Privacy Policy

Introduction

Altitut.ai ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website altitut.ai and use our AI-powered entrepreneurship platform services.

By accessing or using our services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access our services.

Educational Institutions & FERPA Compliance

Altitut acts as a "School Official" with legitimate educational interests under the Family Educational Rights and Privacy Act (FERPA) when partnering with colleges, universities, and K-12 institutions. All student educational records remain under the direct ownership and control of the institution. Student data is processed strictly to provide platform services and is never sold, monetized, or used for behavioral advertising.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Submit pitch materials or business ideas
• Participate in our training programs
• Contact us with inquiries
• Subscribe to our newsletter or marketing communications

This information may include:

• Name and email address
• Phone number
• Company or organization name
• Professional background and experience
• Business ideas and pitch content
• Educational institution (for students and educators)

Usage Data

We automatically collect certain information when you visit, use, or navigate our platform:

• IP address and browser type
• Device information (type, operating system, unique device identifiers)
• Pages visited and time spent on pages
• Features used and interactions with our AI tools
• Referring website addresses
• Date and time of visits

AI Processing & Zero Data Retention (ZDR)

When you interact with our AI tools, your prompts, pitch materials, and inputs are processed transiently via enterprise commercial AI APIs (such as OpenAI Enterprise and Google Gemini Enterprise APIs) with Zero Data Retention (ZDR). Your inputs and institutional data are NEVER used to train, retrain, or improve public or base AI models.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Improve, personalize, and expand our services
• Develop new products, services, and features
• Process your transactions and manage your account
• Communicate with you about updates, promotions, and news
• Provide customer support and respond to inquiries
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues
• Comply with legal obligations

AI Feature Controls & Opt-Out

Institution administrators and individual users have full control to enable, restrict, or disable AI features through administrative tenant settings.

Information Sharing and Disclosure

We may share your information in the following situations:

Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as hosting, data analysis, payment processing, email delivery, and customer service.

Educational Partners

If you access our services through an educational institution, we may share your progress and performance data with authorized educators and administrators at your institution.

Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

Law Enforcement Requests

Altitut will never disclose customer, student, or institutional data to law enforcement or government agencies without a binding court order, valid warrant, or legal subpoena, except where required by emergency life-safety laws.

With Your Consent

We may share your information for any other purpose with your explicit consent.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Secure data centers with physical security controls

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Data Ownership, Export & Disposal

Institutions retain 100% ownership of all submitted data, pitch materials, and generated outputs. Institutions may request a full export of their data at any time. Upon contract termination or account closure, data will remain available for export for 90 days, after which all copies are permanently destroyed in accordance with NIST SP 800-88 data sanitization standards.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider:

• The nature and sensitivity of the information
• The purposes for which we process the information
• Legal and regulatory requirements
• The potential risk of harm from unauthorized use or disclosure

Your Rights and Choices

You have certain rights regarding your personal information:

Access and Portability

You can request access to the personal information we hold about you and receive a copy in a structured, commonly used format.

Correction

You can request that we correct any inaccurate or incomplete personal information.

Deletion

You can request that we delete your personal information, subject to certain legal exceptions.

Opt-Out

You can opt-out of receiving marketing communications from us by following the unsubscribe instructions in those communications or by contacting us directly.

Do Not Track

Our website does not currently respond to Do Not Track browser signals.

International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

Children's & Student Privacy

Our direct commercial services are intended for users aged 18 and older. Students under 18 participating through authorized high school entrepreneurship programs use the platform under institutional consent in compliance with COPPA and FERPA guidelines. We do not knowingly collect personal information directly from children under 13 without appropriate school or parental consent.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: