RALANO · Policies
Privacy Policy
Who we are and what this covers
RALANO, LLC operates ralano.ai, portal.ralano.ai and the ChatGPT Ultimate training service. This Privacy Policy covers website inquiries, accounts, protected training, the AI Coach when available, member updates and related support. It describes information handling for the features you actually use; publication does not make an unreleased feature available.
The portal uses email/password authentication, a database and functional browser storage. The public marketing website and the authenticated customer portal have different functions, but both link to this policy.
The entire training program, including the AI Coach, is available only to customers age 18 or older in the United States.
Information used to provide the services
Website inquiries and support
A website inquiry can include your name, company, email, area of interest and message. The contact form uses an email-delivery process, with your email used for replies; it is separate from the account database. While business email is unavailable, use the mailing address below for a request requiring receipt.
Accounts, training and access
Supabase supports account identity and email/password authentication, server-enforced entitlements, reading progress, protected training storage and media access. The portal uses browser storage for authentication/session and reading-position functionality. Private media uses protected delivery and temporary signed links.
Subscriptions and transactions
When an approved checkout is used, Stripe processes payment credentials. RALANO's application records payment-provider and subscription references, amounts, currency, offer and organization/campaign attribution, transaction and coverage dates, cancellation/refund/dispute history, and the terms and recurring-consent versions accepted for that transaction. Application tables do not need full card numbers or security codes. Webhook records use limited event identifiers, timestamps and a body hash rather than storing complete payment payloads.
Operational information
Hosting and application services may process request, device/browser, timestamp, error and security information needed to operate and protect the service. Bounded Coach diagnostics record status, model and usage counts without deliberately logging the question, answer, API key or raw provider error body. This is not a promise that infrastructure providers keep no logs.
Private AI Coach questions and history
These customer Coach rules apply when customer Coach access becomes available. The live customer release is being prepared; internal demo tests do not make the Coach publicly available.
Supabase stores Coach questions, answers and lesson references. A request to OpenAI includes your current question, up to four earlier user questions from the same owned conversation, and approved retrieved training excerpts.
The implementation requests store:false. That setting does not guarantee zero provider retention. Provider logs, safety processing and account-level data controls are separate from the application history described here.
For customer Coach use, customer-visible history expires 48 hours after your last message. Viewing a conversation does not restart that window. Original questions and answers are kept as restricted internal records for 90 days from each record’s creation; another message does not extend older records. Records stop being available through ordinary customer and authorized internal retrieval at expiry. Physical application deletion occurs in the next successful daily cleanup run. A delayed or failed run requires follow-up. A documented, record-specific legal or dispute hold may delay deletion until its stated expiry or release.
“Remove from history” hides a conversation while your Coach/history access remains available; it does not immediately erase restricted internal records. Use the contact methods below to request privacy deletion. Legacy records retain any earlier applicable actual-deletion option and maximum deletion date, subject to applicable documented holds. Application deletion does not promise that independent provider records or backups disappear on the same date.
Authorized quality review may use redacted questions and answers to identify unclear replies, errors and recurring training gaps. Reviewers must remove or generalize identifying and confidential information from improvement reports. Corrections require approved sources and testing before release. Customer exchanges and past model answers do not automatically become shared training knowledge. Human review is not activated merely by this policy; it requires authorized access and operating arrangements.
Avoid entering sensitive personal information, passwords, payment details or confidential material you are not authorized to share. AI can make mistakes; review important answers.
Notifications and browser storage
Browser storage supports authentication, session state, reading position and account preferences. Blocking or clearing functional storage can sign you out or affect saved preferences.
Where optional push notifications are offered, they require browser permission. A device subscription may include an endpoint, device keys, account ownership, preferences and delivery history. Browser and operating-system providers handle delivery. You can use your account without enabling push.
Where offered, Power Brief email preferences are separate from necessary account, security and billing messages. Notifications link to protected content rather than including private transcripts. Publication and Coach-knowledge approval are separate; unpublished material is not automatically available to the Coach.
How information is used and shared
RALANO, LLC may review AI Coach conversations to provide support, check accuracy and improve the Coach’s explanations and training materials. Access is restricted to authorized reviewers. Before examples are added to improvement reports or the shared knowledge base, we remove or generalize names, contact information and other identifying or confidential details. We do not publish identifiable customer conversations as examples or testimonials without separate permission.
The Coach sends the relevant question, permitted conversation context and retrieved training material to OpenAI’s API to generate an answer. RALANO does not opt customer conversations into OpenAI’s optional model-training sharing programs. Service processing, safety/security logging and provider retention are separate; this is not a promise that OpenAI never receives or retains data.
Private quality review supports source-backed improvements and does not automatically ingest customer exchanges. Human access and review schedules require separate authorization and are not represented as active by this policy.
Information is used for requested communications, authentication, access delivery, reading progress, billing, support, security and operational records. Service providers process information needed for those functions: Hostinger for website hosting and associated infrastructure; Supabase for account, database and protected storage services; OpenAI for Coach requests when available; and Stripe for payments, invoices and billing when used. Business mailboxes are currently hosted by Zoho but unavailable. Account/security email and website inquiry delivery use their configured email services. A proposed move to Google Workspace has not been completed.
Organization or campaign attribution does not give a group access to private Coach conversations or another group’s records. If group reporting is introduced, it is limited by assigned permissions and the reporting purpose. Preparing a group dashboard does not make it active or grant its administrators private review access.
Some pages request Google Fonts, and portal pages load their Supabase browser library from jsDelivr. Those providers receive the resource requests. Following an outbound Google Calendar booking link takes you to Google’s service. Independent services apply their own terms and privacy practices.
Retention, privacy requests and security
Coach application retention is described above. Other account, inquiry, support, financial, consent, access and security records are kept only as long as reasonably needed for their purpose and legitimate operational, legal, tax, dispute and recordkeeping needs. Independent provider logs and backups follow their own service settings and applicable obligations; we do not promise a universal deletion deadline for them.
Depending on applicable law and your circumstances, you may request access to, correction or deletion of your personal information, a portable copy, or an applicable opt-out. Contact us using the methods below and identify the request and the account or interaction involved. You do not need to create an account to make a request. We may ask for information reasonably necessary to verify identity or an agent’s authority. Do not send passwords, full payment-card details or secure account links.
We respond within the time required by applicable law. If a request is denied, you may appeal by contacting us again and identifying your original request and the reason you ask us to reconsider. We explain the outcome and any further rights that apply. Necessary legal, security or financial records may be retained where permitted or required. We do not discriminate against you for exercising applicable privacy rights.
Access controls restrict protected information. No website, email or Internet transmission can be guaranteed completely secure. Deleting application records does not itself erase independent financial records, provider logs or backups. Any legal or dispute hold must be documented and limited to the relevant records.
Contact and policy changes
Send current privacy requests or appeals to RALANO, LLC, Privacy Requests, 223 Colony Drive, Bristol, TN 37620. The planned support address is support@ralano.ai; it is currently unavailable and is not the current reliable request route. Use postal mail until this notice is updated.
For ordinary support inquiries, we aim to respond within 1–2 business days, Monday–Friday, after receipt. This is a response target, not a guarantee of resolution or a replacement for any legally required privacy-request deadline.
Changes will be posted with an effective date and version. Where applicable, material changes receive additional notice or consent. Historical accepted policy and transaction evidence is preserved; this publication does not rewrite an earlier agreement.