Privacy Policy

Version 1.1 · Effective 30 September 2026

This policy explains how ALDER & CO. AI PTY LTD (ACN 702 027 067, ABN 72 702 027 067), which trades as "Alder Intelligence" ("Alder", "we", "us"), handles personal information. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. Whose information this covers

You, our user. When you or your team use Alder, we collect information about you. We decide how it is used, and this policy covers it.

Your customers. When a business uploads its sales data or connects an account (for example Shopify, Stripe or Google Sheets), that data contains personal information about the business's own customers. We handle it on behalf of that business, only to provide our service to them. The business decides what it uploads, is responsible for telling its customers and getting any consent it needs, and is the first place those customers should go with a privacy request. If a customer contacts us directly, we will pass the request to the business and help it respond. If the business does not respond within 30 days, contact us again and we will deal with your request as the law requires.

Other people.

• Website visitors: your IP address and browser details, kept in server logs for a short time to keep the site secure.
• People who contact us or ask for an account: your name, work email, company, website, what you sell, and what you tell us.

Alder is for businesses and is not meant for anyone under 18. We do not knowingly collect children's information from users. Businesses should not upload information about children for marketing.

You can ask us general questions without giving your name, but we need your details to set up an account.

2. What we collect about our users

• Account details: your name, email address, company name and your role in your team.
• Sign-in and security: your password (stored only in scrambled, one-way form), your two-step verification set-up, when you sign in, your IP address and browser.
• What you do in Alder: actions such as uploads, exports, changes to settings and campaigns sent, recorded in an activity log so your team can see who did what.
• Support: messages you send us.
• Billing: your subscription and payment history. Card details are handled by Stripe; we never see or store your card number.

3. What we handle about your customers

Depending on what a business uploads or connects: names, email addresses, phone numbers, addresses and postcodes, order history, products bought, and whether the person agreed to receive marketing.

Information we create. Alder works out new information about a business's customers, such as how likely they are to buy again, what they may spend, and which group they belong to. We treat this as personal information too.

Health information. Alder is not designed to hold health information, meaning information that shows or suggests a person's health or the health products they buy. We ask businesses not to upload it, including product categories that reveal a condition. Where we have agreed in writing with a business to handle limited health-related information, we use it only for that business, protect it as sensitive information, and do not use it to choose who receives marketing unless the person has agreed.

4. How we collect and hold information

How we collect it:

• From you, when you sign up, use Alder, contact us or ask for an account.
• From your team, when an owner or admin invites you (they give us your name and email).
• Automatically, when you use Alder or our website (for example your IP address, browser and sign-in times).
• From a business's systems, when it uploads files or connects Shopify, Stripe or Google Sheets.
• By creating it, as described in section 3.

How we hold it: electronically, on servers run by our service providers (listed in section 7). Most of it is stored in Australia. We do not keep paper records of customer data.

5. How we use it

• To run the service: sign-in, analysis, reports, and sending the emails and texts a business asks us to send.
• To keep Alder secure: spotting suspicious sign-ins, recording staff access, and investigating problems.
• To support you and bill your subscription.
• To tell you about your account, for example a finished campaign or a billing problem. You can turn off our weekly summary email in your settings.
• To improve Alder, using statistics that combine many businesses' data and that we have de-identified so they cannot reasonably be linked back to any business or person.
• To meet our legal obligations and respond to lawful requests.

We do not sell personal information, and we never use a business's customers' information for our own marketing.

We may email you about new Alder features. You can unsubscribe from these at any time using the link in the email. This does not affect emails about your account.

6. Artificial intelligence

Alder uses OpenAI, in the United States, to help write campaign text, insight notes and images.

We send calculated figures such as group totals, plus product names and categories and the business's tone of voice. We never send customers' names, email addresses, phone numbers or customer IDs.

OpenAI does not use this data to train its models. It may keep it for up to 30 days to check for misuse, then deletes it.

7. Who we share it with

We use service providers to run Alder. They may only use the information to provide their service to us.

If a business chooses to connect Google Sheets, Shopify or Stripe, data is read from that service into Alder.

We may also disclose information where the law requires it.

8. Overseas disclosure

Most information is stored in Australia. Some is sent overseas to the providers listed above, in the United States and Germany, and for payments the other countries Stripe lists. We take reasonable steps to make sure they protect it in line with the Australian Privacy Principles.

9. Automated decisions

Some things in Alder happen automatically, using computer programs:

• About our users: Alder may automatically slow down or block sign-ins that look suspicious, and pause sending and AI features if a payment fails. These use your sign-in details, IP address, browser and billing status. You can contact us to have a person review any of these.
• About a business's customers: Alder uses order history (what was bought, when, and how much was spent), and any marketing preferences, to estimate how likely each customer is to buy again, what they may spend, and which group they fit. The business uses these results to decide who to send offers to and what to offer. Alder automatically stops messages to anyone who has not agreed to marketing or has unsubscribed.

A business can explain to its own customers how it uses these results.

10. How long we keep it

When a business deletes a customer in Alder, we remove that person from the business's customer lists, analysis and future campaigns straight away. Copies may remain for a short time in:

• database backups, which are deleted automatically within 7 days;
• original files the business uploaded, until the business deletes or replaces them;
• records of messages already sent, kept for 2 years so the business can show who it contacted and that unsubscribes were honoured.

We do not use these copies for anything else.

11. Keeping it secure

We protect information with encryption when it is stored and sent, and each business's data is kept separate using database controls designed so one business cannot see another's. Every user must use two-step verification. Our staff can only access a business's data through a time-limited, recorded process, and the business is told when it happens.

If your information is involved in a data breach that is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC).

12. Seeing and correcting your information

You can ask to see the personal information we hold about you, or ask us to correct it. Email info@aldernco.ai (subject "ATTN: Privacy").

• We will check who you are before giving you information.
• It is free to ask. We will only charge a reasonable fee to provide very large amounts of information, and will tell you first.
• We will reply within 30 days.
• If we refuse, we will explain why in writing and tell you how to complain.
• If we correct information we have given to someone else, you can ask us to tell them.

13. Complaints

Email us at info@aldernco.ai and explain what happened. We will confirm we have received it within 5 business days, look into it, and give you a written answer within 30 days. If it will take longer, we will tell you why and when to expect an answer. If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992.

14. Cookies

We use only cookies Alder needs to work, such as keeping you signed in, plus cookies set by Stripe to prevent payment fraud when you pay. We do not use advertising or analytics cookies.

15. Changes to this policy

When we change this policy we will update the version and date above, and email account owners before a significant change takes effect. Earlier versions are kept on our website. Ask us for a copy of this policy in another format and we will provide it free.

Contact us

Privacy Officer, ALDER & CO. AI PTY LTD (ACN 702 027 067), trading as Alder IntelligenceEmail: info@aldernco.ai. For privacy matters, it helps to start the subject line with "ATTN: Privacy", but you do not have to.Postal address: provided on request.We read this inbox every business day.