Privacy policy
What we collect, why, who else handles it, how long we keep it, and what you can ask of us. Last updated 27 September 2026.
Who we are
Allying is operated by PM Frontier LLC, a Wyoming limited liability company, 30 N Gould St, Sheridan, WY 82801. Write to hello@allying.com about anything in this policy, and a person answers.
What Allying is
Allying does a job your business has posted, such as social media manager, email marketer or receptionist. The work is done with AI and overseen by a named specialist who answers for it. The employee works in your own channels (Slack, Microsoft Teams, text, WhatsApp and email) and has its own phone number, and everything it does is written to a record you can read on a private work page. That is why we handle information: to do the job and to show you the work.
Who this policy covers
- Visitors to allying.com.
- Customers: the business that hires an Allying employee, and the people at that business who work with it.
- People who write to, text or call an Allying employee, including a customer’s own customers.
- Businesses we contact because they have posted a job, and the people we write to there.
What we collect on the website
If you fill in the form on allying.com, we receive what you type: a few words about the work, your work email address, and your website if you add it. The email address is stored encrypted, with a keyed hash beside it so we can find it again. Your IP address and browser details are hashed before they are stored, and are used only to limit repeat submissions.
We use PostHog to see how the site is used: the pages viewed, clicks, and recordings of visits, with what you type into forms masked. PostHog sets a cookie and uses your browser’s storage so it can recognize a returning visitor. You can turn this off, and back on, with the “Turn off cookies” button at the foot of every page.
What we collect when you hire
Your company and your people. Your company name, the job, and who at your company may speak for it: an owner, and the delegates and staff you name. For each person, the address they use on each channel (an email address, a mobile number, a Slack or Teams user, a WhatsApp number), so the employee knows who is talking to it.
Messages. What you and your team send the employee and what it sends back, in the channels you connect and on your work page. Before a message is stored or read by the employee, one-time codes, login links and passwords in it are replaced with “[redacted]”.
Calls. When a phone line is on for your job, the employee answers on its own number. It never claims to be a person, and it says it is an AI whenever anyone asks. When a call is recorded, the caller is told at the start. Calls are transcribed into your record.
Meetings. When you invite the employee to a video call (Zoom, Google Meet, Microsoft Teams or Webex), it joins as a named participant. The call is recorded and turned into text as it is spoken, with the names shown in the meeting, so the employee can follow and answer; its notes from the call go into your record. The meeting link is stored encrypted.
Files. The files you share and the work the employee makes (posts, emails, images, documents, reports). They are kept in our storage and, when your job has its own computer, on that computer.
Access you grant. When you connect an account, for example by adding the employee to your Slack workspace, the access the platform grants is sealed with AES-256-GCM under a key that is never stored in our database. It is opened only at the moment an action needs it, and it is revoked when the job ends. Some accounts, such as a mailbox, WhatsApp or Instagram, connect through Unipile, which holds that connection for us.
The record. Every action, approval, message, report and decision is a row in an append-only record, each row chained by hash to the one before, so it cannot be quietly edited. The record refuses to store anything shaped like a password or a key.
The employee’s notes. What the employee learns about your business and your preferences is kept as plain text for your company, with its history, and every entry says where it came from. One customer’s notes are never used for another.
Booking and billing. When you book the short call, Cal.com receives your name, email address and the time you choose. Stripe holds your card. We keep your Stripe customer and subscription identifiers and the status of each invoice, and we never see your full card number.
Approvals. Your yes, no and edits on each piece of work, with the time and the channel they came through. A standing permission you give (“post text without asking”) is a row in the record too, and you can take it back.
What we collect about businesses we contact
We look for businesses that have posted a job we do. We read postings from job data providers (such as TheirStack) and public job boards, and we read the business’s own website and public listings to understand it. We may do a first piece of the job from what the business has published and show it on a private page made for it.
To reach a business we use a work email address from the posting or the business’s own pages, or one found and checked by an email lookup service. We never make up an address from a pattern, and we keep a note of where each address came from. We may also call a number the business publishes.
If you do not want to hear from us, reply to our email or write to hello@allying.com, and we stop within 10 business days. We keep your address on a do-not-contact list so it stays that way.
How we use it
- To do the job you hired us for, in your channels and in your name, within the authority you have given.
- To show you the work: the work page, the reports, and the record behind them.
- To learn your preferences from your approvals and edits, for your company only.
- To reach businesses that have posted a job we do.
- To bill you, and to answer you when you write or call.
- To keep the service safe: limits on repeat requests, removing passwords and codes from messages, and checks that a message came from where it says.
- To see how our website and pages are used, and to make them better.
We do not sell personal information and we do not share it for advertising. We do not use your information to train AI models. OpenAI and Anthropic do not train on it under their business terms, and our requests to Deepgram opt out of its model improvement program.
Who else handles your information
Allying runs on other companies’ services. Each one sees only what its part of the work needs.
| Service | What it does | What it sees |
|---|---|---|
| OpenAI | Runs the employee’s work and its voice on calls | The conversation, instructions, files and tool results in each work session, and call audio |
| Anthropic | Writes many of the employee’s messages, judges drafts and checks facts against your sources | The conversation and the material needed for what it is asked |
| Makes images; looks up public business listings | The image brief; the business name or address looked up | |
| Vercel | Hosts the website, the work pages and the service; runs the employee’s computer | Data in transit, and what is on that computer |
| Neon | The database behind the record, messages and notes | Everything stored in the database |
| Telnyx | The employee’s phone number: calls, texts and WhatsApp | Phone numbers, message text, call audio |
| Twilio | Connects a caller to a person at Allying when a call is handed over | Phone numbers and call audio |
| Recall.ai | Joins your video calls as the employee | The meeting link, the call’s audio and video, the names shown in the meeting, the transcript |
| Deepgram | Turns meeting audio into text as it is spoken | The call’s audio and a list of names and words to hear right |
| ElevenLabs | Gives the employee a voice in some meetings and in audio and video pieces | The words to be spoken |
| Slack and Microsoft | The employee as a member of your Slack or Teams workspace | The channels and messages you give it access to |
| Unipile | Connects accounts such as a mailbox, WhatsApp or Instagram | Messages on the accounts you connect |
| Ayrshare | Publishes posts to your social accounts | The post and the accounts it goes to |
| Resend and Postmark | Send email from the service, such as a fresh link or a report | The recipient and the email |
| Smartlead | Sends our first email to a business that posted a job | The recipient and the email |
| Stripe | Billing | Card and invoice details |
| Cal.com | Books the short call | Your name, email address and the time you choose |
| PostHog | Shows us how our website and pages are used | Pages viewed, clicks, recordings of visits with typed text masked, and a visitor identifier |
| Findymail and BounceBan | Find and check a work email address at a business we contact | A person’s name and the business’s web address, or the address being checked |
| TheirStack, Apify, SerpApi, DataForSEO and Jina | Supply public job postings, business listings, reviews and web pages | The public name, address, page or search being looked up |
| Runway, Higgsfield and Taste Labs | Help make video and designs for pieces of work | The brief and the material given for that piece |
OpenAI does not use data sent through its API to train its models unless a customer opts in, and we have not. It keeps abuse-monitoring logs for 30 days, and keeps a work session until we delete it.
These services process information in the United States and in other countries.
How long we keep it
- The record is append-only and is kept after a job ends, as the evidence of what was done and billed.
- When a job ends, the access you granted is revoked the same day and the links to your work page stop working. Your export is ready: the employee’s notes with their full history, the pieces of work, and the record as CSV and JSON. It stays available for 30 days.
- 30 days after a job ends, we delete the employee’s work sessions at OpenAI and confirm it in your record, and the job’s phone number is released.
- Messages, files and the employee’s notes are kept after a job ends until you ask us to delete them. Write to hello@allying.com and a person will do it.
- Links to your work page last 90 days, and a fresh one is sent on request. A one-time code for a higher-risk approval is valid for 10 minutes, and the approval it confirms for 15 minutes.
- What you send through the website form is kept until you ask us to delete it.
- Businesses we contacted stay on our list so we do not write twice, and an opt-out is kept so it is honored.
Text messages
The employee has its own phone number, and you and your team can text it like any colleague. When text is one of the ways you want to hear from it, it texts you about the work: a piece waiting for your yes, a report, a note that your specialist will call. When your business asks it to, it may also text a person who contacted your business and asked for a reply by text, about that request only.
- Message frequency varies with the work. Message and data rates may apply.
- Reply STOP to any text to stop texts from that number. You get one text confirming it, and nothing after.
- For help, reply HELP or email hello@allying.com.
- All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Your mobile number and your consent are used only to send you the messages you asked for.
Every commercial email we send says who it is from, has a truthful subject line, carries our postal address, and has a way to opt out. We honor an opt-out within 10 business days, and we are responsible for this even when a service sends the email for us.
Security
Access you grant is sealed under a key the database never holds. Codes, login links and passwords are removed from incoming messages before they are stored. The record is chained by hash and refuses anything shaped like a password or a key. Every send, publish, message and spend is checked against the authority you have given, at the moment it happens. Nothing higher-risk goes out in your name without your yes, unless you have given standing permission for that kind of thing. The record shows it either way.
Your choices and rights
Whoever you are and wherever you live, you can ask us to:
- tell you what we hold about you;
- give you a copy (customers get the full export described above);
- correct it;
- delete it, apart from what the record must keep to show what was done and billed;
- stop texting or emailing you.
Write to hello@allying.com. A person answers, and we do not treat you differently for asking. We give these rights to everyone, whether or not a law requires it of a company our size. If you are in the European Union or the United Kingdom, you can also complain to your data protection authority.
Children
Allying is for businesses. We do not knowingly collect information from anyone under 16.
Changes
When this policy changes, the date at the top changes, and customers with a live job are told.
Contact
PM Frontier LLC, 30 N Gould St, Sheridan, WY 82801. hello@allying.com.