Terms of Use

Overview

The Service acts as a central hub for Customer Data, allowing Customer to collect Customer Data from its selected sources (“Sources”), such as its own or third-party websites or properties, and send the Customer Data to Alya’s Data Warehouse. The supported Sources and Destinations are identified in the Documentation.

1. Application of Terms

1.1 These Terms apply to your use of the Service (as that term is defined below). By setting up an account:

you agree to these Terms; and
where your access and use is on behalf of another person (e.g. a company), you confirm that you are authorised to, and do in fact, agree to these Terms on that person’s behalf and that, by agreeing to these Terms on that person’s behalf, that person is bound by these Terms.

1.2 If you do not agree to these Terms, you are not authorised to access and use the Service, and you must immediately stop doing so.

2. Changes

2.1 Alya may change these Terms at any time by notifying you of the change by email or by posting a notice on the Alya Website. Unless stated otherwise, any change takes effect from the date set out in the notice. You are responsible for ensuring you know and agree with the latest Terms. By continuing to access and use the Service from the date on which the Terms are changed, you agree to be bound by the changed Terms.

2.2 These Terms were last updated on 20 April 2020.

3. Interpretation

In these Terms:

Alya Software means the software owned by Alya (and our licensors) that is used to provide the Service.

Confidential Information means any information that is not public knowledge and that is obtained from the other party in the course of, or in connection with, the provision and use of the Service. Our Confidential Information includes Intellectual Property owned by Alya (or our licensors), including the Alya Software. Your Confidential Information includes the Data.

Data means all data, content, and information (including personal information) owned, held, used or created by you or on your behalf that is stored using, or inputted into the Service.

Fees means the applicable fees set out on our pricing page on the Website at https://www.alya.ai/plans/ or as agreed otherwise in writing between you and Alya, as may be updated from time to time in accordance with clause 7.6.

Force Majeure means an event that is beyond the reasonable control of a party, excluding: an event to the extent that it could have been avoided by a party taking reasonable steps or reasonable care; or a lack of funds for any reason.

Intellectual Property Rights includes copyright and all rights existing anywhere in the World conferred under statute, common law or equity relating to inventions (including patents), registered and unregistered trademarks and designs, data and databases, confidential information, know-how, and all other rights resulting from intellectual activity. Intellectual Property has a consistent meaning, and includes any enhancement, modification or derivative work of the Intellectual Property.

Objectionable includes being objectionable, defamatory, obscene, harassing, threatening, harmful, or unlawful in any way.

Permitted Users means your personnel who are authorised to access and use the Service on your behalf in accordance with clause 5.3.

Person includes an individual, a body corporate, an association of persons (whether corporate or not), a trust, a government department, or any other entity.

Personal Information means information about an identifiable living person.

Personnel includes officers, employees, contractors and agents, but a reference to your personnel does not include us.

Service means the service having the core functionality described on the Website, as the Website is updated from time to time.

Start Date means the date that you set up an account or first access or use the Service.

Terms means these terms titled SaaS terms of use.

Underlying Systems means the Alya Software, a SaaS platform for customer experience driven by artificial intelligence, used to provide the Service, including any third party solutions, systems and networks.

We, us or our means Alya and our company Index Web Marketing inc.

Website means the internet site at www.alya.ai, or such other site notified to you by us.

Year means a 12-month period starting on the Start Date or the anniversary of that date.

User means you or, if clause 1.1b applies, both you and the other person on whose behalf you are acting.

Words in the singular include the plural and vice versa. A reference to a statute includes references to regulations, orders or notices made under or in connection with the statute or regulations and all amendments, replacements or other changes to any of them.

4. Provision of the Service

4.1 We must use reasonable efforts to provide the Service:

in accordance with these Terms and laws in place;
exercising reasonable care, skill and diligence; and
using suitably skilled, experienced and qualified personnel.

4.2 Our provision of the Service to the User is non-exclusive. Nothing in these Terms prevents Alya from providing the Service to any other person.

4.3 Subject to clause 4.4, we must use reasonable efforts to ensure the Service is available. However, it is possible that on occasion the Service may be unavailable to permit maintenance or other development activity to take place, or in the event of Force Majeure. We must use reasonable efforts to publish on the Website and/or notify you by email advance details of any unavailability.

4.4 Through the use of web services and APIs, the Service interoperates with a range of third party service features. We do not make any warranty or representation on the availability of those features. Without limiting the previous sentence, if a third party feature provider ceases to provide that feature or ceases to make that feature available on reasonable terms, we may cease to make available that feature to you. To avoid doubt, if we exercise our right to cease the availability of a third party feature, you are not entitled to any refund, discount or other compensation.

5. Your Obligations

5.1 You and your personnel must:

use the Service in accordance with these Terms solely for:
1. your own internal business purposes;
2. lawful purposes (including complying with the Unsolicited Electronic Messages Act 2007)
not resell or make available the Service to any third party, or otherwise commercially exploit the Service unless you use the Agency Plan or explicit consent from Alya.

5.2 When accessing the Service, you and your personnel must:

not impersonate another person or misrepresent authorisation to act on behalf of others or us;
correctly identify the sender of all electronic transmissions;
not attempt to undermine the security or integrity of the Underlying Systems;
not use, or misuse, the Service in any way which may impair the functionality of the Underlying Systems or impair the ability of any other user to use the Service;
not attempt to view, access or copy any material or data other than:
1. that which you are authorised to access; and
2. to the extent necessary for you to use the Service in accordance with these Terms; and
neither use the Service in a manner, nor transmit, input or store any Data, that breaches any third party right (including Intellectual Property Rights and privacy rights) or is Objectionable, incorrect or misleading.

5.3 Without limiting clause 5.2, no individual other than a Permitted User may access or use the Service. You may authorise any member of your personnel to be a Permitted User, in which case you must provide us with the Permitted User’s name and other information that we reasonably require in relation to the Permitted User. You must procure each Permitted User’s compliance with clauses 5.1 and 5.2 and any other reasonable condition notified by us to you.

5.4 A breach of any of these Terms by your personnel (including, to avoid doubt, a Permitted User) is deemed to be a breach of these Terms by you.

5.5 You are responsible for procuring all licences, authorisations and consents required for you and your personnel to use the Service, including to use, store and input Data into, and process and distribute Data through the Service.

6. Data

6.1 You acknowledge that:

we may require access to the Data to exercise our rights and perform our obligations under these Terms; and
to the extent that this is necessary but subject to clause 9, we may authorise a member or members of our personnel to access the Data for this purpose.

6.2 You must arrange all consents and approvals that are necessary for us to access the Data as described in clause 6.1.

6.3 You acknowledge and agree that:

we may:
1. use Data and information about your and your end users’ use of the Services to generate anonymised and aggregated statistical and analytical data (Analytical Data);
2. use Analytical Data for our internal research and product development purposes and to conduct statistical analysis and identify trends and insights;
3. supply Analytical Data to third parties;
our rights under clause 6.3a above will survive termination or expiry of the Agreement; and
title to, and all Intellectual Property Rights in, Analytical Data is and remains our property.

6.4 You acknowledge and agree that to the extent Data contains personal information, in collecting, holding and processing that information through the Service, we are acting as your agent for the purposes of the Privacy Act 1993 and any other applicable privacy law. You must obtain all necessary consents from the relevant individual to enable us to collect, use, hold and process that information in accordance with these Terms.

6.5 While we will take standard industry measures to back up all Data stored using the Service, you agree to keep a separate back-up copy of all Data uploaded by you onto the Service.

6.6 You agree that we may store Data (including any personal information) in secure servers in Canada, United States or other territories deemed appropriate and may access that Data (including any personal information).

6.7 You indemnify us against any liability, claim, proceeding, cost and expense (including the actual legal fees charged by our solicitors) and loss of any kind arising from any actual or alleged claim by a third party that any Data infringes the rights of that third party (including Intellectual Property Rights and privacy rights) or that the Data is Objectionable, incorrect or misleading.

7. Plans and Fees

7.1 Service Plans

Alya makes available the Service through a “Discovery” plan (“Discovery Plan”), a Personalized plan (“Personalized Plans”), a Data Manager plan (“Data Manager plan”) and an Enterprise plan (“Enterprise plan”). Current plans are described at https://www.alya.ai/plans/ and Customer’s specific plan will be identified in the Order Form presented when Customer registers, orders or pays for the Service. Customer’s permitted scope of use – such as features available, permitted number of monthly tracked users (MTUs) and other usage limits – depends on the plan that Customer selects and will be specified on the applicable Order Form.

7.2 Paid Plans

All Paid Plans are provided on a subscription basis for a set term designated on the Order Form (each, a “Subscription Term”). Unless otherwise specified in the applicable Order Form, each Subscription Term shall automatically renew for the same period as the then-current Subscription Term unless either party gives the other written notice of termination at least thirty (30) days prior to expiration of the then-current Subscription Term (e.g., monthly Paid Plans will automatically roll over month-to-month and annual Paid Plans will automatically renew for additional 12-month periods).

7.3 Developer Plans and Trial Plans

A. Developer Plans. If Customer receives access to the Service through a Developer Plan, then Customer may use the Service in accordance with the terms and conditions of this Agreement for so long as Alya chooses to offer the Developer Plan.

B. Trial Plans. For Trial Plans, Customer may use the Service in accordance with this Agreement for the limited trial period designated on the Order Form or such other period as may be specified by Alya (the “Trial Period”). Trial Plans are permitted solely for Customer’s use to determine whether to purchase a Paid Plan. If Customer does not upgrade from a Trial Plan to a Paid Plan at the end of the Trial Period, then Customer’s access to the Service may be limited or suspended (to be determined at Alya’s sole discretion) until such time as Customer terminates this Agreement or converts to a Paid Plan.

C. Special Terms. Developer Plans and Trial Plans may not include all features or functionality offered as part of Paid Plans, and Alya reserves the right to add or subtract any features or functionality at any time for such plans. Alya has the right to suspend or terminate a Developer Plan or Trial Plan at any time for any reason.

7.4 Beta Releases

From time to time, Alya may grant Customer access to “alpha”, “beta”, updates, or other early-stage by-products (“Beta Releases”). While Alya may provide assistance with Beta Releases in its discretion, notwithstanding anything to the contrary in this Agreement, CUSTOMER AGREES THAT ANY BETA RELEASE IS PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. CUSTOMER FURTHER ACKNOWLEDGES AND AGREES THAT BETA RELEASES MAY NOT BE COMPLETE OR FULLY FUNCTIONAL AND MAY CONTAIN BUGS, ERRORS, OMISSIONS, AND OTHER PROBLEMS FOR WHICH ALYA WILL NOT BE RESPONSIBLE. ACCORDINGLY, ANY USE OF A BETA RELEASE IS AT THE CUSTOMER’S SOLE RISK. Alya makes no promises that future versions of a Beta Release will be released. Alya may terminate Customer’s right to use any Beta Release at any time for any reason or no reason in Alya’s sole discretion, without liability.

7.5 All fees for Paid Plans are as set forth in the applicable Order Form and shall be paid by Customer in accordance with the payment terms set forth in the Order Form. If no payment terms are specified in the Order Form, then the following default terms apply:

for monthly Paid Plans, Customer will pay all fees at the end of the month; and
for annual Paid Plans, Customer will pay all fees within thirty (30) days of invoice.

Except as expressly set forth in Section 12 (Modifications to Agreement), all fees are non-refundable. Alya reserves the right to increase the rates specified in the Order Form upon any renewal of a Subscription Term. Customer is required to pay any sales, use, GST, value-added, withholding, or similar taxes or levies, whether domestic or foreign, other than taxes based on the income of Alya. Any late payments shall be subject to a service charge equal to 1.5% per month of the amount due or the maximum amount allowed by law, whichever is less.

7.6 Alya will provide you with valid tax invoices on a basis prior to the due date for payment.

7.7 The Fees exclude taxes, which the User must pay on taxable supplies.

7.8 Alya may charge interest on overdue amounts. Interest will be calculated from the due date to the date of payment (both inclusive) at an annual percentage rate equal to the corporate overdraft reference rate (monthly charging cycle) applied by our primary trading bank as at the due date plus 2% per annum.

7.9 We may increase the Fees by giving at least 30 days’ notice. If you do not wish to pay the increased Fees, you may terminate these Terms and your right to access and use the Service on no less than 10 days’ notice, provided the notice is received by us before the effective date of the Fee increase. If you do not terminate these Terms and your right to access and use the Service in accordance with this clause, you are deemed to have accepted the increased Fees.

8. Intellectual Property

8.1 Subject to clause 8.2, title to, and all Intellectual Property Rights in, the Service, the Website, and all Underlying Systems is and remains Alya’s property (and our licensors’ property). The User must not contest or dispute that ownership, or the validity of those Intellectual Property Rights.

8.2 Title to, and all Intellectual Property Rights in the Data (as between the parties) remains property of the User. The User grants us a worldwide, non-exclusive, fully paid up, transferable, irrevocable licence to use, store, copy, modify, make available and communicate the Data for any purpose in connection with the exercise of our rights and performance of our obligations in accordance with these Terms.

8.3 To the extent not owned by us, you grant us a royalty-free, transferable, irrevocable and perpetual licence to use for our own business purposes any know-how, techniques, ideas, methodologies, and similar Intellectual Property used by us in the provision of the Services.

8.4 If you provide us with ideas, comments or suggestions relating to the Service or Underlying Systems (together feedback):

all Intellectual Property Rights in that feedback, and anything created as a result of that feedback (including new material, enhancements, modifications or derivative works), are owned solely by us; and
we may use or disclose the feedback for any purpose.

8.5 You acknowledge that the Service may link to third party websites or feeds that are connected or relevant to the Service. Any link from the Service does not imply that we endorse, approve or recommend, or have responsibility for, those websites or feeds or their content or operators. To the maximum extent permitted by law, we exclude all responsibility or liability for those websites or feeds.

9. Confidentiality

9.1 Each party must, unless it has the prior written consent of the other party:

keep confidential at all times the Confidential Information of the other party;
effect and maintain adequate security measures to safeguard the other party’s Confidential Information from unauthorised access or use; and
disclose the other party’s Confidential Information to its personnel or professional advisors on a need to know basis only and, in that case, ensure that any personnel or professional advisor to whom it discloses the other party’s Confidential Information is aware of, and complies with, clauses 9.1a and 9.1b.

9.2 The obligation of confidentiality in clause 9.1 does not apply to any disclosure or use of Confidential Information:

for the purpose of performing a party’s obligations, or exercising a party’s rights, under these Terms;
required by law (including under the rules of any stock exchange);
which is publicly available through no fault of the recipient of the Confidential Information or its personnel;
which was rightfully received by a party from a third party without restriction and without breach of any obligation of confidentiality; or
by us if required as part of a bona fide sale of our business (assets or shares, whether in whole or in part) to a third party, provided that we enter into a confidentiality agreement with the third party on terms no less restrictive than this clause 9.

10. Warranties

10.1 Each party warrants that it has full power and authority to enter into, and perform its obligations under these Terms.

10.2 To the maximum extent permitted by law:

our warranties are limited to those set out in these Terms, and all other conditions, guarantees or warranties whether expressed or implied by statute or otherwise (including any warranty under Part 3 of the Contract and Commercial Law Act 2017) are expressly excluded and, to the extent that they cannot be excluded, liability for them is limited to CAD $50; and
we make no representation concerning the quality of the Service and do not promise that the Service will:
1. meet your requirements or be suitable for a particular purpose;
2. be secure, free of viruses or other harmful code, uninterrupted or error free.

10.3 You agree and represent that you are acquiring the Service, and accepting these Terms, for the purpose of trade. The parties agree that:

to the maximum extent permissible by law, the Consumer Guarantees Act 1993 and any other applicable consumer protection legislation does not apply to the supply of the Service or these Terms; and
it is fair and reasonable that the parties are bound by this clause 10.3.

10.4 Where legislation or rule of law implies into these Terms a condition or warranty that cannot be excluded or modified by contract, the condition or warranty is deemed to be included in these Terms. However, our liability for any breach of that condition or warranty is limited, at our option, to:

supplying the Service again; and/or
paying the costs of having the Service supplied again.

11. Liability

11.1 Our maximum aggregate liability under or in connection with these Terms or relating to the Service, whether in contract, tort (including negligence), breach of statutory duty or otherwise, must not in any Year exceed an amount equal to the Fees paid by you relating to the Service in the previous Year (which in the first Year is deemed to be the total Fees paid by you from the Start Date to the date of the first event giving rise to liability). The cap in this clause 11.1 includes the cap set out in clause 10.2a.

11.2 Neither party is liable to the other under or in connection with these Terms or the Service for any:

loss of profit, revenue, savings, business, use, data (including Data), and/or goodwill; or
consequential, indirect, incidental or special damage or loss of any kind.

11.3 Clauses 11.1 and 11.2 do not apply to limit our liability under or in connection with these Terms for:

personal injury or death;
fraud or wilful misconduct; or
a breach of clause 9.

11.4 Clause 11.2 does not apply to limit your liability:

to pay the Fees;
under the indemnity in clause 6.7; or
for those matters stated in clause 11.3a to 11.3c.

11.5 Neither party will be responsible, liable, or held to be in breach of these Terms for any failure to perform its obligations under these Terms or otherwise, to the extent that the failure is caused by the other party failing to comply with its obligations under these Terms, or by the negligence or misconduct of the other party or its personnel.

11.6 Each party must take reasonable steps to mitigate any loss or damage, cost or expense it may suffer or incur arising out of anything done or not done by the other party under or in connection with these Terms or the Service.

12. Term, Termination and Suspension

12.1 Unless terminated under this clause 12, these Terms and your right to access and use the Service:

starts on the Start Date; and
continues until a party gives at least 30 days’ notice that these Terms and your access to and use of the Service will terminate on the expiry of that notice.

12.2 Either party may, by notice to the other party, immediately terminate these Terms and your right to access and use the Service if the other party:

breaches any material provision of these Terms and the breach is not:
1. remedied within 10 days of the receipt of a notice from the first party requiring it to remedy the breach; or
2. capable of being remedied; or
becomes insolvent, liquidated or bankrupt, has an administrator, receiver, liquidator, statutory manager, mortgagee’s or chargee’s agent appointed, becomes subject to any form of insolvency action or external administration, or ceases to continue business for any reason.

12.3 You may terminate these Terms and your right to access and use the Service in accordance with clause 7.6.

12.4 Termination of these Terms does not affect either party’s rights and obligations that accrued before that termination.

12.5 On termination of these Terms, you must pay all Fees for the provision of the Service prior to that termination.

12.6 No compensation is payable by us to you as a result of termination of these Terms for whatever reason, and you will not be entitled to a refund of any Fees that you have already paid.

12.7 Except to the extent that a party has ongoing rights to use Confidential Information, at the other party’s request following termination of these Terms but subject to clause 12.9, a party must promptly return to the other party or destroy all Confidential Information of the other party that is in the first party’s possession or control.

12.8 At any time prior to one month after the date of termination, you may request:

a copy of any Data stored using the Service, provided that you pay our reasonable costs of providing that copy. On receipt of that request, we must provide a copy of the Data in a common electronic form. We do not warrant that the format of the Data will be compatible with any software; and/or
deletion of the Data stored using the Service, in which case we must use reasonable efforts to promptly delete that Data.

To avoid doubt, we are not required to comply with clause 12.9a to the extent that you have previously requested deletion of the Data.

12.9 Without limiting any other right or remedy available to us, we may restrict or suspend your access to and use of the Service and/or delete, edit or remove the relevant Data if we consider that you or any of your personnel have:

undermined, or attempted to undermine, the security or integrity of the Service or any Underlying Systems;
used, or attempted to use, the Service:
1. for improper purposes; or
2. in a manner, other than for normal operational purposes, that materially reduces the operational performance of the Service;
transmitted, inputted or stored any Data that breaches or may breach these Terms or any third party right (including Intellectual Property Rights and privacy rights), or that is or may be Objectionable, incorrect or misleading; or
otherwise materially breached these Terms.

13. General

13.1 Neither party is liable to the other for any failure to perform its obligations under these Terms to the extent caused by Force Majeure.

13.2 No person other than you and us has any right to a benefit under, or to enforce, these Terms.

13.3 For us to waive a right under these Terms, that waiver must be in writing and signed by us.

13.4 Subject to clause 6.4, we are your independent contractor, and no other relationship (e.g. joint venture, agency, trust or partnership) exists under these Terms.

13.5 If we need to contact you, we may do so by email or by posting a notice on the Website. You agree that this satisfies all legal requirements in relation to written communications. You may give notice to us under or in connection with these Terms by emailing [email protected].

13.6 These Terms, and any dispute relating to these Terms or the Service, are governed by and must be interpreted in accordance with the laws of Quebec. Each party submits to the non-exclusive jurisdiction of the Courts of Quebec, in relation to any dispute connected with these Terms or the Service.

13.7 Clauses which, by their nature, are intended to survive termination of these Terms, including clauses 6.7, 8, 9, 11, 12.5 to 12.9 and 13.6, continue in force.

13.8 If any part or provision of these Terms is or becomes illegal, unenforceable, or invalid, that part or provision is deemed to be modified to the extent required to remedy the illegality, unenforceability or invalidity. If modification is not possible, the part or provision must be treated for all purposes as severed from these Terms. The remainder of these Terms will be binding on you.

13.9 Subject to clauses 2.1 and 7.6, any variation to these Terms must be in writing and signed by both parties.

13.10 These Terms set out everything agreed by the parties relating to the Service, and supersede and cancel anything discussed, exchanged or agreed prior to the Start Date. The parties have not relied on any representation, warranty or agreement relating to the Service that is not expressly set out in these Terms, and no such representation, warranty or agreement has any effect from the Start Date.

13.11 You may not assign, novate, subcontract or transfer any right or obligation under these Terms without our prior written consent, that consent not to be unreasonably withheld. You remain liable for your obligations under these Terms despite any approved assignment, subcontracting or transfer.

14. Google API Services & Data Privacy Policy

This section describes how Alya (“we”, “us”, “our”) accesses, uses, stores, and shares information obtained through Google API Services. ALYA’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

14.1 Google User Data Accessed

Depending on the Google services you choose to connect, Alya may access the following types of Google user data:

Google Ads

Campaign, ad group, and ad performance metrics (impressions, clicks, cost/spend, conversions, conversion value, CPC, CPM, CTR)
Campaign and ad group names and identifiers
Account-level information (account name, account ID)
Date-segmented performance data

Google Analytics 4 (GA4)

Session and user metrics (sessions, total users, new users, active users, bounce rate, session duration, page views, engaged sessions)
Traffic dimensions (source, medium, campaign, landing page)
Audience dimensions (device category, country, city, browser)
Event data (event counts, conversions, user engagement duration)

Google Search Console

Search performance data (search queries, pages, clicks, impressions, CTR, average position)
Dimensions (country, device, date, search appearance)

Google BigQuery

Query results from datasets that you explicitly grant access to (project ID and dataset ID required)

Google Sign-In (Authentication)

Basic profile information: name, email address, profile picture URL, and Google account identifier
This data is used solely for account creation and authentication purposes

14.2 How We Use Google User Data

We use the Google user data described above exclusively for the following purposes:

Campaign budget pacing and monitoring: Tracking advertising spend against planned budgets, projecting month-end spend, and generating variance alerts.
Performance analytics dashboards: Displaying campaign and website performance metrics within the Alya platform for your review and analysis.
Report generation: Creating performance reports and summaries based on your connected advertising and analytics accounts.
Account authentication: Verifying your identity and facilitating secure sign-in via Google OAuth.

We do not use Google user data for:

Advertising, retargeting, or marketing purposes
Training machine learning or artificial intelligence models
Selling or licensing data to third parties
Purposes unrelated to the Alya Service functionality described above

14.3 Data Sharing

We do not sell, rent, or share your Google user data with third parties for their own commercial purposes.

Your Google user data may be processed by the following components of the Alya platform:

Alya Connector (connectors.alya.ai): A stateless OAuth proxy service that facilitates the OAuth authentication flow and fetches data from Google APIs on your behalf. The Connector does not store any user data, tokens, or credentials. All data passes through in-memory during the request/response cycle only.
Alya Hub: The central platform where your encrypted OAuth tokens are stored and where analytics data is displayed. Access is restricted to your authorized account and permitted users.

We may disclose Google user data only when required by applicable law, regulation, or legal process, or to protect the rights, safety, or property of Alya, our users, or the public.

14.4 Data Storage & Protection

We implement the following security measures to protect your Google user data:

Token encryption: OAuth access tokens and refresh tokens are encrypted at rest using authenticated encryption (XSalsa20-Poly1305) with a 256-bit key derived via HKDF-SHA256. A unique random nonce is generated for each encryption operation.
Secure transit: All communications between the Alya Hub, Alya Connector, and Google APIs are encrypted using HTTPS/TLS.
Callback verification: OAuth callback requests are authenticated using HMAC-SHA256 signatures to prevent unauthorized token injection.
Access control: Google user data is accessible only to authenticated users within their own account scope. API access requires authentication via API key.
Minimal data retention: The Alya Connector is fully stateless and retains no user data. Only the Alya Hub stores encrypted tokens necessary for ongoing service operation.
Server location: Data is stored on secure servers located in Canada and/or the United States, as described in clause 6.6.
Log redaction: Sensitive fields (access tokens, refresh tokens, passwords) are automatically redacted from application logs.

14.5 Data Retention & Deletion

Retention:

OAuth tokens are retained in encrypted form for as long as your Google account remains connected to the Alya Service.
Google Sign-In profile data (name, email, profile picture) is retained for the duration of your Alya account.
Performance data fetched from Google APIs is used for display and reporting purposes and may be cached temporarily to improve platform performance.

Deletion:

Disconnect a service: You may disconnect any Google service at any time through your Alya account settings. Upon disconnection, the associated OAuth tokens are immediately and permanently deleted from our systems.
Account deletion: Upon termination of your Alya account, all Google user data (including OAuth tokens and profile information) is deleted in accordance with clause 12.8 of these Terms.
Data deletion request: You may request deletion of your Google user data at any time by contacting us at [email protected]. We will process deletion requests within 30 days.
Google account revocation: You may also revoke Alya’s access to your Google account at any time through your Google Account permissions page. Once access is revoked, we can no longer access your Google user data, and stored tokens become invalid.

14.6 Google API Services Limited Use Disclosure

Alya’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only use Google user data to provide and improve the Alya Service features described in this policy.
We do not transfer Google user data to third parties except as necessary to provide the Service, as required by law, or as part of a merger/acquisition with adequate data protection commitments.
We do not use Google user data for serving advertisements.
We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations with aggregated and anonymized data.