Privacy Policy

Fleek Sleek LLC ("FleekSleek", "we", "us", or "our") operates the Allen platform (the "Service"), an AI-powered LinkedIn commenting and professional engagement tool. Allen finds posts from the people you want to reach, drafts comments in your voice, and, once you connect your LinkedIn account, posts those comments from your account through LinkedIn's official API, either when you click Post or automatically through Autopilot. The Service includes the tryallen.ai website, the Allen Chrome extension, and the Allen mobile apps. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the practices described here, you should not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account and use the Service, we collect information you voluntarily provide, including:

• Account Information: Your name, email address, and password when you register for an account.
• Payment Information: Credit card or other payment method details necessary to process your Subscription. Payment data is processed and stored by our third-party payment processor and is not stored on our servers.
• Voice Profile Data: Your bio, writing style preferences, tone descriptions, and example comments that you provide to customize the generated content to match your voice.
• Topic Settings: Industry, keywords, excluded keywords, and target country preferences you configure to customize post discovery.
• Schedule Preferences: Your preferred run times, timezone, and automation settings.
• LinkedIn Connection: When you connect your LinkedIn account, LinkedIn gives us an access token together with your LinkedIn member ID, name, email address, and profile picture. We store the token encrypted at rest and use it only to publish your posts and to post comments, replies and likes from your account at your direction, and to read the comments and engagement on your own posts (see Section 15). We never receive, ask for, or store your LinkedIn password. LinkedIn tokens expire after about 60 days, and you can disconnect at any time from Settings.
• Autopilot Settings: If you turn on Autopilot, we store whether it is on, how many comments per day you allow, which days of the week it may run, which audiences it searches, and the history of what it scheduled, posted, and what you removed.
• Integration Credentials: If you connect a CRM (such as HubSpot, Salesforce, Pipedrive, GoHighLevel, or Monday.com) or a webhook (such as TaxDome through Zapier), we store the access token, API key, or webhook URL you provide, encrypted, so we can send the leads you choose to that system.
• Communications: Any messages, feedback, or support requests you send to us.
• Free Resources and Text Messaging: When you request a free resource from us, such as our LinkedIn playbook, we collect your first name, email address, and mobile number. We only send text messages to that number if you tick the box agreeing to receive them, in which case we also record the date and time you agreed and the exact wording you agreed to. Ticking that box is always optional.

1.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

• Usage Data: Information about how you interact with the Service, including pages visited, features used, actions taken (such as generating, rating, posting, or copying comments), comments and likes published from your LinkedIn account through the Service (including comments Autopilot posts for you and comments you remove from an Autopilot batch), and the dates and times of your activity.
• Chrome Extension Data: When you click the Allen button on a LinkedIn post, the extension sends that post's text and the author's name and headline to our servers so Allen can draft a comment, and it checks whether you are signed in to Allen. When you open a LinkedIn profile page, the extension sends that profile's URL to our servers to check whether the person is on your watchlist and whether Allen has a draft waiting for them. If you add someone to your watchlist, we store their public profile URL, name, and headline. Beyond that, the extension does not read other page content, your LinkedIn messages, your browsing history, or your LinkedIn login session.
• Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. See Section 6 for more details.

1.3 Information from Third Parties

• Professional Content Data: We use third-party data services to discover publicly available LinkedIn posts that match your audience and keyword settings. This includes the post text, post URL, and engagement counts, and information about the post's author that is publicly visible on LinkedIn: name, headline or job title, profile URL, and general location. We also collect public engagement on comments you post through the Service (such as likes and replies) so we can alert you to replies. Post authors are usually not Allen users. We process their public information only to help you decide whom to engage; we do not contact them ourselves and we do not sell it.
• LinkedIn: When you connect your LinkedIn account, LinkedIn provides the information described under "LinkedIn Connection" in Section 1.1.
• Payment Processor: Our third-party payment processor may provide us with limited information about your payment method, such as the last four digits of your card and billing address, for billing and fraud prevention purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To generate AI-powered comments tailored to your voice profile, discover relevant professional content, and deliver the core functionality of the platform.
• Posting on Your Behalf: To publish your own posts, comments, replies and likes from your LinkedIn account through LinkedIn's official API: when you click Post or Like or publish a post, at the time you scheduled a post, through Boosts you switched on for a post (a first comment you set up, and replies using text you set), or, if you have turned on Autopilot, on the schedule you chose. Autopilot only posts comments that were shown to you in that morning's preview and that you did not remove before their scheduled time.
• Integrations You Choose: To send lead details (the person's name, headline, profile URL, and the post and comment thread) to a CRM or webhook you connected, when you push a lead or turn on automatic pushing.
• Alerts: To email you when someone replies to a comment you posted, to send you Autopilot's daily preview and any pause notices, and to tell you about credit balances and LinkedIn reconnection deadlines.
• Account Management: To create and maintain your account, authenticate your identity, and manage your Subscription.
• Billing and Payments: To process payments, manage Subscriptions, send billing-related communications, and resolve payment disputes.
• Service Improvement: To analyze usage patterns, identify bugs, improve features, and develop new functionality.
• Communications: To send you important service-related notices (such as trial expiration reminders, billing confirmations, and policy updates), to respond to your support requests, and to send onboarding tips and occasional offers, which you can unsubscribe from at any time.
• Free Resources: To send you the resource you asked for and to follow up by email about it.
• Text Messages: If you opted in to text messages, to send you texts from the Allen Tips program, such as LinkedIn tips, product updates, and offers. We only text numbers whose owner has opted in. See Section 16.
• Security and Fraud Prevention: To protect against unauthorized access, detect and prevent fraud, and enforce our Terms and Conditions.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to respond to lawful requests from public authorities.
• Chargeback Defense: To retain and present evidence in connection with payment dispute investigations, as described in our Terms and Conditions.

3. How We Share Your Information

We do not sell your personal information.

We do not sell, rent, or share mobile phone numbers or text messaging opt-in data and consent with any third parties or affiliates for marketing or promotional purposes. Mobile numbers and opt-in records are handled only by the service providers we need in order to store them and to deliver our text messages (our database, customer records, and text message delivery providers), and only for those purposes.

We may share your information in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the Service, including:
  • Payment processing providers
  • Cloud hosting and database providers
  • AI and natural language processing providers
  • Data aggregation and web services providers
  • Email delivery providers
  • Text message delivery providers
  • Customer relationship and marketing tools (when you sign up, we add your name and email to our own customer records so we can onboard and support you)
  • Affiliate and referral tracking providers
  • Error monitoring and logging providers
  These providers are contractually obligated to use your data only for the purposes of providing services to us and to maintain appropriate security measures.
• Platforms and Integrations You Connect: At your direction we send data to LinkedIn (the comments and likes you post, including through Autopilot) and to any CRM or webhook you connect (the leads you push). Once data reaches those systems it is governed by their terms and privacy policies, not ours.
• Legal Requirements: We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the safety of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
• Payment Disputes: In connection with chargeback or payment dispute investigations, we may share relevant account activity, billing records, and consent documentation with card networks, payment processors, or financial institutions.

4. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, including:

• Active Accounts: We retain your data for as long as your account is active and you maintain a Subscription.
• After Account Closure: Following account termination, we may retain certain data for up to 12 months for legal compliance, dispute resolution, and fraud prevention purposes.
• Billing Records: We retain billing and transaction records for up to 7 years as required for tax and legal compliance.
• Text Messaging Consent Records: We retain your mobile number and opt-in record for up to four years after you unsubscribe from text messages, as described in Section 16.
• Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and service improvement purposes.

5. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

6. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for the Service to function properly, including session management and authentication.
• Preference Cookies: Store your settings and preferences, such as theme (dark/light mode) and display preferences.
• Analytics Cookies: Help us understand how users interact with the Service so we can improve functionality and user experience. We use Google Analytics, which runs by default when you visit the Service unless you decline the cookie banner; declining stops it immediately and keeps it off on future visits. Data collected is shared with Google LLC and is subject to Google's privacy policy. We also use Hotjar, which records how visitors use our pages, such as clicks, taps, scrolling and page visits, so we can see where pages are confusing. Hotjar hides what you type into forms. Like Google Analytics, Hotjar runs by default unless you decline the cookie banner; declining switches it off right away and keeps it off on future visits.
• Advertising Cookies: We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising, including page views and trial signups. The Meta Pixel runs by default when you visit the Service unless you decline the cookie banner; declining stops it immediately and keeps it off on future visits. When you create an account we also send a matching signup event to Meta from our servers, which includes an irreversibly hashed version of your email address so Meta can attribute the signup to the ad you saw without receiving your address in readable form. Data collected is shared with Meta Platforms, Inc. and is subject to Meta's privacy policy.
• Marketing Attribution: When you arrive from an ad or campaign link, we store the campaign parameters from that link (such as utm_source and utm_campaign) in your browser and, if you create an account, on your account record, so we can tell which campaigns bring people to the Service.
• Referral Cookies: We use Rewardful to credit partners who refer people to Allen. When you arrive through a referral link it sets a cookie so the referrer is credited if you subscribe. Because it exists only to honor the referral you arrived on, it loads regardless of your cookie banner choice. It is not used for advertising.

You can opt out of analytics and advertising cookies by choosing "Decline" on the cookie banner, and you can control or delete cookies through your browser settings. We also treat a Global Privacy Control (GPC) signal from your browser as a Decline. If you visit from the United Kingdom, the European Economic Area, Switzerland, or Canada, Google Analytics, Hotjar, the Meta Pixel, and the server-side signup event stay off until you choose "Accept"; until then we treat you as having declined. You can change your choice at any time with the "Cookie settings" link at the bottom of our website. When you have declined, we do not load Google Analytics, Hotjar, or the Meta Pixel, and we do not send the server-side signup event to Meta. Disabling essential cookies may prevent you from using certain features of the Service.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can update or correct inaccurate information through your account settings or by contacting us.
• Deletion: You can delete your account yourself from the Account page in the app, which cancels your subscription, removes your LinkedIn connection and any integrations, and deletes your data. You can also request deletion by contacting us at support@tryallen.ai. Certain data may be retained as described in Section 4.
• Disconnect: You can disconnect LinkedIn or any CRM at any time from Settings, which deletes the stored token. You can also revoke Allen's access from LinkedIn's own permitted-services settings. Disconnecting LinkedIn pauses Autopilot immediately.
• Data Portability: You can request a machine-readable copy of your data.
• Opt-Out of Marketing: You can opt out of promotional communications by following the unsubscribe instructions in our emails or by contacting us.
• Do Not Track and Global Privacy Control: We do not respond to "Do Not Track" browser signals, as there is no industry-standard protocol for compliance. We do honor Global Privacy Control signals as described in Section 6.

To exercise any of these rights, please contact us at support@tryallen.ai. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, sell, or share.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You have the right to ask us to correct inaccurate personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Sale and Sharing: We do not sell personal information. Our use of the Meta Pixel and the matching server-side signup event may count as "sharing" for cross-context behavioral advertising under California law. You can opt out of that sharing by choosing "Decline" on the cookie banner or by turning on Global Privacy Control in your browser; either one stops both the pixel and the server-side event.

To submit a CCPA request, contact us at support@tryallen.ai with the subject line "CCPA Request".

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. Where the law of your country requires it, such as UK or EU data protection law, we rely on the safeguards our service providers offer for these transfers, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or on the provider's certification under the EU-U.S. Data Privacy Framework and its UK Extension.

10. Children's Privacy

The Service is not directed to individuals under the age of 16, and our Terms do not allow anyone under 16 to use it. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child under 16, please contact us at support@tryallen.ai.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services, including professional networking platforms. We are not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with our Service.

12. AI and Data Processing

The Service uses third-party AI models, operated by our AI service providers, to draft comments. To do that, we send the model your voice profile data (bio, style preferences, and example comments), the text of the post being commented on, and the post author's public name and headline. Our AI providers are contractually barred from using this data to train their models, and we do not use your personal data to train third-party models. Generated content is stored in our database and associated with your account.

When Autopilot is on, Allen runs automated checks before scheduling a comment (for example, it skips posts that are too old, too short, or that fail its safety filters) and then posts the comments you did not remove during the preview window, as described in our Terms. Those checks reduce but do not eliminate the chance of an unsuitable comment, which is why every scheduled comment is shown to you in advance with a remove link.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of material changes by email or by posting a notice on the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data deletion requests, please include your account email address and specify what data you would like deleted. We will respond within 30 days.

15. LinkedIn Connection and Third-Party Platform Disclaimer

Fleek Sleek LLC and the Allen platform are independent products and are not affiliated with, endorsed by, sponsored by, or in any way officially connected with LinkedIn Corporation, Microsoft Corporation, or any of their subsidiaries or affiliates. "LinkedIn" is a registered trademark of LinkedIn Corporation. Any references to third-party platforms within this Privacy Policy are for descriptive purposes only and do not imply any partnership, endorsement, or affiliation.

Allen interacts with your LinkedIn account only through LinkedIn's official developer API, and only after you have connected your account by signing in on LinkedIn's own authorization page. LinkedIn then issues us a limited access token. We use that token to publish your own posts, post comments and replies from your account, like posts from your account, read the comments and engagement on your own posts (for analytics and, if you switched them on, automatic replies), and read basic profile details to confirm which account is connected. Allen does not send messages, send connection requests, follow people, or read your feed, messages, or connections. We never ask for or store your LinkedIn password, and we never log in to LinkedIn as you through a browser or session cookie.

Comments are posted either when you click Post or Like in Allen, or, if you have turned on Autopilot, automatically on weekdays at the times shown in your daily preview. Your own posts are published when you publish them or at the time you scheduled, and Boosts act only on the posts where you switched them on. Every Autopilot comment is emailed to you before it goes out with a link to remove it, and you can pause Autopilot or disconnect LinkedIn at any time from Settings, which deletes the token and stops all posting immediately. Your use of LinkedIn remains subject to LinkedIn's own terms and policies.

16. Text Messaging (SMS)

If you give us your mobile number and opt in, Fleek Sleek LLC ("Allen") will send you recurring text messages under the Allen Tips program. This section explains how that works.

• What we send: LinkedIn tips, product updates, and occasional offers related to Allen.
• How often: Message frequency varies. We expect to send no more than 8 messages a month.
• Cost: We do not charge for these messages. Message and data rates from your mobile carrier may apply.
• How to stop: Reply STOP to any message at any time. We will send one message confirming that you have been unsubscribed, and then no more. You can also email support@tryallen.ai and ask us to remove your number.
• How to get help: Reply HELP to any message, or email support@tryallen.ai.
• Consent is optional: Agreeing to receive texts is not a condition of buying anything from us or of getting the free resource you asked for.
• What we keep: We keep your mobile number, the date and time you opted in, and the wording you agreed to for as long as you are subscribed, and for up to four years after you unsubscribe so that we can show we had your consent and honor your opt-out. This is an exception to the shorter periods in Section 4: it applies even if you close your Allen account sooner, and whether or not you ever had one.
• Who delivers the messages: We use a text messaging provider to send these messages. Mobile carriers are not liable for delayed or undelivered messages.

Our full text messaging terms are in Section 18 of our Terms and Conditions.

17. United Kingdom and European Privacy Rights

If you are in the United Kingdom, the European Economic Area, or Switzerland, the UK GDPR, the EU GDPR, or the Swiss data protection law applies to how we handle your personal information. Fleek Sleek LLC is the controller of the personal information described in this policy.

17.1 Our legal reasons for using your information

• To provide the Service you signed up for (contract): your account, finding posts, drafting and posting comments, Autopilot, billing, and support.
• Our legitimate interests: keeping the Service secure, preventing fraud and abuse, fixing problems, improving the product, and sending you service emails about your account. We only rely on this where your rights do not outweigh our interest.
• Your consent: analytics and advertising cookies, the server-side signup event to Meta, marketing emails, and text messages. You can withdraw consent at any time, and withdrawing does not affect anything we did before.
• Legal obligations: keeping tax and payment records and answering lawful requests from authorities.

17.2 People whose LinkedIn posts Allen shows

To find posts for our users, Allen collects posts that LinkedIn members have published publicly, along with the author's public name, headline, profile link, and general location. We rely on legitimate interests for this: our users want to find and join relevant public conversations, and we use only information the author chose to publish. We do not use this information to build advertising profiles, and we do not sell it. Post data is tied to the Allen user it was found for and is deleted with that account, as described in Section 4. If you are a LinkedIn member and want us to stop processing your posts, or want a copy of what we hold about you, email support@tryallen.ai with your LinkedIn profile link and we will act on it within one month.

17.3 Your rights

You have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to how we use it (including objecting to anything we do on the basis of legitimate interests), and to withdraw consent at any time. We do not make decisions about you that have legal or similarly significant effects based only on automated processing. To use any of these rights, email support@tryallen.ai. We will respond within one month. You also have the right to complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to address your concern first.

18. Canadian Privacy Rights

If you are in Canada, we handle your personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, Quebec's Act respecting the protection of personal information in the private sector.

• Consent: We collect, use, and share your personal information only for the purposes described in this policy, with your consent, or as the law allows. You can withdraw consent at any time, subject to legal or contract limits, by contacting us. Withdrawing may mean we cannot provide some or all of the Service.
• Marketing email: We send you tips, product news, and offers only if you tick the box for them when you sign up. You can unsubscribe at any time from the link in any of those emails. Emails about your account, billing, and security are sent either way.
• Tracking off by default: Analytics and advertising cookies stay off until you choose "Accept", as described in Section 6.
• Outside Canada: Your information is stored and processed in the United States and other countries where our service providers operate, as described in Section 9, and may be accessible to the courts and authorities of those countries.
• Access and correction: You can ask to see the personal information we hold about you and ask us to correct it. We will respond within 30 days.
• Privacy officer: The person responsible for our privacy practices is our Privacy Officer, who can be reached at support@tryallen.ai or at the mailing address in Section 14.
• Complaints: If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information.

19. Australian and New Zealand Privacy Rights

If you are in Australia, we handle your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you are in New Zealand, we handle it in line with the Privacy Act 2020 and its Information Privacy Principles.

• Marketing email: We send you tips, product news, and offers only if you tick the box for them when you sign up. Every one of those emails says who it is from and has an unsubscribe link that works at any time. Emails about your account, billing, and security are sent either way.
• Outside Australia and New Zealand: Your information is stored and processed in the United States and other countries where our service providers operate, as described in Sections 3 and 9. Those countries may not protect personal information in the same way as Australian or New Zealand law. We require our service providers to keep your information secure and to use it only to provide their services to us.
• Using a different name: You can contact us with a question without giving your name. To create an account, we need your real email address.
• Access and correction: You can ask to see the personal information we hold about you and ask us to correct it. We will respond within 30 days and will not charge you for asking.
• Complaints: Email support@tryallen.ai or write to the mailing address in Section 14. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz).