Privacy Policy - Allocate

Privacy Policy

Last Updated: March 2025

Allocate provides cloud-based asset allocation software to manage, coordinate, and document the distribution of valuable assets among stakeholders. Our platform facilitates collaborative decision-making through voting rounds and settlement processes.

Allocate's users include managers who coordinate asset allocations and participants who vote on asset preferences. Managers may include estate executors, business partners, liquidation coordinators, and other professionals managing asset distributions. Participants are stakeholders with decision-making rights in the allocation process.

Allocate is committed to respecting and safeguarding your personal information. Our practices are designed following multiple international data protection regulations, including but not limited to the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, the General Data Protection Regulation (GDPR) of the European Union, and applicable U.S. data protection laws. Wherever you are accessing our services from, know that your privacy is of utmost importance to us.

This Privacy Policy explains how, and for what purposes, we use the information collected about you via (a) our websites offered on or through our platform (the "Website"); (b) any text, pictures, media, data, or other information, materials, or content (collectively, the "Content") contained on or provided through the Allocate Website; and (c) all other Content, products or services provided by us to you (collectively, the "Services"). By using the Services, you consent to our collection and handling of personal information as described in this Privacy Policy.

Introduction

Capitalized terms shall have the meanings given to them in this Privacy Policy or the Terms of Use for the Services, as applicable.

When you use the Website or the Services, we may collect certain information about you such as your name, contact details, information about the device you use, and how you use the Website. We may also collect information about third parties where you provide information about those individuals through your use of the Website or the Services.

We collect this information about you so that we can provide the Services to you; run our business; further develop elements of the Services; personalize the Services to your preferences; contact you; and comply with the law.

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal information from a minor, we will take appropriate steps to delete such information.

How We Collect and Use Data

We collect and process personal information with transparency and fairness, adhering to internationally recognized data protection principles. Regardless of where you are from, we ensure that we have a legal basis, such as your consent or a legitimate business interest, for collecting and processing your data.

Create a User Account

When you create, or are invited to create, a user account, we collect your first and last name, an email address, your preferred language, and your preferred currency. This information is used to create and administer your online account.

User Sign-Up

If you are creating an account by yourself, you will be prompted to set your own password during the sign-up process. Please ensure your chosen password is secure and kept confidential.

Invitation-Based Account

If you are invited to create an account, a temporary password or invitation link will be sent to your email address to verify your identity and facilitate account setup. Do not disclose this information to anyone. We will never ask for your password in any communication, such as phone calls, text messages, or email messages.

Generate Settlement Reports

As part of the Services, managers have the capability to generate reports about asset allocations and settlement decisions. These reports may include private information about assets, their values, participant votes, and allocation decisions. Once a report is generated, it can be downloaded as a PDF or other file format and be shared outside the platform. While Allocate facilitates the creation of these reports, we do not control how they are stored, transmitted, or shared after they are generated. Users are solely responsible for safeguarding any reports they download or distribute and ensuring they are shared only with authorized parties.

Visiting Our Website

You do not have to register to visit our Website. In general, you can visit our Website without telling us who you are or submitting any personal information. However, we collect the IP (Internet protocol) addresses of all visitors to our Website and other related information such as page requests, browser type, operating system and average time spent on our Website, as well as information we or our partners have stored in cookies (more on that below), such as unique identifiers assigned to your browser. We use this information to help us understand our Website activity and to monitor and improve our Website.

Using Our Website

When using the Website, you are required to log-in using your user account and we collect the information described in the sections above as well as information about your participation in cases, voting rounds, and settlement activities.

Cookies

Our Website uses a technology known as "cookies". A cookie is a tiny element of data sent from our Website to a user's browser, which may then be stored on the user's hard drive to facilitate subsequent interactions with our site. Some cookies are essential for certain features and functionalities of our Website. While you can configure your browser to notify you about cookies or to reject certain cookies, not accepting essential cookies may hinder your experience and the full functionality of our Website.

Types of Cookies We Use

  • Essential Cookies: Required for authentication and core functionality, such as keeping you logged in securely. These cookies cannot be disabled without affecting your ability to use the Services.
  • Analytics Cookies: Help us understand how visitors use our Website and improve our services. You may opt out of these through your browser settings or by following the instructions below.

Analytics

We use product analytics tools to understand how users interact with our Website and improve our services. These tools may use cookies and similar tracking technologies to collect information about your usage patterns, pages visited, and features used.

We may also process personal information to improve internal operations, including troubleshooting, data analysis, testing, research, and statistical purposes.

Opting Out of Analytics

To opt out of analytics tracking, you can configure your browser to block third-party cookies or use browser extensions designed for privacy. You may also enable "Do Not Track" settings in your browser. Note that opting out of analytics will not affect essential cookies required for authentication and core functionality of the Services.

Sign-Up to Receive Marketing Communications

If you sign up to receive email marketing communications such as newsletters, we collect your email address as well as other information on an optional basis to help us tailor our communications to you. You can unsubscribe at any time by clicking the "unsubscribe" link included at the bottom of each marketing email. Please note that you may continue to receive account-related communications from us.

Connect With Us on Social Media

We may offer you the opportunity to engage with our content on or through third-party social networking websites, plug-ins and applications. When you engage with our content on or through third-party social networking websites, plug-ins and applications, you may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture, gender) to deliver the content or as part of the operation of the website, plug-in or application.

Participate in a Survey

From time to time, we may offer you the opportunity to participate in a survey. The information obtained through our surveys is used in an aggregated, de-identified form. We use this information to help us understand our users and to enhance the Website and Services.

Contact Us

When you contact us with a comment, question or complaint, you may be asked for information that identifies you, such as your name, location, email address, or telephone number, along with additional information we need to help us promptly answer your question or respond to your comment. We may retain this information to assist you in the future and to improve our customer service and the Services.

Note that if any of your personal details change during your use of our Website, you are responsible for updating them by accessing the relevant section of our Website, or by contacting us.

When Do We Share Your Data With Other Parties

We do not sell or disclose your personal information to third parties without your consent, except as set forth below or as required or permitted by law.

Service Features

The Services function as a collaborative decision-making tool, facilitating the sharing of information about assets and allocation preferences among authorized participants. Depending on the features and relevant privacy settings, certain personal information may be shared with other users associated with the same case. For example, managers can view participant votes and preferences, while participants can see information about assets in active voting rounds. All data sharing occurs within the context of authorized case participation.

Service Providers

Your personal information will be transferred (or otherwise made available) to certain third parties that provide services to us. We use service providers to provide or receive services such as hosting the Website, cloud storage, payment processing, customer support and issue-tracking capabilities, and advertising, analytics, and marketing services. Our service providers may be located in the U.S., Canada or other foreign jurisdictions.

Legal and Compliance

We and our Canadian, US and other foreign service providers may provide your personal information in response to a search warrant to other legally valid inquiry or order, or to another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing or preventing fraud, or as otherwise may be required or permitted by applicable Canadian, U.S. or other law or legal process, which may include lawful access by US or foreign courts, law enforcement or other government authorities. Your personal information may also be disclosed where necessary for the establishment, exercise or defense of legal claims and to investigate or prevent actual or suspected loss or harm to persons or property.

Sale of Business

We may transfer any information we have about you as an asset in connection with a proposed or completed merger, acquisition or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of Allocate or as part of a corporate reorganization or other change in corporate control.

Where We Store Your Data

By using the Website, you acknowledge that in order to perform the Services, we may need to transfer your personal data outside of your country to countries where Allocate maintains an office, or to countries where a service provider is tasked with fulfilling a request on your behalf. While these countries may have different data protection standards than your home country, we commit to always adhering to the higher standard of protection, whether mandated by applicable law or dictated by our own stringent policies. Regardless of where your data is transferred or processed, we assure you that it will be protected as outlined in this Privacy Policy.

Our data is hosted on cloud servers located in the United States and Canada.

Whenever we transfer your personal data outside of the country in which you reside, or when your data is stored on servers located in another country, we adhere to rigorous safety standards to ensure your data's integrity and security, including:

  1. Encryption: All data transfers are encrypted, ensuring that your information remains secure and unreadable during transit.
  2. Minimal Data Sharing: We only share the absolute minimum necessary data required to fulfill a specific request or service.
  3. Standard Contractual Clauses & Legal Safeguards: When transferring personal data from the European Economic Area ("EEA") or other jurisdictions with data transfer requirements, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, adequacy decisions (e.g., for transfers to Canada), or other lawful transfer mechanisms.
  4. Third-Party Accountability: Service providers and partners processing your data on our behalf are contractually required to comply with equivalent data protection safeguards.
  5. Compliance with Local Laws: In cases where local data protection laws offer higher standards, we comply with these laws to ensure maximum protection for your data.
  6. Regular Audits: Our data transfer processes undergo periodic reviews and audits to detect vulnerabilities and make necessary enhancements.
  7. Government Access Requests: In the event that a government or law enforcement authority requests access to your data, we assess the validity of such requests and only disclose personal data where legally required to do so.

We are committed to ensuring that your personal data is protected to a high standard, regardless of where it is transferred or stored.

Safeguards and Data Retention

Our security and data retention practices are in line with international standards to ensure the utmost protection for your personal data. We use industry-leading measures to prevent unauthorized access and ensure the confidentiality, integrity, and availability of the information we handle.

We have implemented reasonable administrative, technical and physical measures in an effort to safeguard the personal information in our custody or control against theft, loss and unauthorized access, use, modification and disclosure. Measures include:

  • Restrict access to personal information on a need-to-know basis to employees and authorized service providers who require access to fulfill their job requirements.
  • Provide a role-based permission system to restrict what different people can do and see. Managers have administrative access to cases they create, while participants have access only to the voting rounds and information relevant to their participation.
  • Follow strict guidelines in the storage and disclosure of personal data and communications that you have given us to prevent unauthorized access to it.
  • Have record retention processes designed to retain personal information for no longer than necessary for the purposes set out herein or as otherwise required to meet legal, regulatory or business requirements.

You can delete your user account at any time by contacting us. If you delete your account, information related to cases you participated in will continue to be accessible to managers and other authorized users of those cases. However, any attribution of such information to you will be removed from public view. Further, we may retain certain information to meet our legal or regulatory obligations.

Finally, all employees with access to private information pass a background check validation. Please contact us if you require details on our background check process.

Access to Your Data and Your Rights

We are committed to transparency and providing you with control over your personal data. You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data, subject to legal or regulatory retention requirements.
  • Data Portability: Request a copy of your personal data in a structured, commonly used format.
  • Withdraw Consent: Where we process your data based on consent, you have the right to withdraw that consent at any time.
  • Object to Processing: Object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We will respond to your request in accordance with applicable data protection laws.

Links

Our Website may contain links to other websites that Allocate does not own or operate. We provide links to third-party websites as a convenience to the users. These links are not intended as an endorsement of or referral to the linked websites. The linked websites have separate and independent privacy policies, notices and terms of use. We do not have any control over such websites, and therefore we have no responsibility or liability for the manner in which the organizations that operate such linked websites may collect, use or disclose, secure and otherwise treat personal information. We encourage you to read the privacy policy of every website you visit.

Updates to the Privacy Policy

From time to time, we may update this privacy policy to reflect changes to our privacy practices. Before any significant updates go live, we will place a banner on our Website or communicate with you via email to inform users about the upcoming changes. We encourage you to periodically review this page to ensure you are familiar with those changes. We will indicate at the top of this privacy policy when it was most recently updated.

Contact Us

For questions or concerns about how we handle personal data, or to understand more about our practices in relation to specific data protection regulations, or to request access to or correction of your personal information, please reach out to us at the email address provided on our contact page.