Terms of Service

1. Who these terms are between

These Terms of Service ("Terms") are an agreement between iGlomart LLC, a Delaware limited liability company trading as Allinaa ("Allinaa", "we", "us"), and the person or organisation that uses our website or our services ("you", "Customer").

They cover:

• the website www.allinaa.com;
• the Allinaa Bot chatbot service at bot.allinaa.com, including the embeddable chat widget, the customer cabinet at /manage and /cabinet, and the connected messaging channels; and
• our localization and lead generation services, where you order them.

By using the website, by signing up for Allinaa Bot on our sign-up page, by signing in to a panel, by embedding the widget, or by accepting a written offer from us, you agree to these Terms. Our Privacy Policy and Data Deletion Instructions form part of them.

If you are using the service on behalf of a company, you confirm that you are authorised to bind that company, and "you" means that company.

2. Who may use the service

• You must be at least 18 years old and have legal capacity to enter a contract.
• Allinaa Bot is a business tool, sold to businesses and organisations. It is not a consumer product.
• You must not use the service if applicable sanctions or export control laws prohibit us from supplying you.
• The service must not be directed at children. You must not configure the chatbot for an audience of children or aim it at anyone under 16 in the EEA and the UK, or under 13 in the United States.
• People who chat with a chatbot you run are your customers, not ours. They are not party to these Terms.

3. What we provide

Allinaa Bot is a hosted AI assistant for your business. Depending on your plan it can:

• answer visitors' questions on your website from the business information you have approved;
• ask short clarifying questions and capture inquiries, with the visitor's permission;
• e-mail new inquiries to you and a confirmation to the visitor;
• give you an inbox with status, private notes, search and CSV export;
• accept photos, screenshots and documents from your customers (Premium);
• take bookings into a Google Calendar and write leads to a Google Sheet, both set up with the Allinaa team (another CRM only if we agree it with you in writing), hand a conversation to a person, track service issues, draft quotes from your approved prices, send follow-up e-mails, and produce daily, weekly and monthly reports (Premium);
• bring conversations from channels you connect — today your own Telegram bot, with further providers, including an e-mail mailbox, as each platform grants access and we confirm the channel for your account — into one inbox (Premium);
• draft replies to comments and reviews on connected public channels, which are published only after a person at your business approves them (Premium).

There is no setup fee for the AI chatbot. You set your assistant up yourself on our sign-up page and add it to your website with our install guides, and our team helps you if you need it (see section 5.3). On Premium, bookings into a Google Calendar and leads to a Google Sheet are connected with the Allinaa team at no extra charge. Features marked Premium are available only on the Premium plan, and some depend on a third-party platform granting access to your account (see section 8).

4. Plans and published prices

The prices below are the prices published on our website at the date of these Terms. The AI chatbot prices are fixed monthly prices with no setup fee. The Localization and Lead generation prices are starting prices: the final price is agreed with you in writing before work starts. Prices are in US dollars and exclude any taxes that may apply.

The monthly chatbot fee starts when we activate your service in writing — not when you sign up or set your assistant up, and not when you switch it on yourself in the free trial. Additional usage or work beyond what is included is agreed with you in advance and is never billed automatically.

4.1 Free trial

• You can create an assistant yourself on our sign-up page and try it free for 14 days. No fee, no card, no invoice.
• The trial includes 200 AI replies in total, on either plan. Your inquiry form, your inquiry inbox and your e-mail notifications work throughout.
• Setting the assistant up and switching it on during the trial is free and is not the "launch" or "activation" that starts a monthly fee. Only an activation agreed with us in writing does that.
• The monthly performance report and the monthly knowledge-maintenance minutes of section 5 are not part of the trial: they start with the paid service period.
• We may extend or end a trial at our discretion, for example where it is being abused. When a trial ends, the assistant stops generating AI replies and the chat keeps offering your inquiry form, so you keep receiving requests. Nothing of yours is deleted.
• During a trial you may cancel the service yourself in your cabinet at any time.

5. Included allowances and limits

5.1 Standard chatbot

• 2,000 AI replies per monthly service period. A reply counts once when it is successfully delivered to a visitor. Retries, failures, internal tool calls (such as form pre-fill or correction checks), restored history and templated e-mails do not count. Starting a new conversation does not reset the count.
• When the allowance is reached, the chatbot stops generating AI replies and falls back to the inquiry form. Contact capture keeps working.
• Three configured languages — American English by default plus two more. Where our team sets your assistant up, we configure and test them for you; where you set it up yourself in the sign-up wizard, you choose them there and our team changes them for you afterwards.
• Up to 120 minutes of human maintenance per period (knowledge updates and answer improvements). Work beyond that requires a recorded prior agreement and is never billed automatically.
• Installed on one website.

5.2 Premium chatbot

• All supported languages, with no language limit. New languages we add become available automatically.
• No monthly cap on AI replies.
• Team accounts with roles (owner, administrator, operator) for up to 5 people, including the owner.
• Per-connection limits protect you and us against floods and runaway costs. The defaults are 300 AI replies per channel connection per day and 20 AI replies per sender per 10 minutes; you can change them in your cabinet within the ranges the cabinet shows. Messages beyond a limit are still stored and flagged for a person.
• File uploads are limited to 10 MB per image and 15 MB per document, with daily quotas per visitor and per business, and accepted types as listed in our Privacy Policy.

5.3 Support

Our target for a first response to a support request is one business day, on Standard and Premium alike. This is a service target, not a contractual service level agreement, and we do not offer an uptime guarantee or service credits.

6. Billing, taxes and refunds

• The AI chatbot has no setup fee.
• Monthly fees are invoiced per monthly service period. The first period starts when we activate your service in writing (not when you finish setup or switch your assistant on in a free trial), and fees are payable on the terms stated on the invoice.
• Prices exclude sales tax, VAT, withholding tax and similar charges. Where such a charge applies, it is yours to pay.
• Fees are not refundable for a period that has already started, except where the law requires a refund. If you cancel, the service runs to the end of the paid period.
• If an invoice is unpaid, we may suspend the service after giving you notice by e-mail (see section 15).
• Third-party fees charged to you directly by a messaging platform are not part of our fees. See section 8.

7. Your obligations as a business customer

These obligations are central to the agreement. We cannot run a compliant AI assistant for you unless you meet them.

7.1 Lawful use and your end-customers

• You use the service lawfully and in line with all laws that apply to you, including privacy, consumer protection, advertising and electronic communications law.
• You are the controller of your customers' personal data. You must have a lawful basis for every conversation you run through the service, publish your own privacy notice, and obtain any consent that the law requires — including consent for the contact details your customers give the chatbot and for any follow-up e-mails you enable.
• You must tell your customers that an automated assistant answers on your behalf, where that is not obvious. On a connected messaging channel this is your obligation, not ours: a person who messages your Telegram bot, your WhatsApp number, your page or your mailbox never sees our website, so you must tell those customers that an automated assistant answers, that their message is processed by an AI provider as described in our Privacy Policy, section 8, and how to reach your own privacy notice — and you must give them a way to ask for a person instead. Where a platform requires explicit, revocable consent for data a user submits to a bot (Telegram's Bot Developer Terms do), obtaining and recording it is yours to do.
• You must not use the service to send unsolicited marketing, cold outreach or bulk messages through a connected messaging channel. The service does not offer business-initiated cold messages on any channel, and you must not attempt to work around that.
• You must respond to your customers' privacy requests. We will help: see our Data Deletion Instructions.

7.2 Your knowledge base and content

• You are responsible for the accuracy, completeness and legality of the business information, prices, availability, policies, product catalog and other content you give us to answer from. The assistant answers from that content; if it is wrong, the answers will be wrong.
• You must keep your information up to date and tell us when prices, availability or policies change.
• You confirm you hold the rights to the content you supply, and that it does not infringe anyone's rights.
• You must not place in the knowledge base, or invite your customers to send, special category data (health, biometric, political, religious or similar), government identifiers, payment card numbers or account credentials. The service is not designed for that data and is not a HIPAA-compliant platform.

7.3 Accounts and access

• Keep your sign-in credentials confidential; you are responsible for what is done with your accounts.
• Grant panel access only to people who need it, and revoke it when they leave.
• Tell us promptly if you suspect unauthorised access.

7.4 Replies you publish

• A reply posted publicly on a comment or review channel is published only after a person at your business approves it. Once approved, that reply is your statement, published in your name, and you are responsible for it.
• The same applies to a reply your team sends from the inbox.

8. Connected messaging channels and provider fees

8.1 Each platform's own rules apply to you

When you connect a channel, you also enter a relationship with that platform. You must comply with that platform's terms, developer policies and messaging rules, including (as applicable) the Meta Platform Terms and WhatsApp Business Messaging Policy, the Telegram Bot Developer Terms, the Google API Services User Data Policy and YouTube Terms of Service, the LinkedIn, X, TikTok, LINE, Viber, WeChat, Discord, Slack and Microsoft Teams developer and platform terms. If a platform suspends or restricts your account, our service for that channel stops working, through no fault of ours.

YouTube. By connecting or using the YouTube comments channel, you — and the users of that channel — agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of personal data is described in the Google Privacy Policy (https://policies.google.com/privacy). The same applies to the Google Business Profile reviews channel, which uses Google APIs under the Google API Services User Data Policy.

Meta. For Meta channels we act as a Tech Provider under the Meta Platform Terms: we process Meta Platform Data only at your direction, we act on your deletion requests, and we pass on to you any communication Meta sends us about a user's data request. The Meta app behind those channels belongs to iGlomart LLC.

8.2 You supply your own credentials

For most channels you connect your own account — your own Telegram bot token, your own mailbox, your own page or profile. You confirm you are authorised to connect that account. We store those credentials encrypted and delete them when you disconnect.

8.3 Availability is not guaranteed

8.4 Fees charged by the platform, not by us

Some platforms bill you directly. Those fees are yours, they are not included in our prices, and we do not mark them up or collect them. Examples, based on each platform's own published terms:

• WhatsApp: Meta bills the business per delivered message. Template messages (marketing, utility, authentication) have been charged since 1 July 2025, and since 1 October 2026 a service reply — a free-form message sent by a person or by a third-party AI inside the 24-hour customer service window — is charged per delivered message at the same per-market rate, with no volume tiers. Messages inside the 72-hour free entry point window that follows a click-to-WhatsApp ad remain free. Rates depend on your market and are set by Meta; check Meta's current rate card before you launch.
• Viber: a commercial bot agreement with Rakuten Viber. Viber's Bot commercial model page and rate card state a maintenance fee of around EUR 115 per bot per calendar month, unless Viber agrees otherwise in writing (an older Viber FAQ page still shows EUR 100), plus a per-message charge for chatbot-initiated messages sent outside a 24-hour session. Messages inside a session are included.
• WeChat: Tencent charges around US$99 per verification review for an overseas entity.
• LINE: replies within the free reply window are free; pushes count against your LINE account's plan quota.
• Your e-mail channel: your own mailbox plan.

Your cabinet shows the units and categories that a provider bills to you, where the provider reports them. Where a provider does not report an amount, we show the units and the billing category and leave the amount blank rather than guess.

Some providers bill us instead (for example X charges per direct-message event). Where a channel's cost falls on us, we may require a separate written agreement, an add-on fee, or we may decline to enable that channel for your account.

8.5 Public channels need your approval

Replies to comments and reviews are never posted automatically. The assistant may draft; a person at your business approves or edits before anything is published. For LinkedIn, AI drafting is disabled entirely and replies must be written by a person, because LinkedIn's developer policy forbids AI-written replies to member content.

9. What we do not guarantee

In addition, and to the fullest extent permitted by law:

• The service is provided "as is" and "as available". We disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.
• We do not guarantee uninterrupted or error-free operation, and we offer no uptime commitment or service credits. Maintenance, deploys and third-party outages can interrupt the service.
• We do not guarantee any business outcome: a number of leads, a conversion rate, a search ranking, a response from a prospect, or revenue.
• We do not guarantee that a third-party platform, AI model provider or hosting provider will keep offering, or keep the same terms for, the features we build on.
• The assistant gives no professional, legal, medical, financial or tax advice, and must not be configured to do so.
• Our built-in file checks reduce risk but are not antivirus software, and antivirus scanning runs only where it has been configured on the server. We do not warrant that a file your customer sends is safe.
• We do not operate encryption at rest for the database or for uploaded files. If your business requires it, do not process data with us until we have agreed that in writing. The details are in our Privacy Policy, section 17. One case you cannot waive for us: Telegram's Bot Developer Terms require a third-party application to encrypt user data at rest and to hold the key separately, and we do not meet that requirement today (Privacy Policy, section 20.3). Your agreeing to use the service does not satisfy that requirement on Telegram's behalf; Telegram may act against the bot or the application. Take it into account before you connect a Telegram bot.
• Localization: machine-translated material is marked as such; human review covers only the languages stated in your order. Lead generation: contacts are sourced and contacted lawfully, but we cannot guarantee the accuracy of third-party contact data or any reply.

10. Acceptable use

You must not, and must not allow anyone else to:

• use the service for anything unlawful, deceptive, defamatory, harassing, hateful or sexually exploitative, or to harm anyone;
• impersonate another business or person, or operate a chatbot that hides that it is automated in a way that misleads your customers;
• send spam, unsolicited bulk messages, phishing, malware or scam content through any channel;
• attempt to extract our prompts, keys, model configuration or other customers' data, or to break tenant isolation;
• probe, scan or attack our systems, bypass a rate limit or usage allowance, or interfere with other customers' use;
• use the service to build a competing dataset or to train a machine-learning model, or to scrape a messaging platform;
• resell, sublicense or provide the service to a third party as your own, unless we have agreed that in writing;
• collect special category data, government identifiers, payment card data or credentials through the chatbot;
• run the chatbot for a sector or purpose that a platform you connect prohibits.

We may enforce these rules by suspension (see section 15), and a serious breach may be reported to the relevant platform or authority.

11. Data protection and roles

• For your end-customers' data — conversations, inquiries, files, channel messages — you are the controller and we are your processor. We process it only to provide the service, on your instructions, as described in our Privacy Policy, which sets out the data we hold, our retention and our sub-processors.
• For your account data and for visitors to our own website, we are the controller.
• The Data Processing Addendum in Annex 1 applies to every customer by default and forms part of these Terms. It contains the terms a controller must agree with its processor under Article 28(3) of the GDPR and the UK GDPR, with Annex I (the categories of data and data subjects) and Annex II (the security measures). You do not need to sign anything separately for it to apply; if you want a countersigned copy, or provider-specific transfer terms, write to info@allinaa.com.
• We use the sub-processors listed in the Privacy Policy, and you give us general authorisation to use them. Before we add a new sub-processor that processes your customers' personal data, we will tell you at least 30 days in advance by e-mail, and you may object in that period on reasonable data-protection grounds; if we cannot resolve your objection, you may terminate the affected part of the service without penalty and we will refund any prepaid fee for service you will not receive.
• For Meta channels we act as a Tech Provider under the Meta Platform Terms, as described in section 8.1.
• We will notify you without undue delay if we become aware of a personal data breach affecting data we process for you.
• Deletion and export requests are handled as described in the Data Deletion Instructions. Note that there is no self-service delete or export in the product today: our staff carry out those requests.
• We do not use your conversations, files or contacts to train AI models. What we know, and what we require of our AI provider, is stated in the Privacy Policy, section 8.

12. Intellectual property

• Ours. The Allinaa software, the widget, the panels, our prompts, documentation, designs and the Allinaa name and logo remain our property. You receive a non-exclusive, non-transferable right to use the service during your subscription, for your own business. Nothing here transfers ownership of the software to you.
• Yours. Your business information, knowledge base, catalog, logos, content and your customers' data remain yours. You grant us the licence we need to host, process and display that content in order to provide the service, including sending the parts described in the Privacy Policy to our AI provider for the purpose of generating a reply.
• Output. Replies the assistant generates for your business are yours to use. We make no claim to them, and we cannot warrant that an AI-generated text is original or free from third-party rights.
• Feedback. If you send us suggestions, we may use them without obligation to you.
• References. We may name you and show your logo as a customer only with your written permission.

13. Limits on our liability

To the fullest extent permitted by law:

• Neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, lost revenue, lost business, lost goodwill, or loss or corruption of data, however caused, even if the party was advised that such loss was possible.
• Our total aggregate liability under or in connection with these Terms, whether in contract, tort (including negligence) or otherwise, is limited to the total fees you paid us for the service concerned in the 12 months immediately before the event giving rise to the claim. Where you have paid us less than US$500, our aggregate liability is limited to US$500.
• We are not liable for loss caused by: content you supplied or approved; a reply you published; your failure to obtain a consent or to meet a platform's rules; an act, outage, policy change, suspension or fee of a third-party platform, AI model provider, hosting provider or network; or your own configuration choices in the panel.
• These limits do not apply to liability that cannot lawfully be limited — for example fraud, fraudulent misrepresentation, wilful misconduct, death or personal injury caused by negligence, or a party's payment obligations.
• If mandatory consumer or local law gives you rights that these Terms cannot restrict, those rights stand and the rest of this section applies to the extent permitted.

14. Your indemnity

You will defend and indemnify us against third-party claims, and against fines, damages and reasonable legal costs arising from them, where the claim results from:

• your content, knowledge base, catalog or the replies you published;
• your failure to have a lawful basis or a required consent for your customers' data, or to provide your own privacy notice;
• your breach of a messaging platform's terms or of section 10 (acceptable use);
• your infringement of a third party's intellectual property or other rights; or
• your use of the service in breach of law.

We will tell you promptly about such a claim, let you control the defence (subject to our approval of any settlement that affects us), and cooperate reasonably at your cost.

15. Suspension and termination

• You may cancel at any time by writing to info@allinaa.com. The service runs to the end of the paid period; fees for that period are not refunded.
• We may suspend the service, a feature, or a single channel connection, in whole or in part, where: an invoice is overdue; we reasonably believe the service is being used in breach of section 7 or 10; a third-party platform requires it; or continued operation would create a security, legal or cost risk to you, to us, or to another customer.
• Except in an emergency or where a platform requires immediate action, we will give you notice by e-mail before suspending and, where it is reasonable, a chance to put the problem right.
• Where Allinaa staff suspend a single channel connection, the connection is held in "off" mode and you cannot switch it on again until we resume it. The reason is recorded and you are told by e-mail.
• We may terminate for a material breach you have not cured within 15 days of written notice, or immediately for a serious breach of section 10. Either party may terminate for convenience with 30 days' written notice; if we terminate for convenience we refund any prepaid fee for service you have not received.
• After termination we stop processing, and your panel access ends. Your stored data is not deleted automatically, so tell us what you want done with it. On termination we delete or return all personal data we processed for you within 60 days, except records we must keep by law; you may ask for an export at any time before deletion. Neither this clause nor any time window in it limits a request made by one of your customers directly to us, or anyone's right to erasure under data protection law — those are handled on the timelines in the Data Deletion Instructions, whenever they are made. Records we must keep by law, and our own billing and security records, are kept as described in the Privacy Policy.
• Sections 11 to 14, 17 and 18 survive termination.

16. Changes to the service and to these terms

• We improve the service continuously and may add, change or retire features. We will not materially reduce a feature you pay for during a paid period without telling you first.
• We may change these Terms. The date at the top shows the last update. For a material change we will e-mail account holders at least 30 days before it takes effect. If you do not accept a material change, you may cancel before it takes effect and we will refund any prepaid fee for service you will not receive.
• We may change prices for a renewal period with at least 30 days' notice. The price for a period you have already paid does not change.

17. Governing law and disputes

• These Terms and any dispute arising from them are governed by the laws of the State of Delaware, United States of America, excluding its conflict-of-laws rules and excluding the United Nations Convention on Contracts for the International Sale of Goods.
• The state and federal courts located in Delaware have exclusive jurisdiction, and each party consents to the personal jurisdiction of those courts and waives any objection to venue there.
• Each party waives any right to a jury trial and will not bring a claim as a class or representative action, to the extent permitted by law.
• Before filing a claim, please write to info@allinaa.com and give us 30 days to resolve the matter.
• If mandatory law in your country gives you the right to bring a claim in your local courts, that right is not affected.

18. General

• Entire agreement. These Terms, together with the Privacy Policy, the Data Deletion Instructions and any written offer or order we have both accepted, form the whole agreement on their subject matter. Where a signed written offer conflicts with these Terms, the signed offer wins for that customer.
• No waiver. If we do not enforce a provision, we do not waive it.
• Severability. If a provision is unenforceable, the rest stands.
• Assignment. You may not assign these Terms without our written consent. We may assign them to an affiliate or in connection with a merger, acquisition or sale of assets.
• Independent parties. Nothing here creates a partnership, agency or employment relationship.
• Force majeure. Neither party is liable for a failure caused by an event outside its reasonable control, including a third-party platform outage or policy change, provided it acts reasonably to limit the effect.
• Notices. We give notice by e-mail to the address on your account. You give notice to info@allinaa.com.
• Language. These Terms are written in US English. A translation is for convenience only; the English version governs.

19. Contact

---

Annex 1 — Data Processing Addendum

This Addendum forms part of the Terms and applies to every customer whose end-customers' personal data we process, without a separate signature. Where it conflicts with the rest of the Terms on the processing of that data, this Addendum wins. "Controller", "processor", "personal data", "processing", "data subject" and "personal data breach" have the meanings given in the EU General Data Protection Regulation (GDPR) and, where it applies, the UK GDPR.

A1. Roles and subject matter

• You are the controller of your end-customers' personal data; Allinaa is your processor for it. For your own account data and for visitors to www.allinaa.com, Allinaa is the controller and this Addendum does not apply.
• Subject matter: providing the Allinaa Bot chatbot service and the related services you have ordered, as described in these Terms and in the Privacy Policy.
• Nature and purpose of the processing: receiving, storing, displaying and searching conversations, inquiries, bookings, problem reports, quotes, follow-ups, files and channel messages; generating replies, summaries, drafts and reports with the AI sub-processor; sending notification and acknowledgement e-mails and channel replies; and operating, securing and supporting the service.
• Duration: from the start of your subscription until it ends, plus the deletion or return period in A8.
• Your instructions. These Terms, the Privacy Policy and the configuration you choose in your cabinet are your documented instructions to us. Anything beyond them requires a written instruction, and we may charge for work that is not covered by your plan. We process your end-customers' personal data only on those instructions and never for our own purposes.

A2. Our obligations as your processor

• Purpose limitation. We process the personal data only to provide the service on your instructions, and not for any purpose of our own. We do not sell it, and we do not use it to train, fine-tune or evaluate any AI model.
• Confidentiality of personnel. Every Allinaa person who can access the personal data is subject to a duty of confidentiality that survives the end of their engagement, is authorised individually, and may reach a business's customer content only through the time-limited, reason-recorded support-access grant described in the Privacy Policy, section 9 — with the single documented exception of the server-local maintenance token named there.
• Security. We implement the technical and organisational measures in Annex II, taking account of the state of the art, the cost of implementation and the risk. We tell you in Annex II, and in the Privacy Policy, which measures we do not have, so you can decide before you launch.
• Sub-processors. You give us general authorisation to use the sub-processors listed in the Privacy Policy. We impose on each of them, by written contract or by accepting their own written data processing terms, data protection obligations that are no less protective than those in this Addendum, and we remain responsible to you for their performance. Before we add a new sub-processor that processes your end-customers' personal data, we give you at least 30 days' notice by e-mail and you may object on reasonable data-protection grounds (section 11). One limit, stated rather than implied: we do not yet hold a written data processing agreement with our AI sub-processor that binds the upstream model providers to these terms. See the Privacy Policy, section 18, and run a channel in human mode if that matters to you.
• Assisting with data subject rights. We assist you, by appropriate technical and organisational measures and at no charge for a reasonable volume, in answering your end-customers' requests for access, correction, erasure, restriction, portability and objection. If a request comes to us directly we tell you and act as described in the Data Deletion Instructions; for data received through a platform we act within that platform's deadline even if you do not respond, and tell you afterwards.
• Assisting with your other obligations. We assist you in meeting your obligations under Articles 32 to 36 of the GDPR — security of processing, breach notification to the authority and to data subjects, data protection impact assessments and prior consultation — by giving you the information we hold about our processing. The Privacy Policy is written to be usable as that documentation.
• Breach notification. We notify you without undue delay after becoming aware of a personal data breach affecting personal data we process for you, with the information we have about its nature, the categories and approximate number of data subjects and records concerned, the likely consequences and the measures taken, and we supplement it as we learn more.
• Information and audit. On request we give you the information needed to demonstrate compliance with this Addendum, and we allow you or an auditor you mandate to audit our processing. Audits are at your cost, during business hours, on at least 30 days' notice, no more than once a year unless a breach or a supervisory authority requires otherwise, subject to confidentiality, and may not compromise another customer's data or our security. We hold no ISO 27001 certification and no SOC 2 report, and we will not offer one in place of an audit.
• Unlawful instructions. If, in our opinion, an instruction from you infringes the GDPR, the UK GDPR or another data protection provision that applies to us, we will tell you without delay and may suspend the affected processing until the instruction is withdrawn or changed.
• Records. We keep records of our processing activities for you, as required by Article 30(2).

A3. International transfers

Allinaa processes the personal data in the United States, and the sub-processors listed in the Privacy Policy operate in the United States and other countries. Which safeguard is in place for which recipient — and for which recipient we do not yet hold an Article 46 mechanism of our own — is stated exactly in the Privacy Policy, section 18, and a copy of the clauses we rely on is available on request. Where you require specific transfer terms or the EU standard contractual clauses signed with us directly, write to us before you launch.

A4. Deletion and return (Article 28(3)(g))

On the end of the provision of the services, we delete or return all personal data we processed for you, at your choice, within 60 days, and delete existing copies except where law requires us to keep them — in which case we tell you which records and for how long, and we keep processing them only for that purpose. A safety copy of the database taken before a software release may still contain data until that copy is deleted; such copies are never used to answer a request, only to restore the service (Data Deletion Instructions, section 5.2). Nothing in this paragraph limits a data subject's right to erasure, which we honour whenever it is exercised.

Annex I — Details of the processing

Annex II — Technical and organisational measures

The measures we have implemented are listed, one by one, in the Privacy Policy, section 17.1, and that list forms Annex II of this Addendum: scrypt password hashing with per-user salts and constant-time verification; tokens stored only as hashes; AES-256-GCM encryption of messaging channel credentials with per-value nonces, bound ciphertexts, key rotation and fail-closed behaviour; constant-time per-provider webhook signature verification with body and event caps; tenant isolation enforced on every management route and file path; an audit log of management, administration and authentication actions including denied attempts, without request bodies, headers or secrets; time-limited, reason-recorded support access; a platform administration token accepted only from the server itself; file type detection from content, size and quota limits, a decompression-bomb guard, image re-encoding that strips EXIF and GPS data, built-in content checks, optional ClamAV where configured, and hardened download headers in the cabinet; secret masking in logs; prompt-injection guards; idempotency; and server-side fetches pinned to public provider hosts.

The measures we have not implemented are listed just as explicitly in the Privacy Policy, section 17.2, and that list is part of Annex II too: no encryption at rest of the database or of uploaded files (only channel credentials are encrypted, and their key sits in the environment of the same server); TLS terminated in the hosting infrastructure rather than by the application, with no HSTS header and no HTTP-to-HTTPS redirect of its own; a chat API that accepts requests from any origin, because businesses embed the widget on their own sites; no automatic purge of audit records or AI usage records; and built-in file checks that are not antivirus software. If your assessment of the risk requires a measure we do not have, do not process personal data with us until we have agreed it in writing.

Back to top ↑

---