Last Updated: May 16, 2026
PolicyAlpha LLC ("PolicyAlpha," "we," "us," or "our") wants you to be familiar with how we collect, use, and disclose information. This Privacy Policy describes our practices in connection with information that we collect through the website located at https://policyalpha.co and any other online services that link to this Privacy Policy (collectively, the "Services").
This Privacy Policy does not apply to third-party websites, services, or platforms that we do not operate, including Substack or other third-party services that may be linked from the Services.
1. Personal Information We Collect
"Personal Information" means information that identifies you as an individual or relates to an identifiable individual.
We collect minimal Personal Information through or in connection with the Services. Depending on how you interact with us, we may collect:
- Contact information, such as your name, email address, company, role, or other information you choose to provide when you contact us.
- Newsletter-related information, such as your email address, if you choose to subscribe to updates or other communications. Our mailing list is handled by Substack, as described below.
- Device and usage information, such as IP address, browser type, device type, operating system, referring URLs, pages viewed, and interactions with the Services.
- Approximate location information, which may be derived from your IP address, such as city, region, or country.
We do not intentionally collect sensitive Personal Information through the Services. Unless we specifically request it, please do not send us sensitive information, such as Social Security numbers, government identifiers, financial account information, health information, precise geolocation information, biometric or genetic information, information about race, ethnicity, religion, political opinions, sexual orientation, or criminal background.
2. How We Collect Personal Information
We and our service providers may collect Personal Information in the following ways:
Information You Provide
We collect Personal Information that you voluntarily provide to us, such as when you:
- contact us by email or through a form on the Services;
- request information from us;
- subscribe to updates or newsletters; or
- otherwise communicate with us.
Information Collected Automatically
We and our service providers may collect certain information automatically when you use the Services, including through cookies, pixels, local storage, analytics tools, log files, and similar technologies.
This information may include your IP address, browser type, device type, operating system, pages viewed, referring and exit pages, dates and times of visits, and interactions with the Services.
Information Collected by Third Parties
If you subscribe to our mailing list or newsletter through Substack, Substack may collect information from you directly. Substack's collection, use, and disclosure of your information is governed by Substack's own privacy policy and terms, not this Privacy Policy.
3. How We Use Personal Information
We and our service providers use Personal Information for the following purposes:
Providing and Operating the Services
We use Personal Information to:
- operate, maintain, and improve the Services;
- respond to your inquiries and requests;
- provide information that you request from us;
- send administrative information, such as updates to our terms, policies, or other important notices; and
- maintain the security and integrity of the Services.
Analytics and Website Improvement
We use analytics tools, including PostHog, to help us understand how visitors use the Services, identify usage trends, improve website performance, and make the Services more useful.
PostHog may collect information such as pages viewed, links clicked, session activity, browser information, device information, approximate location derived from IP address, and other usage information. We use this information to analyze and improve the Services.
Communications
We may use Personal Information to communicate with you, including to respond to your messages or provide updates that you request.
If you subscribe to our mailing list or newsletter, those communications may be managed through Substack. You may unsubscribe from Substack emails by using the unsubscribe link included in those emails or by following Substack's account or email preference options.
Business and Legal Purposes
We may use Personal Information as necessary or appropriate to:
- comply with applicable laws, legal processes, or governmental requests;
- enforce our Terms of Service or other agreements;
- protect our rights, privacy, safety, or property, and/or that of you or others;
- detect, prevent, or address fraud, security, or technical issues;
- conduct internal business operations; and
- support a merger, acquisition, financing, reorganization, sale, assignment, transfer, or other disposition of all or part of our business or assets.
4. How We Disclose Personal Information
We do not sell Personal Information. We also do not use Personal Information for targeted advertising.
We may disclose Personal Information in the following circumstances:
Service Providers
We may disclose Personal Information to service providers that perform services for us, such as website hosting, analytics, security, information technology, communications, and other operational support.
These service providers may include PostHog for analytics and other providers that help us operate the Services.
Newsletter Platform
If you subscribe to our mailing list or newsletter, you may provide information directly to Substack. Substack handles the mailing list and related email subscription functionality. Your interactions with Substack are governed by Substack's own privacy policy and terms.
Legal and Safety Purposes
We may disclose Personal Information as we believe necessary or appropriate to:
- comply with applicable law or legal process;
- respond to lawful requests from public or governmental authorities;
- enforce our Terms of Service or other agreements;
- protect our rights, privacy, safety, or property, and/or that of you or others; or
- detect, prevent, or address fraud, security, or technical issues.
Business Transfers
We may disclose or transfer Personal Information to a third party in connection with any proposed or actual reorganization, merger, acquisition, financing, sale, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or equity interests.
5. Cookies and Similar Technologies
We and our service providers may use cookies, pixels, local storage, and similar technologies to operate the Services, understand how visitors use the Services, improve performance, and analyze usage trends.
Cookies are small files stored on your device. They may allow us or our service providers to collect information such as browser type, pages visited, time spent on the Services, referring pages, and other usage information.
Most browsers allow you to refuse or remove cookies. If you disable cookies, some parts of the Services may not function properly.
We do not currently respond to browser "Do Not Track" signals.
6. PostHog Analytics
We use PostHog to help us understand how visitors use the Services and to improve our website.
PostHog may use cookies and similar technologies to collect information about your interactions with the Services, such as pages viewed, links clicked, session activity, browser and device information, and approximate location derived from IP address.
We use this information for analytics and website improvement. We do not use PostHog to sell Personal Information or for targeted advertising.
7. Substack Mailing List
We use Substack to manage our mailing list or newsletter.
If you subscribe to our mailing list, your subscription information, including your email address and related subscription activity, may be collected and processed by Substack. Substack's use of your information is governed by Substack's own privacy policy and terms.
You may unsubscribe from mailing list communications by using the unsubscribe link included in Substack emails or by following Substack's available email preference options.
8. Third-Party Services and Links
The Services may contain links to third-party websites, services, platforms, or content. This Privacy Policy does not address, and we are not responsible for, the privacy, information, security, or other practices of any third parties.
The inclusion of a link on the Services does not imply endorsement of the linked website, service, platform, or content.
9. Security
We seek to use reasonable organizational, technical, and administrative measures designed to protect Personal Information within our organization.
However, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us using the information in the "Contact Us" section below.
Because email communications are not always secure, please do not include sensitive information in emails to us.
10. Use of the Services by Minors
The Services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect Personal Information from individuals under 16.
If you believe that an individual under 16 has provided Personal Information to us, please contact us using the information below, and we will take appropriate steps to address the issue.
11. Jurisdiction and Cross-Border Transfer
PolicyAlpha is located in the United States.
Your Personal Information may be stored and processed in the United States and in any other country where we or our service providers operate. By using the Services, you understand that your information may be transferred to and processed in countries outside your country or state of residence, which may have data protection rules that are different from those of your jurisdiction.
12. Retention
We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
The criteria used to determine our retention periods include the length of time we have an ongoing relationship with you, whether retention is needed to comply with a legal obligation, and whether retention is advisable in light of our legal position, such as for statutes of limitations, litigation, or regulatory investigations.
Information collected or processed by Substack is retained according to Substack's own policies.
13. Your Choices
You may choose not to provide certain Personal Information, but doing so may limit your ability to use some features of the Services or communicate with us.
You may unsubscribe from newsletter or mailing-list emails by using the unsubscribe link included in those emails.
You may also configure your browser to refuse or delete cookies. If you do so, some parts of the Services may not function properly.
14. Updates to This Privacy Policy
The "Last Updated" date at the top of this Privacy Policy indicates when this Privacy Policy was last revised.
We may update this Privacy Policy from time to time. Any changes will become effective when we post the revised Privacy Policy on the Services, unless otherwise stated.
15. Contact Us
If you have questions about this Privacy Policy, please contact us at:
PolicyAlpha LLC
418 Broadway, Ste R
Albany, NY 12207
legal@policyalpha.co
Because email communications are not always secure, please do not include sensitive information in emails to us.