Alero Compliance Privacy Policy

Information We Collect

We may collect the following categories of information when reasonably necessary to evaluate, sell, deliver, support, secure, or document our services:

• Identifiers and contact information, including name, business email, telephone number, mailing address, IP address, and online identifiers.
• Business and registration information, including legal business or registrant name, entity type, business address, website, domain, EIN-consistency status, eligible sole-proprietor pathway status, industry, use case, campaign information, and authorized-representative details.
• Customer content and compliance records, including opt-in methods, consent language, policy URLs, sample messages, STOP and HELP wording, forms, screenshots, supporting records, approvals, correction requests, submission status, and handoff materials.
• Account and technical information, including GoHighLevel sub-account references, user-access status, configuration records, workflow and routing details, test results, device/browser information, and security or access logs.
• Commercial and transaction information, including selected package, payment status, transaction reference, refund or cancellation status, and customer-service history. Payment-card and bank details are generally processed by the applicable payment provider rather than stored directly by Alero Compliance.
• Communications, including inquiries, emails, calls, SMS messages, support requests, intake responses, approvals, and survey or feedback responses.
• Website and analytics information, including page visits, referring pages, device information, interactions, cookies, and similar technologies used for security, functionality, analytics, and permitted marketing.

Notice at Collection

At or before the point where a website, inquiry, consultation, intake, support, or checkout form collects personal information, Alero Compliance will provide a short notice describing the categories of information collected and the purposes for collection, together with a link to this Privacy Policy. The form notice will also identify whether the submitted telephone number may be used for service-related or optional marketing communications. Information collected through a form will be used for the purposes described in that notice and this policy, including responding to the request, evaluating package fit, administering the selected service, maintaining records, securing the service, and complying with law.

Sensitive Identifiers

Do not enter or send an SSN, password, recovery code, complete tax document, identification document, payment-card number, bank credential, or other sensitive identifier through an Alero Compliance public form, ordinary email, SMS, GoHighLevel notes, Monday.com, or similar project record. If a registration provider permits an eligible U.S. sole proprietor to register using a sensitive tax identifier, the customer must enter it directly through the provider’s approved secure process. Alero Compliance records only the status needed to perform and document the service and does not intentionally place the identifier in ordinary customer or project records.

How We Collect Information

• Directly from customers, authorized representatives, website visitors, and support requestors.
• From customer-authorized accounts, platforms, forms, websites, and business records.
• Automatically through website, security, analytics, communication, and account technologies.
• From service providers and independent platforms involved in payment, registration, messaging, delivery, identity verification, scheduling, hosting, or customer support.

How We Use Information

• Review inquiries, determine package fit, provide estimates, and communicate next steps.
• Create and manage customer, contact, opportunity, service, payment, and support records.
• Perform the selected Service Scope, including readiness review, audit, preparation, implementation, testing, submission assistance, corrections, status tracking, and handoff.
• Verify business or registrant consistency and document provider eligibility without retaining prohibited sensitive identifiers in ordinary systems.
• Process payments, cancellations, refunds, accounting records, and disputes.
• Send requested service communications, appointment messages, reminders, status notices, support responses, and legally required notices.
• Operate, secure, troubleshoot, test, improve, and measure our website, forms, workflows, and services.
• Prevent fraud, misuse, unauthorized access, security incidents, and prohibited messaging activity.
• Comply with law, enforce agreements, protect rights and safety, and establish or defend legal claims.

How We Disclose Information

We may disclose information only as reasonably necessary for the purposes described in this policy, including to:

Alero Compliance does not sell personal information for money. Mobile information will not be shared with third parties or affiliates for their marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be shared with third parties except service providers supporting delivery of the communications requested or authorized by the customer. Those service providers may use the information only to provide the contracted service or as required by law. If our practices change in a way that creates a legally defined sale or sharing obligation, we will update this policy and provide the required choices before applying the change.

• Service providers that support hosting, CRM, forms, scheduling, communications, analytics, document storage, security, payment processing, accounting, and professional services.
• GoHighLevel and connected technology providers when needed to operate the customer’s account and the approved service workflow.
• Carriers, registries, registration partners, messaging providers, and identity-verification providers when authorized or required for registration and service delivery.
• Professional advisers, auditors, insurers, regulators, courts, law enforcement, or other parties when reasonably necessary to comply with law or protect legal rights and security.
• A successor or transaction participant in connection with a merger, financing, reorganization, sale, or transfer, subject to appropriate confidentiality and legal requirements.

Cookies Analytics and Advertising

The website may use cookies and similar technologies for essential operation, security, preferences, analytics, and permitted marketing. Browser controls may allow you to block or delete cookies, but doing so may affect website functionality. Where required, we will provide additional consent or privacy-choice controls.

Browser Privacy Signals

Some browsers transmit Do Not Track signals, but no uniform industry standard currently governs every response to those signals. Where applicable law requires recognition of an opt-out preference signal, such as Global Privacy Control, Alero Compliance will process the signal as legally required. The effect of a signal may depend on the browser, device, jurisdiction, and technologies in use.

Communications and Consent

Service-related communications may be sent by email, telephone, or SMS using the contact information and permissions provided by the customer. Marketing consent is not a condition of purchasing a service unless expressly stated for a particular optional program. You may opt out of marketing email using the provided unsubscribe method and opt out of SMS by replying STOP. Transactional, security, account, and legal notices may still be sent when permitted by law.

Data Retention

We retain information only as reasonably necessary for service delivery, security, legal, accounting, dispute-resolution, and agreement-enforcement purposes. Our current operational retention schedule is:

We may retain information longer when required by law, reasonably necessary for fraud prevention, security, accounting, litigation hold, dispute resolution, or enforcement of agreements. Deletion from active systems may not immediately remove protected backups.

Security and Account Access

We use administrative, technical, and organizational safeguards designed for the nature of the information we handle. These may include least-privilege access, multi-factor authentication where available, secure transfer methods, access logging, staff procedures, vendor controls, and removal of temporary access after completion. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Privacy Choices and Requests

Depending on your location and applicable law, you may have rights to request access to, correction of, or deletion of personal information; receive information about collection and disclosure; opt out of certain sales, sharing, targeted advertising, or profiling; limit certain uses of sensitive information; and receive equal service when exercising privacy rights. These rights may be subject to legal exceptions and identity verification.

Submit a request through https://alerocompliance.com/support or email support@alerocompliance.com with the subject Privacy Request. Describe the request and provide enough non-sensitive information for us to identify the applicable record. Do not send sensitive identity documents unless we provide an approved secure method. We may verify the request and may decline or limit it when permitted by law. An authorized agent may submit a request when legally permitted and when authority can be verified.

California Disclosures

California law may provide additional privacy rights. Whether a particular statutory right applies depends on the applicable law and our status under that law. We will respond to verified requests and honor legally recognized browser-based privacy signals when required. Alero Compliance does not offer financial incentives in exchange for personal information unless separately disclosed in legally compliant terms.

Children

The services are intended for businesses and authorized adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13 through these services. Contact us if you believe a child provided information without appropriate authorization.

Third Party Services

Third-party websites, platforms, payment providers, carriers, registries, and customer-controlled GoHighLevel accounts operate under their own terms and privacy policies. Review those policies before providing information. Alero Compliance is not responsible for independent third-party privacy practices.

Changes to This Policy

We may update this policy to reflect changes in law, services, technology, or information practices. The revised policy will identify its effective date and version. Material changes will be communicated when required. We will review this policy at least annually and will not apply material changes retroactively when prohibited by law.

Contact Information

Alero Compliance is operated by AleroCore Technologies, Inc. Privacy questions and requests may be directed to support@alerocompliance.com, +1 888-983-1057, or 5757 W Century Blvd, Suite 120, Los Angeles, CA 90045.