Privacy Policy
What Allotrope holds about you, why, and what you can do about it.
Version 8 October 2026 (draft). See also the Terms.
Who is responsible
Allotrope is run by Tommy Sakoua. For your own account details, they decide how the information is used.
For the records a business keeps in Allotrope about its customers (bookings, enquiries, sales), that business decides, and we only store and process them on its instructions. If you are a customer of a business that uses Allotrope, ask that business first: it can correct, export or erase your details.
What we hold
- Your account: your name, your email address, and a scrambled (hashed) version of your password. The password is yours alone: we cannot read it.
- Your business: its name, country, currency, time zone, services, staff and opening hours.
- What you record: customers, bookings, enquiries, sales, quotes, invoices, expenses and notes.
- Files you upload: images, fonts and website pages.
- Billing: which plan you have, your billing country and a tax number if you give one. Card details go straight to Stripe. We never see or store a card number.
- Which version of these documents you accepted, and when. Any change to what you pay that you accepted, and when.
- Emails Allotrope sends for your business: who each one went to, its subject, and whether it was handed to our email provider.
- Technical records: a sign-in cookie, and server logs that include IP addresses, kept to keep the service secure and to find faults.
Visitors to a website or booking page
A website built with Allotrope counts page views, clicks and bookings started so the business can see how it is doing. It uses a random number that lasts for one visit, sets no advertising cookies, and is not joined to a name unless the visitor fills in a booking or enquiry form. What a visitor types into such a form goes to that business.
Why we use it
- To run your dashboard and website, and keep your records.
- To take payment for your plan.
- To email you about your account and your business: sign-in, receipts, missed payments, bookings and enquiries.
- To keep the service secure and fix faults.
We do not sell personal information. We do not use it for advertising.
Who else handles it
These companies process information for us so the service can work. Each has its own privacy terms. They are based in the United States, and information may be stored and processed there and in other countries where they operate.
- Stripe: payments for your plan and, if you connect it, payments from your customers.
- Resend: sending email.
- Railway: the servers and database Allotrope runs on.
- Cloudflare: file storage, backups and custom domains.
We may also disclose information if the law requires it.
How long we keep it
- For as long as your account exists.
- When you delete a business or your account, it is removed from the live database straight away and disappears from the last backup within about 30 days.
- Server logs are kept for a short time by our hosting provider.
- Records the law requires us to keep, such as what you paid us, are kept for as long as that law requires.
Your choices
- See and correct your details on the Account page.
- Download everything a business holds with "Export everything".
- Erase one customer's records from the Customers section.
- Delete a business from the Businesses page, or your whole account from the Account page.
- Ask us anything else, or complain, using the contact below. You can also complain to the privacy regulator where you live.
Cookies
Allotrope sets one cookie when you sign in, so the site knows it is you. It is essential and is removed when you sign out. There are no advertising or tracking cookies.
Security
Passwords are stored hashed, connections are encrypted, each business's records are kept behind its owner's login, and the database is backed up every day. No system is perfectly secure; if something goes wrong that puts your information at risk, we will tell you.
Children
Allotrope is for people running a business, and is not aimed at children. Someone under 18 may hold an account only where the law they live under lets them run a business and agree to the Terms.
If this policy changes
We change the version and date at the top and ask you to accept the new version the next time you sign in.
Contact
Privacy questions and requests: [a contact email address (to be added before launch)].