Privacy Policy

Information you give us

• Account information: your name, work email address, password, organization name, and your role and permissions in your organization.
• Contact and chat information: when you use the chat on our website, request a demo or contact us, we collect your name, phone number, email address, your message, and — if you agree to receive text messages — a record of your consent (what you agreed to, when, and from which page).
• Content you add: contacts you import or create, notes, tags, documents and reports you upload, and messages you send and receive through Coconut CRM.
• Connected accounts: if you connect your work email, calendar, another CRM or a lead-data provider, we receive the information needed to run that connection. Access keys and logins you give us are kept in restricted storage that only our servers can read, are never shown back in your browser, and are used only for that connection.
• Billing information: if you buy a paid plan, our payment processor collects your payment card details. We receive only limited details such as the card type, last four digits and billing history — never your full card number.
• Support and feedback: what you tell us when you email us, chat with us or answer a survey.

Information collected automatically

• Log and device data: IP address, browser and device type, pages and features used, searches, the date and time of your visit, and error reports.
• Sign-in security data: sign-in attempts and one-time-code checks, so we can protect accounts and limit abuse.
• Cookies and local storage: we use cookies and your browser’s local storage for essential functions, such as keeping you signed in, remembering your active workspace, and saving your recent searches on your device. We do not use advertising cookies or third-party ad trackers. The website chat is provided by our communications platform and may set its own functional cookies to keep your conversation going.
• Third-party content on our website: providers that deliver parts of our website — the chat window, web fonts and map tiles — receive technical information such as your IP address and browser type when your browser loads their content. We do not put advertising or cross-site tracking tools on our website.

Business information from other sources

To build the Service, we collect information about businesses, buildings and properties, and business contact information about people who work at those businesses — such as name, job title, employer, work email, work phone and business address. We get it from:

• public records and open data, including government property, parcel, assessor and mapping records, state business registries, SEC filings, and open map data such as OpenStreetMap and Overture Maps;
• businesses’ own public websites;
• licensed third-party business data providers, including providers that our customers connect using their own accounts; and
• our users, who may add or correct contacts in their own workspaces.

We do not intentionally collect sensitive personal information such as Social Security numbers, financial account numbers, health information, or precise geolocation about the people in the Service.

We use personal information to:

• provide, operate and maintain the Service, and create and manage accounts;
• show business information and business contact information to our subscribers so they can research commercial properties and reach decision makers for business purposes;
• send contacts to Coconut CRM or another system when a user asks us to, and run the features you use, such as email, calendar, calling and texting;
• respond to you, provide customer support, and send service messages such as sign-in codes, invitations, security alerts and account notices;
• send text messages you have agreed to receive, and send marketing emails you can unsubscribe from at any time;
• verify, de-duplicate, correct and enrich business records, including with software-generated estimates;
• secure the Service, prevent fraud and abuse, enforce our Terms, and keep records of consent and opt-outs;
• understand how the Service is used and improve it;
• process payments and keep business records; and
• comply with law and respond to lawful requests.

Some features use artificial intelligence services from our providers — for example to read figures from a property report you upload or to classify a business or a contact’s role. We send those providers only what the task needs, and they process it for us under their agreements with us.

If you opt in to text messages from Aloha AI Consulting LLC — for example through the chat on our website — we collect your mobile phone number, your name, the date, time and source of your consent, and the messages we exchange. We use this information only to send you the messages you agreed to receive (such as replies to your questions, scheduling and reminders, account and customer-care notices, and information about Coconut Wireless), to keep a record of your consent, and to honor your opt-out.

Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help; you can also email support@alohaaiconsulting.ai. Consent to receive text messages is not a condition of purchase. Full terms are in the SMS / Text Messaging Terms.

We share personal information only as described here:

• Service providers. Companies that run parts of the Service for us, under contracts that limit their use of the information to providing services to us: cloud hosting and databases, application hosting, email delivery, our CRM and communications platform (including messaging, calling and the website chat), maps and geographic data, business-data and contact-verification services, AI processing, website domain and DNS services, error monitoring, and payment processing.
• Our subscribers. Business contact information in the Service is made available to our subscribers so they can contact people for business purposes, subject to our Terms of Service.
• Within your organization. Information you add to an organization’s workspace is visible to that organization’s administrators and, depending on permissions, its other members.
• At your direction. When you connect another service or send contacts to a CRM, we share the information needed to do what you asked.
• Legal and safety. When we believe in good faith that the law, a court order or a government request requires it, or to protect the rights, property or safety of Aloha AI, our users or others, including to prevent fraud or abuse.
• Business transfers. In a merger, acquisition, financing, reorganization or sale of all or part of our business, subject to this Policy’s protections.
• With your consent, or as otherwise disclosed when you give us the information.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services. The text-messaging rules in Text messaging (SMS) apply on top of everything in this section: none of these categories includes sharing mobile numbers or text-message opt-in data and consent with third parties for their marketing.

Coconut Wireless helps commercial real estate professionals find the right people at businesses. If you work at a business, your business contact information — such as your name, title, employer, work email, work phone and business address — may appear in the Service. It comes from the sources described in Information we collect, and subscribers use it to contact people about commercial real estate and related business matters. Our Terms of Service allow subscribers to use it only for business purposes, and require them to get any consent the law requires before texting or calling anyone.

You can ask us at any time what we hold about you, ask us to correct it, or ask us to delete it and stop making it available — see Your privacy rights. If you ask us to remove you, we keep a minimal record (such as your email address) so that you stay removed if the same information reaches us again. We cannot delete copies that a subscriber has already saved to their own CRM or systems; contact that business directly for those.

Organizations that use the Service control the contacts, messages and other content they put into their workspaces and Coconut CRM. For that content, we act as a service provider (processor) on the organization’s behalf, and its own privacy policy governs it. If you are a contact of one of our customers and want to exercise rights over that information, please contact that customer directly. We will help our customers respond to such requests.

Depending on where you live, including California and other U.S. states with privacy laws, you may have the right to:

• Know and access the personal information we hold about you, including the categories, sources, purposes and recipients, and get a copy in a portable format;
• Correct inaccurate personal information;
• Delete personal information we hold about you, subject to legal exceptions;
• Opt out of the “sale” or “sharing” of your personal information, and of targeted advertising and profiling with legal or similarly significant effects;
• Limit the use of sensitive personal information (we use account passwords and sign-in data only to sign you in and keep your account secure);
• Appeal our decision on your request; and
• Not be discriminated against for exercising any of these rights.

How to make a request

Email support@alohaaiconsulting.ai with the subject line “Privacy request,” tell us what you are asking for, and include the name and email address or phone number the request is about. We will confirm receipt within 10 business days and respond within 45 days (we may extend this by another 45 days where the law allows and will tell you if we do). To protect you, we verify requests by matching the information you give us with what we hold, and may ask for more. You may use an authorized agent; we may ask the agent for proof of your permission and ask you to verify your identity. If we deny your request, you may appeal by replying to our decision with the subject line “Privacy appeal.”

Opting out of the Coconut Wireless database

We do not sell the personal information of our users, website visitors or people who text with us, or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. Separately, some state laws may treat making business contact information available to our subscribers — as described in If your business information is in Coconut Wireless — as a “sale.” To opt out of it, email support@alohaaiconsulting.ai with the subject line “Remove my information” and we will stop making your business contact information available to subscribers. We do not knowingly make available the personal information of anyone under 16.

Other choices

• Text messages: reply STOP to any message.
• Marketing emails: use the unsubscribe link in the email. We will still send service messages such as sign-in codes and account notices.
• Cookies: you can block or delete cookies in your browser, but signing in needs them.
• Your account: you can update your details in the Service or ask us to delete your account.

In the last 12 months we have collected the categories of personal information below. We collect them for the business purposes in How we use information, disclose them to the recipients in How we share information, and keep them as described in How long we keep information.

Do Not Track and Global Privacy Control. Our website does not change its behavior in response to browser “Do Not Track” signals. Because we do not sell or share website visitors’ personal information or use it for targeted advertising, there is nothing for a Global Privacy Control signal to switch off on our website; if that changes, we will honor those signals as the law requires.

California “Shine the Light.” We do not disclose personal information to third parties for their own direct marketing purposes.

We keep personal information only as long as we need it for the purposes in this Policy, then delete or de-identify it. How long depends on the kind of information and why we hold it:

• account information, for as long as your account is active, and afterwards only as long as needed to close the account, resolve disputes, enforce our agreements and meet legal obligations;
• text-message consent and opt-out records, for as long as needed to prove consent and honor opt-outs — at least four years after our last message to you;
• business contact records, until they are out of date, we no longer have the right to use them, or the person asks us to remove them;
• billing and tax records, for as long as tax and accounting laws require; and
• security, sign-in and error logs, for a limited period needed to protect the Service.

Deleted information may remain in backups for a limited time until they are overwritten.

We use administrative, technical and physical safeguards suited to the information we hold, including encryption in transit, two-step sign-in with one-time codes sent by email, access controls that keep each organization’s data separate, and limits on which staff and providers can access personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.

The Service is for business professionals and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us at support@alohaaiconsulting.ai and we will delete it.

We are based in the United States, and we and our providers store and process information in the United States. The Service is intended for use in the United States. If you use it from elsewhere, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.

The Service links to, and connects with, websites and services that we do not control, such as your email or calendar provider, map providers, and other CRMs. Their own privacy policies govern the information they collect. Please review them.

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date at the top. If a change is material, we will also notify you, for example by email or in the Service, before it takes effect. We will not use your mobile number or text-message consent in a way that is materially different from this Policy without your consent.

Questions or requests about this Privacy Policy or your personal information? Email support@alohaaiconsulting.ai. Aloha AI Consulting LLC is a California limited liability company and is responsible for the personal information described in this Policy.