Privacy Policy
Last updated: 20 September 2026
This Privacy Policy explains how ALYGN ("ALYGN", "we", "us", or "our"), available at https://www.alygn.my, collects, uses, stores, and shares information when you use our application and related services (the "Service").
By using ALYGN, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Who we are
ALYGN is a company operating system that helps organisations and individuals manage goals, projects, tasks, calendars, and related work. The Service is provided at www.alygn.my.
Privacy contact: privacy@alygn.my
2. Information we collect
Account and profile information. When you sign up or are invited, we collect information such as your name, email address, password (stored securely via our authentication provider), role, department, and company/workspace details.
Workspace content. Content you or your organisation create in ALYGN, including goals, initiatives, projects, tasks, calendar events, comments, uploads, settings, and similar data.
Google Calendar (optional). If you choose to connect Google Calendar, we receive OAuth tokens and limited Google account information (such as your Google email) needed to create, update, or delete calendar events that you sync from ALYGN. We request access only to calendar event scopes required for that sync. We do not use Google user data for advertising.
Usage and technical data. We may collect basic logs such as IP address, browser type, device information, timestamps, and pages or actions within the Service for security, reliability, and troubleshooting.
3. How we use information
- Provide, operate, maintain, and improve the Service
- Authenticate users and manage workspaces and permissions
- Sync tasks and events with Google Calendar when you connect that integration
- Send service-related notices (for example invites or security alerts)
- Prevent abuse, debug issues, and protect the Service
- Comply with legal obligations
4. Google user data
ALYGN's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Google Calendar data accessed through our integration is used only to provide the calendar sync features you enable (creating, updating, or deleting events that correspond to ALYGN tasks/events). We do not sell Google user data. We do not use Google user data for serving advertisements. We do not allow humans to read Google user data except with your consent, for security/compliance reasons, or where required by law — and only as permitted by Google's policies.
You can disconnect Google Calendar at any time in ALYGN Settings → Integrations. Disconnecting removes our stored OAuth tokens for that workspace connection. You may also revoke ALYGN's access in your Google Account permissions.
5. How we share information
We may share information with:
- Service providers who help us run ALYGN (for example hosting, database, authentication, and email delivery), under contractual confidentiality and security obligations
- Your organisation, when you use a business workspace — admins and authorised teammates may see workspace content according to roles and permissions
- Legal / safety disclosures when required by law or to protect rights, safety, and the Service
We do not sell your personal information.
6. Data storage and security
We use reputable cloud infrastructure providers to store and process data. OAuth tokens and other credentials are stored with access controls intended to limit use to authorised server processes. No method of transmission or storage is 100% secure; we work to protect your information using industry-standard practices.
7. Data retention
We retain account and workspace data while your account/workspace is active and as needed to provide the Service. Google OAuth tokens are retained until you disconnect the integration or your account is removed. We may retain certain logs for security and compliance for a limited period.
8. Your choices and rights
Depending on your location, you may have rights to:
- Access, correct, or delete personal information we hold
- Export workspace data where features allow
- Disconnect third-party integrations such as Google Calendar
- Request restriction of processing where applicable law provides
To make a request, email privacy@alygn.my. We may need to verify your identity before fulfilling a request.
9. Children
ALYGN is intended for workplace and adult use. We do not knowingly collect personal information from children under 16.
10. International transfers
Your information may be processed in countries other than where you live, including where our hosting and service providers operate. We take steps designed to protect information in accordance with this Policy.
11. Changes
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the Service after changes means you accept the updated Policy.
12. Contact
Questions about privacy: privacy@alygn.my
Website: https://www.alygn.my
