Altigen Academy Privacy Policy

Last updated: 2026-03-25

Altigen Technologies, Inc. (“Altigen,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Altigen Academy online learning platform (“Service”).

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Information You Provide Directly

When you register for an account, subscribe to a plan, or interact with the Service, we may collect:

• Account Information: First name, last name, and email address
• Organization Information: Company name and organizational details (for team/enterprise accounts)
• Payment Information: Credit card number, expiration date, CVV, and billing address (name, street address, city, state, ZIP code). Important: Credit card details are collected via secure, PCI-compliant iframes provided by our payment processor and are never stored on our servers. See Section 3.2 for details.
• Terms Acceptance: Record of your acceptance of our Terms of Service, including the version accepted and the date/time of acceptance

1.2 Information Created by the Service

In the course of providing the Service, we generate and store:

• Platform Identifiers: A unique user ID, subscription records, and enrollment job records
• Proxy Email Address: If you are an individual subscriber, we generate a proxy email address solely for the purpose of provisioning your account on our third-party learning management system. This proxy email is not a functioning email inbox and cannot receive messages.
• Audit Logs: Records of significant account events (e.g., subscription changes, payment events, enrollment status) for security and troubleshooting purposes

1.3 Information Collected Automatically

When you access the Service, we may automatically collect:

• Usage Data: Pages visited, features used, and interactions with the platform
• Device and Browser Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs

1.4 Information from Third-Party Services

If you authenticate using a third-party identity provider (such as Microsoft), we receive:

• Authentication Claims: Your name, email address, and a unique identifier from the identity provider
• No Passwords: When using third-party authentication, we do not receive or store your password from the identity provider

2. How We Use Your Information

We use the information we collect for the following purposes:

• Account creation and management
• Subscription billing and payment processing
• Learning platform access and enrollment
• Single Sign-On (SSO) to our learning management system
• Customer support
• Service improvement using aggregated and anonymized data
• Security and fraud prevention
• Legal compliance as required by applicable law
• Transactional communications (billing notifications, account alerts, enrollment status)

We do not use your information for:

• Selling or renting personal data to third parties
• Targeted advertising or behavioral profiling
• Automated decision-making that produces legal effects

3. How We Share Your Information

3.1 Third-Party Service Providers

We share your information with the following categories of service providers, solely to operate the Service:

• eTraining: Learning management system — receives your name and proxy email for course delivery and learner account provisioning
• Rev.io: Payment processing — receives your name, billing address, and tokenized payment credentials for subscription billing and invoice generation
• TRX: PCI-compliant card tokenization — credit card details are entered via secure iframes and never touch our servers
• Microsoft Entra External ID: Identity management and authentication — receives your name and email
• Microsoft Azure: Cloud infrastructure provider — hosts all Service data including database, message queue, and secret management

3.2 Payment Data Handling

Your credit card information is never stored in our application database. Credit card numbers, expiration dates, and CVV codes are entered directly into PCI-compliant secure iframes provided by our tokenization partner. The encrypted card data is forwarded to our payment processor. Our servers receive only a tokenized reference and the last four digits of the card number for display purposes.

3.3 Legal and Safety Disclosures

We may disclose your information if required to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests from public authorities
• Protect the rights, property, or safety of Altigen, our users, or the public
• Enforce our Terms of Service

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on the Service.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account information: Duration of account plus 30 days after deletion request
• Subscription and billing records: 7 years (to comply with financial record-keeping requirements)
• Audit logs: 2 years from the date of the event
• Payment tokens: Until payment method is removed or account is closed

When you delete your account, we will:

1. Deactivate your learning management system account
2. Request deletion of your payment profile from our payment processor
3. Soft-delete your account record (retained for the periods above for legal and billing purposes)
4. Permanently delete personal data after the applicable retention period expires

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
• Encryption at Rest: Database and storage services are encrypted using Azure-managed encryption keys
• Secret Management: API keys, credentials, and sensitive configuration are stored in Azure Key Vault with Managed Identity access
• Access Controls: Role-based access controls limit data access to authorized personnel
• PCI Compliance: Credit card data is handled exclusively through PCI-DSS compliant third-party iframes and processors
• Authentication Security: Account lockout protections, secure token handling, and industry-standard password policies

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Privacy Rights

6.1 All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Data Portability: Request your personal data in a structured, commonly used format
• Withdraw Consent: Withdraw consent for optional data processing at any time

6.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, and shared
• Delete personal information held by us and our service providers
• Opt out of the sale or sharing of personal information — we do not sell or share your personal information
• Non-discrimination for exercising your privacy rights

6.3 European Economic Area (EEA) Residents (GDPR)

If you are located in the EEA, our legal basis for processing your personal information includes:

• Contract performance: Processing necessary to provide the Service you subscribed to
• Legitimate interests: Security, fraud prevention, and service improvement
• Consent: Where you have provided explicit consent
• Legal obligation: Processing required by applicable law

You have additional rights to lodge a complaint with your local data protection authority.

6.4 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@altigen.com
• Response Time: We will respond to verified requests within 30 days

7. Cookies and Tracking

7.1 Essential Cookies

The Service uses essential cookies and session storage for:

• Authentication: Maintaining your login session
• Wizard State: Preserving your progress through the signup process

7.2 What We Do Not Use

• We do not use third-party advertising cookies
• We do not use cross-site tracking pixels
• We do not sell data to advertising networks

7.3 Analytics

We may use privacy-respecting analytics to understand how the Service is used. Any analytics data is aggregated and does not identify individual users.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us immediately at privacy@altigen.com and we will promptly delete such information.

9. International Data Transfers

The Service is hosted on Microsoft Azure infrastructure in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

For users in the EEA, UK, or other jurisdictions with data transfer restrictions, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and Microsoft Azure's compliance certifications.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page, post a prominent notice on the Service, and notify registered users via email for significant changes.

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Altigen Technologies, Inc.
679 River Oaks Parkway
San Jose, CA 95134

Privacy Inquiries: privacy@altigen.com
General Inquiries: https://www.altigen.com

12. Supplemental Information

12.1 Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12.2 Do Not Track Signals

The Service does not currently respond to “Do Not Track” browser signals. We do not engage in cross-site tracking.

12.3 Data Processing Agreement

Enterprise and organization customers may request a Data Processing Agreement (DPA) by contacting privacy@altigen.com.