Privacy Policy

Last updated: June 25, 2026

1. Overview

AltCheck (“we,” “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using AltCheck, you agree to the practices described here.

2. Information We Collect

We collect the following categories of information:

Account information

Your name, work email address, firm name, and password (stored as a secure hash — we never store plaintext passwords).

Compliance profile

Firm registration type, fiscal year end, custody status, and other compliance configuration you provide during onboarding.

Documents you upload

PDFs and other files you upload for AI review, along with extracted text, identified violations, notes, and your review activity.

Usage and activity data

Actions within the Service (document uploads, status changes, flags, logins) logged for security and audit purposes.

Payment information

Billing details are collected and stored by Stripe, our payment processor. AltCheck never sees or stores your credit card number.

3. How We Use Your Information

To provide, operate, and improve the Service
To generate AI-powered compliance analysis of your documents
To calculate and track your regulatory deadlines
To send deadline reminder emails and account notifications
To process subscription payments through Stripe
To detect and prevent fraud, abuse, and unauthorized access
To comply with legal obligations

We do not sell, rent, or share your personal information or document contents with third parties for their own marketing purposes.

4. Third-Party Services

AltCheck relies on the following trusted third-party providers to operate. Each has its own privacy policy governing how they handle data:

SupabaseHosts our database and authentication system. Your account data and document content are stored in Supabase's infrastructure, hosted on AWS.

AnthropicPowers the AI document analysis. Extracted text from your documents is sent to Anthropic's API for review. Anthropic's data processing agreement governs this use.

StripeProcesses subscription payments. Stripe handles all payment card data under PCI-DSS compliance.

ResendSends transactional emails (deadline reminders, password resets, account notifications).

VercelHosts the web application. Vercel may collect standard server logs including IP addresses and request metadata.

5. Data Security

We implement industry-standard security measures to protect your data:

All data is encrypted in transit (TLS) and at rest
Documents are stored in private, access-controlled cloud storage
Row-level security ensures each user can only access their own data
Authentication is handled by Supabase with secure session management
Automatic session expiration after periods of inactivity
Admin access to user data is restricted to authorized personnel only

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account data and documents for as long as your account is active. If you close your account, we will delete your personal data and documents within 30 days, except where we are required to retain records for legal or compliance purposes. Audit logs may be retained for up to 3 years for security purposes.

7. Your Rights

You have the right to:

Access the personal information we hold about you
Correct inaccurate information in your account settings
Delete your account and associated data at any time
Export your data (contact us to request a data export)
Opt out of non-essential email communications

To exercise these rights, email us at info@altcheckcompliance.com.

8. Cookies

AltCheck uses only essential cookies required for authentication (to keep you logged in) and session management. We do not use advertising, tracking, or analytics cookies. You can disable cookies in your browser, but the Service will not function without authentication cookies.

9. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a minor has provided us with personal information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 30 days before the change takes effect. Your continued use of the Service after that date constitutes acceptance of the updated Policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at info@altcheckcompliance.com.