1. Who we are
Allari, Inc. (“Allari,” “we,” “our,” or “us”) is the data controller for personal information processed through allari.com (the “Site”) and the services described on it.
Allari, Inc.
8805 Tamiami Trl N, PMB 312
Naples, FL 34108, USA
Privacy inquiries: [email protected]
General: [email protected] · +1-866-937-2224
When we process personal information on behalf of an enterprise client as part of our managed JD Edwards, SAP, Oracle Fusion Cloud, or NetSuite operations, we act as a processor and that client’s privacy notice and our contract with them govern that processing.
2. What personal data we collect
2.1 Information you give us
When you submit the contact form, request a working session, or email us, we collect: name, business email address, company name, role/title, phone number (optional), and the contents of your message. Our contact form rejects free-email domains (gmail, yahoo, outlook, hotmail, icloud, aol, protonmail, mail.com), so we generally hold corporate email addresses only.
2.2 Information collected automatically
- Server logs: IP address, user agent, request URL, referrer, timestamp — recorded by our hosting and edge providers for security, abuse prevention, and operations.
- Analytics identifiers: Google Analytics 4 client ID and session ID (cookies
_ga,_ga_*), pages viewed, events triggered, approximate location derived from IP. - Visitor identification: Apollo.io website tracker fires after page load to associate visits with company-level firmographic data; it may set cookies and read your IP address.
- Local storage: a build-version flag we use to prompt a refresh after a new deploy. No personal data is stored.
2.3 Information from third parties
We may receive business contact information from referrals, publicly available sources (LinkedIn, company websites, public filings), and B2B data providers to verify or supplement enterprise prospect records.
2.4 What we do not collect
We do not intentionally collect government IDs, payment-card numbers, health information, biometric data, precise geolocation, or information from children. Please do not submit any of these to us unless requested under a signed agreement.
3. Why we use it and our lawful basis
| Purpose | Personal data used | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Respond to your inquiry, schedule a working session, send requested materials | Form submissions, email content | Art. 6(1)(b) — pre-contract steps at your request |
| Operate, secure, and debug the Site | Server logs, IP, user agent | Art. 6(1)(f) — legitimate interests in security & operations |
| Measure traffic and improve content (Google Analytics 4) | Analytics cookies, page views, events | Art. 6(1)(a) — consent where required (EEA/UK); Art. 6(1)(f) elsewhere |
| Identify visiting companies for B2B outreach (Apollo) | IP, firmographic enrichment | Art. 6(1)(f) — legitimate B2B marketing interest; opt-out available |
| Manage client and prospect relationships; send relevant updates | Business contact details | Art. 6(1)(f) — legitimate interests; Art. 6(1)(a) for marketing email where required |
| Comply with legal, tax, accounting obligations; respond to legal process | As required | Art. 6(1)(c) — legal obligation |
| Evaluate or conduct corporate transactions (merger, financing, sale) | As required | Art. 6(1)(f) — legitimate interests |
4. Sub-processors we share data with
We do not sell personal information for money. We share it only with the service providers below, each bound by a data processing agreement and contractually restricted to using the data on our behalf.
| Provider | Purpose | Data processed | Location | Privacy policy |
|---|---|---|---|---|
| Supabase Inc. | Database (contact_inquiries) & serverless functions hosting | Form submissions, email content | USA | supabase.com/privacy |
| Cloudflare, Inc. | Web hosting (Cloudflare Pages), edge middleware, CDN, DNS | IP, server logs, request metadata | USA & global CDN | cloudflare.com/privacypolicy |
| Resend, Inc. | Transactional email delivery (contact form notifications) | Name, email, message body | USA | resend.com/legal/privacy-policy |
| Google LLC (Google Analytics 4) | Site analytics, measurement ID G-JZTQ64TVTZ | Cookies, IP (truncated), client ID, events | USA, EU | policies.google.com/privacy |
| Apollo.io (ZenProspect, Inc.) | B2B visitor identification (app ID 661d84a839f92702e9dcede9) | IP, page visits, firmographic enrichment | USA | apollo.io/privacy-policy |
| YouTube (Google LLC) | Embedded video playback (privacy-enhanced mode where applicable) | Cookies set when you press play on an embed | USA, EU | policies.google.com/privacy |
Additional disclosures we may make: (a) to professional advisors (lawyers, accountants, auditors, insurers) under confidentiality; (b) to government authorities, law enforcement, or courts where required by law or to protect rights, property, or safety; (c) to an acquirer or successor in connection with a merger, financing, reorganization, or sale of assets; and (d) with your direction or consent.
5. International data transfers
Allari is established in the United States. Our sub-processors are primarily US-based. If you are located in the European Economic Area, United Kingdom, or Switzerland, your personal information is transferred to the US and other jurisdictions. We rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary technical and organizational measures, as the transfer mechanism. A copy of the safeguards is available on request from [email protected].
6. How long we keep your data
- Contact form submissions (Supabase + Resend inbox): retained for the duration of the prospect/client relationship and for up to 24 months after the last interaction, then deleted or anonymized.
- Server & edge logs (Cloudflare): retained per the provider’s default operational logging window (typically up to 30 days).
- Google Analytics 4 event data: retained for 14 months (the maximum standard GA4 user-level retention).
- Apollo.io visitor data: retained per the provider’s default tenant settings.
- Records required for tax, accounting, or legal purposes: retained for the period required by applicable law.
When the applicable retention period ends, we delete or de-identify the data.
7. Cookies and tracking
We use the following categories of cookies and similar technologies:
- Strictly necessary: session integrity, security, build-version refresh prompt. Cannot be disabled.
- Analytics: Google Analytics 4 (
_ga,_ga_*) — measures traffic and content performance. - Marketing / B2B identification: Apollo.io visitor tracker.
Cookie consent status: we do not display a consent banner. To opt out of marketing or the sale/sharing of your information, use the “Do Not Sell or Share My Personal Information” control in the page footer. You may also block third-party cookies in your browser, use a privacy extension, or send a Global Privacy Control (GPC) signal — we honor GPC where required by law. You can also exercise your rights via email (Section 9).
You can also opt out at industry level: optout.aboutads.info (DAA), youronlinechoices.eu (EDAA), and networkadvertising.org/choices (NAI).
8. Your rights
If you are in the EEA, UK, or Switzerland (GDPR / UK GDPR): you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent where we rely on it. You also have the right to lodge a complaint with your local data protection authority.
If you are a California, Virginia, Colorado, Connecticut, Utah, Texas, or other US state-privacy resident (CCPA/CPRA and similar): you have the right to know what we collect, to delete it, to correct it, to opt out of “sale” or “sharing” (we honor GPC), to opt out of profiling that has legal or similarly significant effects, and to non-discrimination for exercising any of these rights.
We do not knowingly sell personal information for money. Some US state laws treat the use of analytics/advertising cookies as a “sale” or “share” even without monetary exchange — to that extent, exercising the opt-out below also serves as your opt-out of any such activity.
9. How to exercise your rights
Email [email protected] with the subject “Privacy Rights Request” and describe what you want. We will verify your identity by confirming information we already hold before fulfilling the request. You may use an authorized agent where law permits; we may require written proof of authorization.
Response time: we respond within 30 days for GDPR/UK GDPR requests and 45 days for CCPA/CPRA and similar US state requests, with a one-time extension where the law allows. If we decline a request, we will explain why and how to appeal.
10. Data security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction: TLS in transit, encryption at rest with our sub-processors, role-based access controls, MFA on production systems, content security policy (CSP), and a documented vendor risk-management process. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Children’s privacy
The Site is directed to enterprise IT and finance audiences and is not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact [email protected] and we will delete it.
12. Third-party links and embedded content
Our Site may link to or embed third-party content (for example, YouTube videos or LinkedIn profiles). Those third parties operate under their own privacy policies; we are not responsible for their practices. Embedded YouTube players in particular may set cookies once you interact with them.
13. Do Not Track
Because there is no industry consensus on how to respond to browser “Do Not Track” signals, we do not currently respond to them. We do honor the Global Privacy Control (GPC) signal where required by law.
14. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. When we do, we will update the “Last updated” date above and, where the changes are material, post a notice on the Site or notify you by email. Your continued use of the Site after the effective date constitutes acceptance of the updated policy.
15. Contact
Allari, Inc.
Attn: Privacy
8805 Tamiami Trl N, PMB 312, Naples, FL 34108, USA
Email: [email protected]
Phone: +1-866-937-2224
Web: allari.com/contact
