Privacy Policy

How we handle your data.

This page explains what we collect when you register for the Ally beta, why we collect it, and how you can control it.

Version v1.2 · Effective 9 October 2026 · Applies to beta registrations at www.goxlally.ai

What we collect

When you register for Ally Beta, we collect:

• Full name — required
• Email address — required
• Phone number — optional
• LinkedIn profile URL — optional
• Your choices — whether you accepted these terms, whether you opted in to marketing emails, and when

We don't ask for anything beyond this on the registration form. Analytics cookies on this site are set only if you allow them in the cookie banner — see Cookies below.

Why we collect it

Essential — to run your registration. We register your interest in Ally Beta, confirm it by email, and contact you when beta access is ready. This is the only thing we need your details for, and it's the only use that isn't optional.

Optional — marketing emails. If, and only if, you tick the separate marketing box on the form, we'll also send you product updates, founder insights and promotional emails. This is entirely your choice: leaving it unticked does not affect your registration in any way.

We never sell your information, and we don't use it to build advertising profiles.

Your consent

The registration form asks you for two separate things, and they are deliberately not bundled together:

• Accepting these terms — required, because we can't process a registration without it.
• Marketing emails — optional, off by default, and never a condition of registering.

We record which of these you agreed to, and when, along with the version of this policy in force at the time. You can withdraw either one at any time — see Your rights below. Withdrawing marketing consent stops the promotional emails; withdrawing entirely means we delete your registration.

Who else sees it

We use two categories of service providers to run this registration system, and both act strictly on our instructions — they don't use your data for their own purposes:

• A database hosting provider, to store your registration securely.
• An email delivery provider, to send your confirmation email and, internally, to notify our team of a new registration.

Separately, Google's tag on this site sends Google a limited signal of your consent choice, and usage data about your visit only once you allow Analytics; Microsoft Clarity receives usage data about your visit only once you allow Analytics (see Cookies). None of this is linked to your registration details.

We do not share your information with any other third party, we do not sell or rent it, and we do not use it to build advertising or profiling audiences.

How long we keep it

We keep your registration for up to 24 months from the day you register. After that the purpose you gave it for has been served, and we delete it.

If you ask us to delete it sooner, we will — see Your rights below. If you become an Ally user, your account data is covered by the separate policy you'll agree to at that point.

Age requirement

Ally Beta is for people aged 18 or over, and you confirm your age when you register. We don't knowingly collect data from children. If you believe a child has registered, email us at info@goxlally.ai and we'll delete the record.

How we protect it

Your data is stored in a database that is not publicly accessible, transmitted only over encrypted connections, and reachable only by our application's server-side code — never directly from a browser.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Erase your data once it's no longer needed for the purpose you gave it for
• Withdraw consent at any time, as easily as you gave it
• Raise a grievance if you're unhappy with how we've handled your data

How to reach us — and how to withdraw

One email does all of it. Send us a note and say what you want — a copy of your data, a correction, deletion, or to withdraw consent entirely. You don't need an account or a form, and withdrawing is as easy as giving consent was.

We aim to respond within 30 days. If you're not satisfied with how we've handled your request, you may complain to the Data Protection Board of India.

If something goes wrong

If a data breach affects your information, we will notify the Data Protection Board of India and every affected person, as the DPDP Act requires.

Cookies

When you first visit, a banner asks what you allow. You can change or withdraw your choice at any time from the Cookie preferences link in the footer.

• Necessary — always active. Your browser keeps your registration status, the campaign link you arrived from (so we know how founders find Ally), and your cookie choice itself. None of this identifies you to anyone else or is used for advertising.
• Analytics — optional, off by default. Analytics cookies and storage stay switched off unless you allow Analytics. Before you do, Google Consent Mode may still send Google limited cookieless signals about your consent state and basic page and request context — the address of the page and the ordinary technical details any web request carries. We do not intentionally send your name, email, phone number, form responses or any Ally content through these analytics signals. If you allow Analytics, Google Analytics (loaded through Google Tag Manager) may then set its own cookies in your browser, named _ga and _ga_ followed by an ID, to recognise repeat visits and show us which pages founders read and where they get stuck. If you later withdraw, we tell Google your choice has changed and remove those cookies from your browser.
  
  If you allow Analytics, we also use Microsoft Clarity (loaded through Google Tag Manager) on the home, pricing and about pages only — never on the sign-in page or inside the Ally app. Clarity records how visitors use those pages, such as clicks, scrolling and mouse movement, and shows us heatmaps and replays of visits so we can see where founders get stuck. It may set its own cookies, such as _clck and _clsk. Microsoft processes this data under the Microsoft Privacy Statement. Clarity does not run unless you allow Analytics.
• Advertising — optional, off by default. Advertising storage and signals stay denied unless you allow Advertising. No advertising vendor's tag is installed on this site today; if that changes, this page will say so before it does.

Whatever you choose, we do not intentionally send Google or Microsoft your name, email, phone number, anything you type into the registration form, or any of your Ally content. Diagnosis answers, Founder DNA answers, chat messages and business details do not exist on this website at all: they live inside the Ally app, which is covered by its own policy.

Your choice is stored in your browser together with the date and the version of this cookie section it was made under. If this section changes in substance, the banner will ask you again.

We also keep a copy of the choice itself on our own server, because a record that exists only in your browser is one we cannot produce if you or a regulator ask us to show it. That copy holds four things: what you allowed, when you clicked, which version of this section you saw, and a random reference number generated in your browser at that moment. It holds no IP address, no device or browser details, and nothing that links it to a beta registration or to any other visit — we drop your IP rather than store it. Each time you change your choice a new, unconnected record is created, so these cannot be joined together into a picture of you. Your browser keeps the reference number of your latest one, so you can ask us for that exact record.

Changes to this policy

If we make material changes to how we handle your data, we'll update this page and revise the effective date above.