Privacy Policy

I) Introduction

This Privacy Policy is issued by Alumco LLC (hereafter referred to as the "Company").

The Company provides an online platform for Users who have subscribed and created accounts (hereafter referred to as "Users"). The Platform can be accessed at the following URL: www.alumco.io

The Company employs a platform known as "Alumco," which enables the importation and exportation of user data and lists, the administration of content and events, the coordination of email campaigns, the exploration and dissemination of opportunities, and the management of various forms of funds and contributions.

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them:

• Institution: Refers to any educational entity that is a client of the Company and utilises the Company's online platform to engage with its former and current students.
• Users: Refers to individuals who have a direct or historical connection with the Institution, specifically including former students (alumni) and current students.
• Minor Users: Refers to individuals under the age of 16.

The Company recognizes the importance of safeguarding the privacy and personal data of its Users. It is committed to ensuring that all data processing activities carried out in its role as data controller comply fully with the relevant provisions of Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection (UAE PDPL), EU Regulation 2016/679 on data protection (GDPR), and other applicable data protection laws.

II) What information does Alumco collect about me?

a) When subscribing on the Platform

Upon registering for the Platform, the User is notified that the following personal information will be gathered:

• Contact details, including but not limited to name, address, email, and phone number.
• Information related to educational background, work experience, and, if applicable, a resume.

The information may be acquired from other trusted sources to update or supplement the information you provided, or collected automatically, such as country of residence, education, work experience, date of birth, email address.

Special Provisions for Minor Users: Minor Users are not accepted in the platform.

b) During the use of the Platform

The User is permitted to voluntarily publish content on the Platform, which the Company will retain, including but not limited to:

• Personal and contact details
• Information regarding events, projects, achievements, and travel
• News updates

The User agrees not to post any content that violates applicable laws and regulations, is contrary to public order and decency, or infringes upon the rights of third parties.

c) Processing and Analysis

The Company utilises a chatbot and machine learning technologies to provide value for users by assisting in career advancement and data retrieval.

Users are protected and anonymized:

• All data processed through chatbot systems undergoes an anonymization process before processing
• We employ AI systems to analyse platform interactions and provide enhanced services
• No personally identifiable information is included in AI processing

d) Data Enrichment and Third-Party Sources

With the User Consent, the Company enhances user profiles through a carefully managed data enrichment process that prioritises both data quality and user privacy.

User rights over enriched data:

• Right to opt-out of the enrichment process at any time
• Option to request deletion of enriched data

III) What about cookies and tracking technologies?

The Company hereby informs the User it, along with its subcontractors, utilises tracking technologies such as cookies on the User's device when navigating the Platform.

Types of Cookies Used on the Platform:

• Essential Cookies: These cookies are necessary for the operation of the Platform and enable the User to navigate and use its features.
• Performance and Analytics Cookies: These cookies collect information about how Users interact with the Platform. They are controlled by the Company in an anonymous form only.
• Functional Cookies: These cookies allow the Platform to remember choices made by the User, such as language preferences or region.

Users can manage their cookie preferences through their browser settings.

IV) How does Alumco use my information?

The following information may be collected:

• Contact details, including email address, phone number, and home address
• Social media profiles, such as Facebook, Instagram, and LinkedIn
• Personal information, including the User's name and country of residence
• Educational background, Work experience, curriculum vitae, and details of achievements
• User search and session data
• Payment or bank account details
• Device information and diagnostic data

The purpose of the collection includes:

• Access to the Platform and creation of a User account
• Full access to all features including payments and notifications
• Management of data access requests
• Sending event invitations and job offers (with consent)
• Enhancing the quality and functionality of the Platform
• Generating usage statistics
• Managing financial transactions securely

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors (Stripe) whose use of your personal information is governed by their Privacy Policy.

V) Do I need to give consent for Alumco to use my data?

The Company notifies the User that no personal data will be collected without the User's prior explicit consent. The User provides such consent upon subscribing to the Platform and after having had the opportunity to review this Privacy Policy.

VI) How can I withdraw my consent?

Users have the right to withdraw their consent at any time. Consent can be withdrawn by:

• Accessing the User account settings on the Platform and adjusting preferences.
• Contacting the Company directly.

Withdrawing consent does not affect the legality of the processing that occurred based on consent prior to its withdrawal.

VII) How long does Alumco keep my information?

We keep your profile information and content for the duration of your account.

Upon termination of the subscription, any data collected during the subscription process, as well as any content published by the User on the Platform, will be deleted when it is no longer necessary.

In accordance with applicable laws, cookie data will be automatically removed thirteen (13) months after being placed on the User's device.

VIII) What are Alumco's obligations regarding my data?

As the data controller and in compliance with applicable laws, the Company commits to:

• Collecting Users' data solely for the specific purposes outlined in this Privacy Policy.
• Maintaining a processing register.
• Implementing all necessary technical and organizational measures to ensure security.
• Raising awareness and providing training to staff regarding personal data processing.
• Ensuring Users are informed of their rights.
• Notifying the appropriate supervisory authority of any security breach within 72 hours.

IX) What rights do I have over my data?

In accordance with applicable law, your controls and choices include:

• Correcting, updating, and deleting your registration account
• Objecting, restricting, or withdrawing your Consent
• Choosing or changing your choices for notifications and alerts
• Choosing whether we share your personal information with other companies
• Requesting removal of your personal information
• Requesting access to the personal information we hold about you

The User can exercise these rights by sending an email to legal@alumco.io.

X) Where is my information stored and/or processed?

The security, integrity, and confidentiality of your information are extremely important to us. The personal data collected by the Company is stored by the following service providers:

• Firebase (Google Cloud Platform): Data storage and authentication (EU/US regions)
• Vercel: Web application hosting and deployment (United States)
• Proxycurl: Public professional data enrichment
• OpenAI: AI-powered analysis and interaction (United States)
• Stripe: Payment processing (Dublin, Ireland)

XI) What happens if there's a security breach?

Despite our best efforts, no security measures are perfect or impenetrable. In the event of a breach, the Company commits to notifying the Users within seventy-two (72) hours if it poses a significant risk to the rights and freedoms of the Users.

Any malicious act that poses a serious risk will also be reported to the relevant supervisory authority.

XII) Will this privacy policy change?

We may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent.

XIII) Who has access to my data within Alumco?

Users' data is only accessible to individuals who have been properly authorized by the Company for administrative or maintenance purposes related to the Platform. This access is strictly limited to these purposes and excludes any commercial use.