Aligno
Sign up
Back to Home

Privacy Policy

Last updated: June 7, 2026

At Aligno, we care about privacy. We collect as little data as possible, use it responsibly, and never sell it.

This Privacy Policy explains what data we collect, why we collect it, and your rights under the GDPR.

1. Who this policy applies to

This policy applies to:

  • Visitors to the Aligno website
  • Users who create an Aligno account (“Creators”)
  • People who view, comment on, or approve work through Aligno links (“Clients”)
  • People who review shared webpages through the Aligno Chrome extension

It covers Aligno and all related domains we operate (including proxy domains), as well as the Aligno Chrome extension workflow for webpage review.

2. Who we are (GDPR requirement)

Data Controller:
Overdiek Software Development, operating as Aligno
EU

Contact:
📧 [email protected]

3. What data we collect (and why)

A. Account data (Creators)

If you create an account, we may collect:

  • Email address
  • Name (optional)
  • Billing details (handled by our payment provider)

Why: To create your account, authenticate you, provide the Service, and manage billing.

Legal basis: Contractual necessity (GDPR Art. 6(1)(b))

B. Client data (no account required)

When someone comments or approves work, we may collect:

  • Name or nickname (optional)
  • Email address (optional)
  • Comments and approval actions
  • For webpage reviews, the reviewed page URL or pathname and related pin context such as viewport and comment position

Why: To show who left feedback and provide approval history, and to place comments in the correct location on the reviewed asset or webpage.

Legal basis: Legitimate interest (GDPR Art. 6(1)(f))

C. Extension session & access data

When the Aligno Chrome extension is used for webpage review, we may collect and process:

  • The share link and webpage URL being reviewed
  • An optional share password, if the shared review link is password protected
  • Reviewer name stored locally in the extension
  • Local session state needed to keep the review active across page loads

Why: To authenticate access to protected review links, open the correct webpage for review, and keep the extension working while the reviewer navigates the site.

Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) and contractual necessity where applicable

D. Content data

We process content you choose to share:

  • Designs, images, URLs, screenshots
  • Comments, replies, approvals
  • For webpage reviews, page-level review context such as page URL, viewport type, viewport width, pin coordinates, and document height

Why: This is the core function of Aligno.

Legal basis: Contractual necessity

E. Technical & usage data

We automatically collect limited technical data:

  • IP address
  • Browser type
  • Device type
  • Basic usage events (e.g. page views)
  • For the Chrome extension, local browser storage used to maintain review session state, reviewer name, and viewport preferences

Why: Security, performance, and improving the Service.

Legal basis: Legitimate interest

F. Marketing email subscriptions (free tools)

Our free tools (such as the website annotation tool and the revision cost calculator) include an optional form to receive occasional tips by email. The tools work fully without it. If you opt in, we store:

  • Your email address
  • The fact and timestamp of your consent, and which tool you subscribed from
  • The IP address and browser user-agent at the time you subscribed (abuse prevention)

Why: To send you the occasional marketing email you asked for. We only send these if you explicitly consent.

Legal basis: Consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time using the unsubscribe link in every email, or by emailing us — see your rights below.

4. Cookies

We use only strictly necessary, first-party cookies — mainly for:

  • Authentication (keeping you signed in)
  • Security

Because we set no marketing or advertising cookies, we don’t show a cookie-consent banner. Our analytics (Plausible) is privacy-friendly and cookieless: it sets no cookies and does not track you across sites or build a profile of you. We do not use cookies for invasive tracking or advertising. You can control cookies through your browser settings.

5. Website review, proxy, and third-party content

Aligno may display third-party websites inside the Service for review purposes, either through our proxy-based viewer or through the Aligno Chrome extension, which opens the live website directly in the reviewer's browser.

Important points:

  • That content belongs to the original website owner
  • We don’t control or endorse third-party sites
  • Login credentials or form data entered on those sites are not stored by Aligno
  • For extension-based webpage review, Aligno may process the current reviewed page URL and comment placement context so feedback appears in the correct place
  • Data is processed only as needed to display and review the page
  • Only use Aligno on websites you are authorized to access.

6. How we share data

We do not sell personal data. We only share data with trusted service providers when necessary, such as:

  • Hosting & infrastructure
  • Email delivery
  • Payments
  • Error monitoring

All processors are contractually required to protect your data and comply with GDPR.

7. Data retention

We keep personal data only as long as needed:

  • Account data: while your account is active
  • Client feedback: as long as the related project exists
  • Billing data: as required by law
  • Logs & analytics: limited retention
  • Marketing subscribers: until you unsubscribe or request deletion

You can request deletion at any time.

8. Your rights under GDPR

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent (where applicable)

To exercise your rights, email us at:
📧 [email protected]

We’ll respond within 30 days.

9. International data transfers

Your data is stored in the European Union (Ireland). Some ancillary service providers (such as payment and email processors) may process data outside the EU. In those cases, we rely on EU Standard Contractual Clauses (SCCs) and only use GDPR-compliant providers.

We never transfer data without safeguards in place.

10. Security

We use appropriate technical and organizational measures, including:

  • Encryption
  • Access controls
  • Secure infrastructure
  • Least-privilege access

No system is 100% secure, but we take security seriously.

11. Children

Aligno is not intended for children under 16, and we do not knowingly collect their data.

12. Changes to this policy

We may update this Privacy Policy from time to time. If changes are significant, we’ll notify users. Continued use of Aligno means you accept the updated policy.

13. Contact & complaints

If you have questions or concerns:

📧 [email protected]

You also have the right to lodge a complaint with your local data protection authority.