates acceptance of the updated policy.

7. Contact

If you have questions, contact us at: