Legal
Privacy policy
How Passionfruit collects, uses, shares and protects personal information, and the choices and rights you have.
Last updated
This privacy policy explains how Alopay Inc., a Delaware corporation doing business as Passionfruit ("Passionfruit", "we" or "us"), handles personal information when you visit getpassionfruit.com (the "website"), book a call with us, or work with us as a client or as a member of a client's team.
Who we are
Passionfruit provides search and AI search services to brands. Our software analyzes data from the tools a client connects, such as Google Search Console, Google Analytics 4 and the client's content management system, and turns it into action items and reports. Our team then does the work inside the client's own systems.
Alopay Inc. is the controller of the personal information described in this policy, except for client data as explained below. Our principal office is at 169 Madison Avenue, New York, NY 10016, United States.
Client data
When we deliver our services, we process data from the tools a client connects on that client's behalf. For that data, the client decides how it is used and we act as its processor under our data processing agreement. If your information is in a client's systems, such as their website analytics, please contact that client with questions about it.
Our commitment on AI training
We do not use client data, or personal information about you, to train, fine-tune or improve any artificial intelligence or machine learning model, whether our own or a third party's. We use AI model providers only under commercial API or enterprise terms that prohibit them from using our inputs and outputs to train their models, and we do not enable any setting that would allow it.
What we collect
Information you give us
- Booking a call: your name, work email address, company, website, role, and your answers about your business and goals. If you start the booking form but do not finish it, the answers you have entered may be recorded.
- Communications: the content of emails, messages and calls you have with us. With participants' knowledge, we may record, transcribe and summarize calls.
- Platform accounts: the names and work email addresses of client staff who log in to our platform.
- Billing: billing contact details, company details and payment records.
Information collected automatically
- Device and usage data: IP address, browser type, device type, pages viewed, referring page and the time of your visit, from our hosting provider's logs and the tools described under "Cookies and tracking" below.
- Visitor identification: when you visit the website from the United States, our provider RB2B may match your visit to a business profile, such as your name, job title, company, work email address and professional profile URL.
Information from other sources
- Booking details from our scheduling provider, Calendly.
- Business contact information matched to website visits by RB2B, as described above.
How we use it
- To respond to inquiries and hold the calls you book.
- To provide, manage and improve our services and platform.
- To set up and secure platform accounts, including sending login emails.
- To send service and account messages.
- To understand which businesses are interested in our services, and to contact business professionals about our services where the law allows, with an option to opt out at any time.
- To run, secure and fix the website.
- To invoice clients and keep business records.
- To meet legal obligations and to establish, exercise or defend legal claims.
We may create aggregated, anonymized data that cannot identify any person or client, and use it to improve our methods and benchmarks. We do not use it to train AI models.
Legal bases
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
- Contract: to provide services to clients, and to take steps you request before entering into a contract, such as booking a call.
- Legitimate interests: to run and secure our website and business, respond to inquiries, and tell business contacts about our services. We balance these interests against your rights.
- Consent: for non-essential cookies and certain marketing, where the law requires it. You can withdraw consent at any time.
- Legal obligation: to meet tax, accounting and other legal requirements.
How we share it
- Service providers: companies that help us run our website and services, listed on our subprocessors page. They may use your information only to provide services to us.
- Professional advisers: lawyers, accountants and auditors, under confidentiality obligations.
- Corporate transactions: a buyer or successor in a merger, acquisition or sale of assets, subject to this policy.
- Legal requirements: authorities or other parties where the law requires it, or to protect our rights, our users or others.
- With your consent: in any other case where you ask us to.
We do not sell personal information for money.
Cookies and tracking
The website uses cookies and similar technologies that it needs to work. It also uses:
- HubSpot, to record inquiries and understand how visitors use the website;
- RB2B, to identify the companies and business professionals who visit the website from the United States;
- Calendly, whose booking widget may set its own cookies when it loads.
You can block or delete cookies in your browser settings. Where the law requires it, we ask for your consent before setting non-essential cookies. To opt out of visitor identification, email privacy@getpassionfruit.com.
Retention
We keep personal information only for as long as we need it for the purposes in this policy, or as the law requires. In particular:
- inquiry, booking and sales contact data: up to 24 months after our last contact with you;
- platform account data: for the client engagement, then deleted within 30 days after it ends;
- call recordings and transcripts: for the client engagement or sales process, then up to 12 months;
- server and security logs: up to 12 months;
- billing records: as long as tax and accounting laws require.
Client data processed on a client's behalf is deleted within 30 days after the engagement ends, as set out in our data processing agreement.
International transfers
We are based in the United States, and all the personal information we hold is stored in the United States. If you are outside the United States, your information is transferred to the United States. Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. You can ask us for a copy by emailing privacy@getpassionfruit.com.
Your rights
European Economic Area, United Kingdom and Switzerland
You have the right to access, correct or delete your personal information, to restrict or object to how we use it (including for direct marketing, at any time), to receive it in a portable format, and to withdraw consent where we rely on it. You may also complain to your local data protection authority. In the United Kingdom, this is the Information Commissioner's Office.
United States
Depending on the state you live in, such as California, Colorado, Connecticut or Virginia, you may have the right to:
- know what personal information we collect about you and access it;
- correct inaccurate information;
- delete your information;
- opt out of the sale or sharing of personal information, targeted advertising and certain profiling;
- appeal our decision on your request;
- not be treated differently for exercising these rights.
In the past 12 months we have collected the following categories of personal information described in the California Consumer Privacy Act: identifiers, internet or other network activity, professional or employment-related information, commercial information, and audio recordings of calls. We collect them from the sources and use them for the purposes described above. We do not collect sensitive personal information.
You may use an authorized agent to make a request for you. We may ask the agent for proof of authorization and ask you to verify your identity.
How to make a request
To exercise any of these rights, email privacy@getpassionfruit.com. We will verify your identity before acting on your request and respond within the time the law requires, usually within 30 days. Requests about data in a client's systems will be passed to that client.
Children
The website and our services are for businesses and are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
Security
We use technical and organizational measures to protect personal information, including least-privilege access, single sign-on and multi-factor authentication, and encryption in transit and at rest. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. To report a security concern, email security@getpassionfruit.com.
Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If we make material changes, we will tell clients by email before they take effect.
Contact
For questions about this policy or your personal information, email privacy@getpassionfruit.com, or write to Alopay Inc., 169 Madison Avenue, New York, NY 10016, United States.