Privacy Policy

Effective June 10, 2026 · Amy Tourte LLC

This Privacy Policy describes how Amy Tourte LLC, doing business as Alette ("we," "us," or "our"), collects, uses, and protects your personal information when you use the Alette platform and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

We understand that you are using Alette during a sensitive and personal time. Privacy and discretion are foundational to everything we build.

1. Information We Collect

1.1 Information You Provide

Account Information. When you create an account, we collect your email address and, optionally, your name. If you sign in with Google, we receive your name and email address from Google.

Preparation Data. You may enter information related to your divorce or separation preparation, including financial details, property information, parenting considerations, and related notes. This information is stored to help you organize and prepare for your proceedings.

Documents. You may upload or identify documents relevant to your preparation. Document metadata (names, categories, status) is stored within the Service.

1.2 Information Collected Automatically

Usage Data. We may collect basic usage information such as page visits, feature usage, and error logs to improve the Service. This data is not linked to your preparation content.

Device Information. We may collect device type, operating system version, and browser version for compatibility and troubleshooting purposes.

1.3 Information We Do Not Collect

We do not collect location data, contacts, photos (unless you explicitly upload a document image), microphone or camera data, browsing history, or advertising identifiers.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve the Service; to authenticate your identity and secure your account; to communicate with you about service updates or support requests; to generate anonymized, aggregated insights to improve the product (no individual data is shared or sold); and to comply with legal obligations.

We do not use your data to serve advertisements, build marketing profiles, or train machine learning models.

3. How We Store and Protect Your Information

Infrastructure. Your account and preparation data are stored using Supabase, a secure cloud database platform with encryption at rest and in transit. Our application is hosted on Vercel.

Authentication. We use Supabase Authentication with email-based one-time passwords (OTP) and Google OAuth. We do not store your password.

Discretion by Design. Authentication sessions are not shared across devices. The platform is designed with the assumption that someone other than you may see your screen at any time.

Sensitive Data. Divorce and separation preparation data is sensitive by its nature. We treat all preparation data with heightened care, including restricted access controls, encryption at rest and in transit, and strict internal access limitations. We do not use preparation data for advertising, profiling, or any purpose beyond providing the Service to you.

Data Breach Notification. In the event of a security incident that affects your personal data, we will notify you within the timeframe required by applicable law (including Colorado's breach notification statute, C.R.S. § 6-1-716, and equivalent laws in your state of residence) and will take prompt steps to investigate and mitigate harm.

4. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We may share information with service providers who process data on our behalf under contractual obligations to protect it; when required by law, regulation, or legal process; or to protect the rights, safety, or property of Amy Tourte LLC, our users, or the public.

Your substantive preparation data is never shared with any other party through the Service unless you explicitly choose to share it (for example, by downloading and sending your case file).

4.1 Third-Party Processors

We use the following third-party service providers to operate the Service. Each processes personal data only to the extent necessary to perform their services and operates under their own privacy policy and data processing agreement.

Supabase (database and authentication). Stores your account information and all preparation data. Supabase Privacy Policy: supabase.com/privacy.

Vercel (hosting and edge functions). Serves the application and may process request metadata such as IP addresses in transit. Vercel Privacy Policy: vercel.com/legal/privacy-policy.

Stripe (payment processing). Processes subscription payment information. Stripe receives your payment details directly and we do not store full card numbers. Stripe Privacy Policy: stripe.com/privacy.

Resend (transactional email). Delivers authentication one-time passwords, account notifications, and service communications to your email address. Resend Privacy Policy: resend.com/legal/privacy-policy.

5. Cookies and Tracking Technologies

We use minimal tracking technologies. We do not use advertising cookies, cross-site tracking, or any third-party behavioral tracking.

Session cookies. We use session cookies issued by Supabase Authentication to maintain your login state. These cookies are strictly necessary for the Service to function. They do not track you across other websites.

Vercel infrastructure. Vercel may set cookies or use similar technologies for load balancing and edge routing. These are infrastructure-level and do not contain personal information or track behavior across sites.

Analytics. We do not currently use any analytics tracking service (including Vercel Analytics, Google Analytics, or similar tools). If we add analytics in the future, we will update this policy before doing so.

No advertising identifiers. We do not use advertising identifiers, tracking pixels, or retargeting technologies of any kind.

6. Your Rights and Choices

Access and Correction. You can view and edit all of your preparation data directly within the platform at any time.

Data Export. You can download a PDF summary of your case file from the Preparation tab.

Data Deletion. You can reset all preparation data from Settings. To delete your account entirely, contact us at privacy@aletteapp.com and we will remove all associated data within 30 days.

Do Not Sell or Share. We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). No opt-out mechanism is required because we do not engage in these activities. To confirm, contact us at privacy@aletteapp.com.

Automated Decision-Making and Profiling. We do not use automated decision-making processes or profiling that produces legal or similarly significant effects on users. If this changes, we will update this policy and provide you with a meaningful opt-out mechanism before the change takes effect.

Appeals. If we deny a privacy rights request, you may appeal the decision by contacting us at privacy@aletteapp.com with the subject line "Privacy Rights Appeal." We will respond to your appeal within 45 days of receipt. This process satisfies the appeal requirements of the Colorado Privacy Act (C.R.S. § 6-1-1306) and the Texas Data Privacy and Security Act.

7. Children's Privacy

Alette is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

8. State-Specific Privacy Rights

8.1 California Privacy Rights (CCPA/CPRA)

California residents have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:

Right to Know. You have the right to know what categories of personal information we collect, the purposes for which we use it, the categories of third parties with whom we share it, and the specific pieces of personal information we hold about you.

Right to Delete. You have the right to request deletion of your personal information, subject to certain exceptions permitted by law.

Right to Correct. You have the right to request correction of inaccurate personal information we hold about you.

Right to Opt Out of Sale or Sharing. You have the right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined under CCPA/CPRA. No opt-out action is required, but you may contact us to confirm.

Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights. Exercising your privacy rights will not result in denial of service, different pricing, or reduced service quality.

To exercise any of these rights, contact us at privacy@aletteapp.com. We will respond within 45 days of receiving a verifiable request.

8.2 Colorado Residents (CPA)

Colorado residents have the right to access, correct, and delete their personal data; to obtain a portable copy of their data; and to opt out of targeted advertising and profiling that produces legal or significant effects. We do not engage in targeted advertising or such profiling. To exercise your rights or appeal a denied request, contact privacy@aletteapp.com with subject line "Colorado Privacy Rights" or "Privacy Rights Appeal."

8.3 Texas Residents (TDPSA)

Texas residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and profiling that produces legal or significant effects. We do not sell personal data or engage in targeted advertising. To exercise your rights or appeal a denied request, contact privacy@aletteapp.com with subject line "Texas Privacy Rights" or "Privacy Rights Appeal."

9. Data Retention

We retain your account and preparation data for as long as your account is active. If you delete your account, we will remove your data from our active systems within 30 days. Backup copies may persist for up to 90 days before being permanently deleted.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the platform and updating the effective date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, contact us at: