Privacy Policy

Effective date: October 30, 2026

Ramos Digital, LLC, a Washington limited liability company doing business as ALPHA ("ALPHA," "we," "us," or "our"), provides business software for independent music professionals. This policy explains how we handle personal information when you use ALPHA, visit its website or public Rate Cards, submit an inquiry or booking, make a payment, or contact us.

This policy also covers information an ALPHA account holder enters about clients or other contacts. If you have a privacy question or request, contact support@alphaos.studio.

1. Information we collect

Account and profile information

We collect information used to create and manage your account, such as your name or display name, username, email address, login credentials, settings, and any profile photo you choose to provide. Passwords are stored as hashes rather than readable passwords.

Business records and client submissions

We collect the contacts, jobs, project information, Rate Card services, invoices, payment records, and income and expense records you create or import. These records may contain information about your clients or other people.

If you submit an inquiry or booking through a public Rate Card, we collect the information you provide, such as your name, email address, project details, and message, and provide it to the relevant service provider. Payment and booking activity may also generate confirmations and related records.

Bank information

If you connect a bank through Plaid, we receive account and transaction information made available for the connection. This can include account names, account type, masked account numbers, balances, and transaction details such as amounts, dates, and merchant descriptions.

Bank authentication takes place through Plaid or your financial institution. ALPHA does not receive your bank login credentials. We store a protected connection token to obtain authorized account and transaction information while the connection remains active.

Subscription and client payment information

Stripe processes ALPHA subscriptions and client card payments. We receive information needed to operate those features, such as customer and connected-account identifiers, subscription and account status, payment amounts, dates, fees, refunds, disputes, and payouts. Depending on the payment flow and account configuration, this may include related billing, business, and limited payment-method or payout-account information.

Stripe collects payment details and the verification information it requires through its payment and onboarding forms. ALPHA does not store full card numbers or card security codes.

Support and technical information

We collect messages and attachments you send to support and information needed to investigate them. Our systems and service providers may also process IP addresses, browser and device information, request times, page or request information, and security or diagnostic logs.

Error reports may include your user identifier, email address, technical error details, and relevant diagnostic context. Optional usage analytics, where offered, are described separately in Section 5.

2. How we use information

We use information to:

We do not sell or rent personal information, share it for cross-context behavioral advertising, or use client contact information to build ALPHA marketing lists. ALPHA does not display third-party advertising.

3. Public information and information shared with clients

When an account holder publishes a Rate Card, the information selected for that page becomes public. This may include a display name, photo, services, prices, and descriptions. Public information may be indexed by search engines or copied by others. Removing or unpublishing a page does not guarantee removal of copies held by third parties.

We share inquiries and booking information with the service provider the client chooses. We also share invoice, payment, and project-related information with the intended recipient when an account holder uses those features.

The service provider is responsible for how they use information in their own business and for their agreement with the client. This policy does not govern information a service provider keeps outside ALPHA.

4. Service providers and other disclosures

We use service providers to operate ALPHA. The information involved depends on the feature you use and the work the provider performs.

We may also disclose information when reasonably necessary to comply with law or legal process, protect rights and safety, investigate fraud or abuse, or obtain professional legal or accounting advice subject to appropriate confidentiality obligations.

If ALPHA is involved in a merger, acquisition, financing, reorganization, or sale of its business or assets, information may be disclosed or transferred as part of that transaction, subject to appropriate safeguards and applicable law. We will provide notice of material changes to how your information is handled.

5. Browser storage, diagnostics, and optional analytics

Necessary functionality

ALPHA uses browser storage and similar technology for sign-in, security, and preferences such as appearance. Payment and other service providers may use their own technologies to operate features you request and prevent fraud. Disabling necessary browser storage can prevent parts of ALPHA from working.

We use technical logs and error diagnostics to maintain the service. This is separate from optional product analytics and may include information about a request, page, or action associated with a technical problem. We do not use advertising cookies.

Optional usage analytics

Where optional usage analytics are available, they are disabled unless you choose to enable them. With your consent, we use PostHog to understand how ALPHA features are used and whether key workflows complete successfully.

This may include an account or analytics identifier, event times, basic technical information, referral or campaign information, and events such as account creation, onboarding completion, Rate Card publication, invoice sending, payment confirmation, and job closure. These events are used to understand and improve ALPHA, not to target advertising.

You can withdraw optional analytics consent using the available privacy controls or by contacting support. Withdrawal stops future optional collection after the change is applied. Processing needed for account security, billing, transaction records, and service diagnostics continues as described in this policy. Requests concerning information already collected are handled under Section 8.

Browser privacy signals

ALPHA does not use browser "Do Not Track" settings as a consent mechanism for optional analytics. Use the available privacy controls or contact us to change your preferences. We honor legally recognized opt-out preference signals where applicable law requires them. We do not permit third parties to use ALPHA to collect personal information for cross-context behavioral advertising.

6. Information about clients and other people without accounts

You do not need an ALPHA account for us to hold information about you. A service provider may enter your information as a contact or client, or you may submit an inquiry, book a service, or pay an invoice.

We use that information to provide the relevant business tools, deliver requested communications, process chosen payments, provide support, maintain security, and meet legal obligations. We do not add you to an ALPHA marketing list because of that relationship.

Contact support@alphaos.studio with a privacy request or a concern about messages sent through ALPHA. We may need to verify your identity and coordinate with the account holder whose records contain the information. We do not disclose another person's private information merely because someone asks for an export.

When we honor a request to suppress email, we may retain the minimum information needed to recognize the address and maintain the suppression. We will explain any limit on the request, such as a communication required by law or specifically requested by you.

7. How long we keep information

We retain personal information for as long as reasonably necessary to provide the service you request, maintain required business and payment records, resolve disputes, prevent fraud, and meet applicable legal obligations. The period depends on the type of information, the purpose for keeping it, the status of your account or transaction, and any applicable legal or payment-provider requirement.

You can request account deletion in Settings or by contacting support. We may restrict your account and keep the request pending while completing a bank disconnection or resolving a specific record-retention requirement. Retention is limited to the information needed for the relevant purpose and does not permit unrelated use. When information is no longer needed, we delete it or deidentify it.

Some copies may remain in protected backups until removed through the applicable backup lifecycle. Records may also remain where needed for an unresolved dispute, valid legal hold, or other applicable obligation. We process requests within the timeframes required by applicable law.

Disconnecting a bank stops future access through that connection once disconnection is completed. It does not, by itself, delete previously imported transactions. Stripe, Plaid, and other providers may retain information under their own legal obligations and privacy policies.

8. Your choices and privacy requests

You can use available account controls to view or export your records, correct information you entered, manage notifications, disconnect a bank, and request account deletion. You can also contact support@alphaos.studio for help.

Depending on your location and the laws that apply, you may have rights to access, correct, delete, or obtain a copy of personal information, withdraw consent, object to or restrict certain processing, or appeal a decision about a privacy request. To exercise an applicable right or request an appeal, email support and describe your request.

We may ask for information reasonably necessary to verify your identity or an authorized agent's authority. We may decline or limit a request where permitted by law, including to protect another person's information, comply with record-retention obligations, or preserve information needed for a legal claim. If we cannot fulfill a request, we will explain the applicable reason and any available appeal process.

We will not discriminate against you for exercising an applicable privacy right. Some information is necessary to provide the service; deleting it or withdrawing necessary authorization may prevent us from providing the affected feature.

9. Security and processing locations

We use administrative, technical, and organizational measures designed to protect personal information, including access controls and protection of account credentials and bank connection tokens. No service, storage method, or transmission system can be guaranteed completely secure.

We operate in the United States and use the providers described in this policy. Information may be processed in the United States and other countries where our providers operate. Their processing and storage locations can differ from the location of ALPHA's main application database. We use legally required safeguards for international transfers where applicable.

10. Children and account eligibility

ALPHA account holders must be at least 18 years old. ALPHA is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.

If you believe a child has provided personal information to ALPHA, contact support so we can investigate and take appropriate steps. Information an adult account holder provides about someone else is handled under the other provisions of this policy and applicable law.

11. Other services

ALPHA may link to or integrate with services operated by other companies. Their own privacy policies apply to information they handle independently. Review the notices provided by Stripe, Plaid, your financial institution, and other services you choose to use.

12. Changes to this policy

We may update this policy and will change the effective date when we do. For material changes, we will provide appropriate notice, such as an email to account holders or a prominent notice in ALPHA, before the changes take effect unless law or an urgent security need requires otherwise.

Where a change requires your consent, we will obtain it before applying that change. Posting a revised policy does not replace consent required by law.

13. Contact

Ramos Digital, LLC, doing business as ALPHA
Privacy questions and requests: support@alphaos.studio.