Privacy Policy

Alocta is operated by ALOCTA (SMC-PRIVATE) LIMITED, a company incorporated under the Companies Act, 2017 in Pakistan (CUIN: 0345724).

Welcome to Alocta ("Alocta," "we," "our," or "us"). We value your privacy and are committed to being transparent about how we collect, use, store, and protect your information.

This Privacy Policy explains how we handle information when you visit alocta.com, create an account, or use our analytics dashboard and related services.

By accessing or using our services, you agree to the practices described in this Privacy Policy.

1. Who We Are

Alocta is a cross-platform analytics dashboard that helps businesses, creators, and marketers view and monitor performance across supported third-party platforms, including YouTube, Google Search Console, Google Analytics 4, Google Ads, Facebook Pages, and Instagram Professional Accounts, from a single interface.

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us at:

Email: privacy@alocta.com

2. Information We Collect

a. Information You Provide

When you create an Alocta account, we may collect:

• Your name;
• Your email address;
• Your account password.

We use this information to create and manage your account, authenticate your identity, and provide the services.

b. Information From Connected Third-Party Services

When you choose to connect supported third-party platforms to Alocta, you authorize us to access limited information necessary to provide the analytics dashboard.

Depending on the integration, we may collect and store information such as:

Facebook Pages

• Facebook user ID
• Facebook page ID
• Page name
• Page profile image URL

Google Services

• YouTube video titles
• YouTube video thumbnails
• YouTube video IDs
• Publish YouTube video dates
• YouTube Channel ID
• YouTube Channel title
• Uploaded YouTube playlist IDs
• Google account email address associated with the (GA4 + GSC) connection
• Google Analytics 4 property ID
• Google Search Console property URL
• Google Ads customer account ID
• Google Ads login customer ID, where applicable
• Google Ads account name
• Google Ads account currency and time zone

Instagram

• Instagram Professional Account ID (Business or Creator account)
• Instagram username
• Instagram profile picture URL

Alocta only accesses the information necessary to provide the functionality you request. We do not use connected account data for advertising or unrelated purposes.

c. Technical and Usage Information

To maintain the security and reliability of our services, we may automatically collect limited technical information, including:

• Standard server log information
• Browser type and device information
• Timestamps of requests
• Error and diagnostic reports

IP addresses and user-agent information are generated through normal server operations.

This information is used for security, troubleshooting, and service maintenance. It is not used to build advertising profiles or track users across unrelated websites.

3. Cookies and Similar Technologies

Alocta uses cookies and similar technologies to operate and improve the services.

We use a strictly necessary authentication cookie to keep users securely signed in. This cookie is essential for the operation of the service and cannot be disabled without affecting core functionality.

We also use Google Analytics to help us understand how visitors and users interact with our website and services. Google Analytics may collect information such as browser type, device information, pages visited, approximate geographic location, and general usage patterns using cookies and similar technologies. This information helps us analyze traffic, improve the user experience, and enhance our platform. For more details, see our Cookie Policy.

Alocta does not use advertising cookies, retargeting technologies, or third-party marketing trackers for behavioral advertising purposes.

You can control or disable cookies through your browser settings, although doing so may affect certain features of the services. For more details, see our Cookie Policy.

4. How We Use Your Information

We use the information we collect to:

• Create, maintain, and secure your Alocta account and authenticate your identity when you sign in
• Connect your authorized third-party platforms and display analytics within your dashboard
• Provide, operate, maintain, and improve the services
• Process and maintain your connected integrations with YouTube, Google Search Console, Google Analytics 4, Google Ads, Facebook Pages, and Instagram Professional Accounts
• Respond to your inquiries, support requests, and account-related communications
• Send emails, including account verification codes and important service notifications
• Monitor, troubleshoot, and protect the security and integrity of the services
• Detect, investigate, and prevent fraud, unauthorized access, and other misuse of the platform
• Comply with applicable legal obligations and enforce our Terms of Service and policies
• Analyze aggregate website usage through Google Analytics to improve the functionality and user experience of the services

5. Connected Platform Data

When you choose to connect your (GA4 + GSC), Google Ads, YouTube, Facebook, or Instagram account to Alocta, you expressly authorize us to access and process certain information from those platforms that is necessary to provide the services you have requested.

Alocta accesses and uses connected platform data solely to retrieve, display, and organize analytics and related information within your dashboard. We use this information only to provide and improve the functionality of the services and do not use it for unrelated advertising or profiling purposes.

We do not sell, rent, or otherwise disclose your connected platform data to third parties for their own marketing or commercial purposes.

Meta API Data (Facebook & Instagram): Information obtained through Meta's APIs for Facebook Pages and Instagram Professional Accounts is used only to provide the analytics and dashboard features you have authorized, in accordance with the Meta Platform Terms. Alocta does not use Facebook or Instagram platform data for advertising, independent marketing, or AI model training. For more information, please see the Facebook Privacy Policy Overview and the Instagram Data Policy Page. This includes page and account-level insights; published content (captions, media, and publish dates); and content performance metrics (views, reactions, comments, and share counts). If your Facebook Page belongs to a Meta Business Portfolio, we may access that Portfolio's Page list so you can select which Page to connect. Alocta only reads this data to display it on your dashboard. We do not post, publish, edit, or delete content, and we do not download, export, or permanently store data beyond what's needed to deliver the service in real time.

Google API Data (GA4, GSC, YouTube, & Google Ads): Data obtained through Google APIs for Google Analytics 4, Google Search Console, YouTube, and Google Ads is used only in accordance with the permissions granted by you and the Google API Services User Data Policy. Alocta accesses these services solely for the purpose of displaying metrics within your dashboard. Google Ads account information selected by you is used to establish and display your paid advertising analytics connection. Alocta retrieves authorized reporting information from Google Ads to display within the dashboard. This information is used only to provide the paid analytics features you request. We do not download, export, store, or otherwise retain your analytics data beyond what is necessary to deliver the service in real-time. The term "download" used in Google's consent screen during (GA4 + GSC) connection is generic and does not reflect our actual data handling practices. Alocta does not use data obtained through Google APIs to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models. See Google's Privacy Policy and YouTube's Terms of Service for more information.

You may revoke Alocta's access to your connected accounts at any time by:

• Disconnecting the integration within Alocta
• Removing Alocta's access through the privacy or security settings of the applicable third-party platform

When you disconnect a (GA4 + GSC), Google Ads, YouTube, Facebook, or Instagram integration, Alocta ceases all data retrieval from that account and removes the associated connected data from its active systems. The deletion occurs as part of the disconnection process, and no data is retained afterward.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

We may share information only in the following limited circumstances:

Service Providers

We may work with trusted third-party service providers that help us operate the services, such as:

• Cloud hosting providers, including Render and Supabase;
• Email delivery services, including Brevo; and
• Other vendors that assist with the platform's operations, security, or maintenance.

These providers are only permitted to process information on our behalf and under appropriate confidentiality and security obligations.

Legal Requirements

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, users, or the security of the services.

Business Transfers

If Alocta is involved in a merger, acquisition, financing, or sale of assets, user information may be transferred as part of that transaction, subject to applicable privacy protections. We will notify users via email or a notice on our website before any such transfer takes effect.

7. Data Retention

We retain account information and connected platform information for as long as your account remains active or as necessary to provide the services.

If you disconnect a connected platform, Alocta stops using that connection and removes all the associated connected data from our active systems.

If you delete your Alocta account, your account information and associated connected platform data will be completely deleted from our active systems.

Technical logs used for maintenance and security are retained only for a limited period.

8. Data Security

We take reasonable administrative, technical, and organizational measures to protect the information we collect against unauthorized access, loss, misuse, or disclosure.

These measures include secure infrastructure, encryption where appropriate, controlled access to systems, and ongoing efforts to maintain the security and integrity of the services.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

You may:

• Request access to the personal information we hold about you
• Request information about how your data is processed
• Request deletion of your personal information
• Disconnect connected third-party accounts at any time
• Withdraw previously granted permissions through the relevant third-party platform

You can delete your Alocta account directly through the platform. Deleting your account will also remove associated connected platform data from our active systems.

At this time, we do not offer a self-service export feature for account data. If you have questions regarding your information, you may contact us at privacy@alocta.com.

10. GDPR and International Privacy Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar privacy protections, you may have rights under applicable law, including the right to:

• Access your personal information;
• Request deletion of your information;
• Restrict or object to certain processing activities;
• Lodge a complaint with your local data protection authority.

Alocta will respond to applicable requests within the timeframes required by law.

11. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Request access to the information we maintain about you
• Be free from discrimination for exercising your privacy rights

Alocta does not sell or share personal information for cross-context behavioral advertising.

To exercise your rights, please contact us at privacy@alocta.com.

12. Children's Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children. If we become aware that we have unintentionally collected such information, we will take reasonable steps to delete it.

13. Email Communications

We may use your email address to send you communications related to your Alocta account and the services. These communications may include account verification codes, security alerts, service announcements, product updates, feature releases, newsletters, and other information that may be relevant to your use of the platform.

We may use third-party email service providers to deliver these communications on our behalf. These providers process your email address solely for the purpose of sending authorized communications and are required to protect your information in accordance with applicable privacy and security standards.

Where required by applicable law, marketing or promotional emails will only be sent with your consent, and you may opt out of receiving such communications at any time by using the unsubscribe link included in the email or by contacting us at privacy@alocta.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements, or business practices.

If we make material changes, we will update the "Effective Date" above and, where required, provide additional notice through the services or by email.

Your continued use of the services after any updated Privacy Policy becomes effective constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact us at:

ALOCTA (SMC-PRIVATE) LIMITED
Anum Estate, Suite 611, Shahrah-e-Faisal
Karachi, Sindh 75400, Pakistan
Website: https://alocta.com
Email: privacy@alocta.com