Privacy Policy

Effective Date: January 9, 2026

Allora Labs, Inc. (“Allora Labs,” “we,” “our,” or “us”) is committed to protecting privacy, respecting data sovereignty, and operating with transparency and integrity. This Privacy Policy describes how Allora Labs, Inc., a Delaware corporation, collects, uses, safeguards, and governs data in connection with our website, products, services, and business operations (collectively, the “Services”).

This Privacy Policy is designed to comply with applicable data protection laws and industry standards, including but not limited to the Federal Trade Commission (FTC) Act, state privacy laws such as the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), applicable State Attorneys General enforcement frameworks, the General Data Protection Regulation (GDPR), Federal Communications Commission (FCC) requirements, and recognized self-regulatory standards within the digital advertising industry.

1. Core Privacy Principles

We do not sell personal information.
We do not resell, rent, or trade personal data.
We design our systems to be privacy-safe, consent-based, and compliant by design.
We respect data sovereignty, meaning our customers retain control over the audiences and datasets they acquire from us.
We collect and process data only for legitimate business purposes aligned with lawful advertising and analytics use.

2. Scope of This Policy

This Privacy Policy applies to:

Visitors to our website
Customers and prospective customers
Business partners and vendors
Any individual interacting with our Services

This Policy does not govern third-party websites, platforms, or services that may be linked from our website or used independently by customers.

3. Data We Do Not Sell or Collect

Allora Labs does not sell personal information as defined under CCPA, CPRA, GDPR, or other applicable privacy laws.

We do not sell:

Names
Email addresses
Phone numbers
Physical addresses
Government identifiers
Sensitive personal information
Directly identifiable consumer records

We do not operate as a consumer data broker.

4. Data We May Process

In connection with our Services, Allora Labs may process the following categories of data:

Aggregated or anonymized telemetry data associated with activity patterns, locations, or timeframes
Privacy-safe advertising identifiers that are encrypted or irreversibly transformed (e.g., SHA-256 hashed data)
Business contact information voluntarily provided to us (such as name, company, email, or phone number)
Technical website data, such as IP addresses, browser type, and device characteristics

Any data processed is handled in accordance with applicable legal requirements and industry standards.

5. How We Use Data

Allora Labs uses data solely for legitimate business purposes, including:

Building and delivering privacy-safe advertising audiences
Providing analytics, reporting, and business intelligence services
Operating, securing, and improving our website and Services
Responding to inquiries and providing customer support
Complying with legal, regulatory, and contractual obligations

We do not use data for unlawful surveillance, discriminatory profiling, or deceptive practices.

6. Advertising and Audience Data

Audiences are built using privacy-safe telemetry data and behavioral analytics
Data is processed in accordance with platform ingestion requirements, including encryption and hashing standards
Audiences are delivered as assets controlled by the customer
Allora Labs does not retain rights to reuse or resell customer-owned audiences

7. Regulatory Compliance

Allora Labs operates in alignment with the following frameworks:

Federal Trade Commission (FTC)
State Attorneys General (including CCPA and CPRA)
Federal Communications Commission (FCC)
General Data Protection Regulation (GDPR)
Digital Advertising Alliance (DAA)
Network Advertising Initiative (NAI)
Interactive Advertising Bureau (IAB)
Major Advertising Platforms

8. Children’s Privacy

Allora Labs does not knowingly collect, process, or target data related to children under the age of 13, in compliance with the Children’s Online Privacy Protection Act (COPPA).

9. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect data against unauthorized access, disclosure, alteration, or destruction.

10. Data Retention

Data is retained only for as long as necessary to fulfill legitimate business purposes, contractual obligations, or legal requirements. When no longer required, data is securely deleted or irreversibly anonymized.

11. Data Sovereignty and Customer Control

Customers retain control over audiences acquired from Allora Labs. We do not claim ownership over customer-specific audiences beyond what is required to provide contracted services or comply with law.

12. International Data Transfers

Where applicable, data is processed using lawful transfer mechanisms recognized under GDPR and other international frameworks.

13. Your Rights

Depending on jurisdiction, individuals may have rights to access, correct, delete, or restrict processing of personal data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date.

15. Contact Information

Allora Labs, Inc.
A Delaware Corporation

By using our website or Services, you acknowledge that you have read and understand this Privacy Policy.