Last updated 12 September 2026
Privacy policy.
The privacy of your data, and it is your data, not ours, is a big deal to us. This policy lays out what we collect and why, how your data is handled, and your rights with respect to your data. We never sell your data. Never have, never will.
This policy applies to the alike.work website and to the Alike product, including our web and mobile applications, our command line and MCP integrations for coding agents, and the connections we offer to third-party tools such as Slack, Linear, GitHub, Google Workspace and Microsoft 365 (together, the “Services”). It covers site visitors, people on our waitlist, prospective customers, and customers and their authorized users. We refer to all of these as “you”.
This policy does not cover information about a customer’s end users, colleagues or contacts that Alike receives from a customer, or processes on a customer’s behalf, under a services agreement. Alike processes that information on the customer’s instructions, as a data processor or service provider, and our obligations for it are set out in the applicable services agreement and data processing addendum. If you are such an end user and have questions about how your information is handled, please contact the organization that provided it to us.
What we collect and why
Our guiding principle is to collect only what we need. Here is what that means in practice.
Identity and access
When you join our waitlist or sign up for Alike, we ask for identifying information such as your name, your work email address and your company name. That is so we can set up your account, tell you when your spot opens, and send you product updates and other essential information. With your consent, we will send you our newsletter and other updates, and you can opt out at any time. We may also give you the option to add a profile picture.
We will never sell your personal information to third parties, and we will not use your name or company in marketing without your permission.
Billing information
If you sign up for a paid plan, we ask for payment information and a billing address. Card details go directly to our payment processor and never touch Alike’s servers. We keep a record of each transaction, including the last four digits of the card, for account history, invoicing and billing support. We keep your billing address so we can charge you, calculate any tax due, send invoices and detect fraudulent transactions.
Product content
Alike keeps a live picture of your work: the tasks, decisions, people, meetings, documents and rules that you and your agents record, and the content you choose to connect from other tools, such as messages, calendar events, issues, pull requests and coding-agent sessions. We store this content so the Services can do what you signed up for: give your agents a shared, current picture of your work and act on the rules you set. We keep it for as long as your account is active. If you delete your account, we delete the content within 60 days.
Connected services
When you connect a third-party service, we access it only with the permissions you grant and only to provide the Services. You can disconnect a service at any time from your settings, and we stop reading from it. Content already copied into Alike stays until you delete it or close your account. Each connection is governed by that service’s own terms and privacy policy as well as this one.
Sharing within your organization
What your colleagues and their agents can see of your work is decided by you. What you create is private until you share it, and sharing is set item by item and property by property. These controls are enforced in our database rather than left to a model’s judgement: an agent cannot read what its person has not been given access to. When another person’s agent suggests a change to your work, it arrives as a proposal that you can accept, counter or decline.
AI processing
To provide the Services, we send relevant parts of your content to third-party AI model providers acting as our subprocessors, for example to summarize it, search it, or act on it under your rules. They process it only to provide the Services to you. Alike does not train models on your content.
General geolocation data
We log the IP address used to sign up for an account and keep it to help prevent abusive signups. We also log account access by IP address for security and fraud prevention, and we keep this login data for as long as your account is active. If you join the waitlist, we keep a salted hash of the IP address used, not the address itself, for 30 days to prevent abuse.
Website interactions
We may collect information about your browsing activity for analytics and statistical purposes, such as your browser and operating system versions, your IP address, which pages you visited and how long they took to load, and which site referred you to us. If you are signed in, this analytics data is tied to your account until your account is closed.
Cookies
We use first-party cookies and browser storage to keep you signed in and to remember your preferences. A cookie is a small piece of text stored by your browser. You can adjust cookie settings in your browser, although the Services may not function properly if you turn cookies off. We do not run advertising cookies on our sites.
Voluntary correspondence
When you email Alike with a question or to ask for help, we keep that correspondence, including your email address, so we have a history to refer to if you reach out again. We also keep information you volunteer, such as answers to surveys. If you agree to a customer interview, we will ask for your permission before recording it.
Mobile and desktop app permissions
Our apps may ask for your consent before accessing your calendar, contacts, notifications and other privacy-sensitive features of your device. Consent is optional and the apps work without it, though some features will be unavailable.
When we access or disclose your information
To provide the Services you have requested. We use third-party subprocessors, such as cloud hosting, email delivery and AI model providers, to run the Services. A current list of subprocessors is available on request at [email protected].
At your direction, through integrations. If you connect a third-party service, we exchange information with it on your behalf. Content you receive from or send to that service through Alike will be held by both Alike and that service.
With your permission, to help you. If we ever need to access your content to help with a support request, we will ask for your consent first.
When an automated process fails. No Alike human looks at your content except for limited purposes with your permission, or if an error stops an automated process and requires manual intervention to fix. These cases are rare, and when they happen we look for root causes so they do not recur.
To investigate, prevent or act on abuse. Accessing an account to investigate potential abuse is a measure of last resort. If we discover the Services being used for an unlawful or abusive purpose, we will take action as necessary, including notifying appropriate authorities where warranted.
Aggregated and de-identified data. We may aggregate or de-identify information collected through the Services and use it for any purpose, including analytics.
When required by law. Our policy is not to respond to government requests for user data unless compelled by legal process, or in limited circumstances in the event of an emergency request. If a competent authority has the necessary warrant, subpoena or court order requiring us to disclose data, we must comply. It is our policy to notify affected users before we disclose data unless we are legally prohibited from doing so, and except in some emergency cases. If we are audited by a tax authority, we disclose only the minimum billing information needed.
Finally, if Alike is acquired by or merges with another company, we will notify you well before any of your personal information is transferred or becomes subject to a different privacy policy.
Your rights with respect to your information
We aim to apply the same data rights to everyone, wherever they are. These include:
- Right to know. You have the right to know what personal information is collected, used, shared or sold. This policy sets out the categories and specific data we collect, and how we use them.
- Right of access. You have the right to access the personal information we hold about you, and to obtain information about how it is shared, stored, secured and processed.
- Right to correction. You have the right to request correction of your personal information.
- Right to erasure. You have the right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession and from our service providers. Fulfilling some deletion requests may prevent you from using the Services, in which case the request may result in closing your account.
- Right to complain. You have the right to make a complaint about our handling of your personal information with the appropriate supervisory authority.
- Right to restrict processing. You have the right to request restriction of how and why your personal information is used or processed, including opting out of any sale of it. Again: we never have and never will sell your personal data.
- Right to object. You have the right, in certain situations, to object to how or why your personal information is processed.
- Right to portability. You have the right to receive the personal information we hold about you and to transmit it to another party. You can export your data from your account settings or by asking us.
- Right not to be subject to automated decision-making. You have the right to object to and prevent any decision that could have a legal or similarly significant effect on you from being made solely on automated processes. This right is limited where the decision is necessary to perform a contract with you, is allowed by applicable law, or is based on your explicit consent.
- Right to non-discrimination. We will not charge you a different amount, offer you different discounts, or give you a lower level of service because you have exercised your privacy rights. Exercising some rights may, by their nature, prevent you from using the Services.
Many of these rights can be exercised by signing in and updating your account. Some information may be exempt from such requests under applicable law, for example information we must keep in order to provide the Services. We may need to take reasonable steps to verify your identity before responding, and if we cannot verify you, we may be unable to act on your request. To exercise any of these rights, or for help, contact us at [email protected]. If an authorized agent is corresponding on your behalf, we will need written consent from the account holder before proceeding.
Depending on applicable law, you may have the right to appeal a decision to deny your request; we will explain how in our response. You also have the right to lodge a complaint with a supervisory authority. If you are in the EU or UK, you can contact your data protection authority to file a complaint or learn more about local privacy laws.
How we secure your data
All data is encrypted in transit between our servers and your browser or device, and our database backups are encrypted. Data at rest is encrypted at the storage layer. Access to your data inside Alike is enforced by row-level rules in our database, so that every read on behalf of another person passes through the same access check.
If you believe you have found a security vulnerability, please write to [email protected] and we will respond promptly.
What happens when you delete content
When you delete content in Alike, it becomes inaccessible immediately. It may remain on our active servers for up to 30 days and in backups of our databases for up to 30 days after that, so any deleted content should be purged from all of our systems and logs within 60 days.
If you cancel your account, your content becomes inaccessible immediately and should be purged from our systems in full within 60 days. This applies whether the account owner cancels directly or the account is closed automatically.
Data retention
We keep your information for the time necessary for the purposes for which it is processed. How long we retain information depends on why we collected it, how we use it and the choices you make, after which we may delete or aggregate it. We may also retain and use information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. Where this policy gives a specific retention period, that period applies.
Location of site and data
The Services are operated from cloud infrastructure that may be located in the United States and the European Union. If you are located elsewhere, please be aware that information you provide to us will be transferred to and stored in those locations. By using the Services or providing us with your personal information, you consent to this transfer.
When transferring personal data from the EU or UK
Personal data transferred out of the EU or the UK must be treated with the same level of protection it has under EU and UK law. Alike offers a data processing addendum with Standard Contractual Clauses to customers who need one. Contact [email protected] to request it.
Changes and questions
We may update this policy as needed to comply with relevant regulations and to reflect new practices. Whenever we make a significant change, we will refresh the date at the top of this page and take any other appropriate steps to notify users.
Questions, comments or concerns about this policy, your data, or your rights? Email us at [email protected] and we will be happy to help.
Alike's policies are adapted from the Basecamp open-source policies, used under CC BY 4.0.