Privacy in the Alio! client portal

Last updated 20 October 2026. Alio! Brand Studios, ABN 56 106 978 704, Austral NSW.

The portal is where Alio! Brand Studios clients see their contracts, work, files and results. This page says what it keeps about you, why, and how to get it removed. It's the portal part of Alio!'s privacy policy, which also covers the website, finding new clients and client work. If something here isn't clear, email caelan@aliobrandstudio.com.

What the portal keeps

Your login. Your name, email address or mobile number, and how you sign in. If you use Google, Microsoft or Facebook, they send your name and email address. They don't send a password; the portal never sees one.
Your business details. What you type in or confirm, such as your business name, ABN, phone, address, opening hours and the answers to the onboarding questions. Alio! may fill some in first, from your enquiry or what you told Alio!, for you to check.
Website enquiries. If you send an enquiry on Alio!'s website, the portal keeps what you sent (your name, business, email address, phone, website, what you're interested in and your message) for Alio! staff to read. Nothing is set up or emailed until Alio! says yes; then it becomes your business's portal and your invite. Enquiries are kept for 7 years.
Files. Contracts, reports and work Alio! adds, and anything you send.
Your results. Monthly numbers from your Google Business Profile, Google Analytics and Search Console, once you've given Alio! access to them.
Signatures. When you sign something in the portal, it records the name you typed, your signature (drawn or typed, kept as a picture), your login's email address or mobile number, how you signed in (a password, a text code, Google, Microsoft or Facebook), the time, the internet address and browser it came from, and the words you ticked to agree to sign electronically. The signed PDF ends with a page listing these details, apart from the signature picture, and the portal keeps a fingerprint of the PDF before and after signing, so any change to it shows.
Acceptances. When you accept a contract or a change to one by typing your name and ticking the box, the portal records the name you typed, your login, the time, and the internet address and browser it came from. Signature and acceptance records are what make them count, so neither can be edited.
Activity. A short log of what happens on your account, like "Approved the new homepage".
Support tickets. What you and Alio! write in a ticket, the files sent with it, and any tasks Alio! asks you to do, with who did what and when. Alio! staff can add notes to a ticket that only staff see.
Your projects. When Alio! runs your work as a project, the portal keeps its phases, tasks, dates, what moved a date and why, and updates Alio! posts. Alio! uses it to plan and keep track. You see only the parts Alio! chooses to show you, on your project's page and in your activity: the names written for you, planned and expected dates, what's happening now and what's finished, updates for you, and any date that moved, in the words Alio! writes for you. Alio!'s estimates, time, costs, notes and who's doing each task stay with Alio! staff. If someone on your business approves a task, the portal records who approved it and when, through the review of that piece of work.
Emails the portal sends. A record of each email about tickets, tasks, things waiting for you, your projects and your invite to the portal: who it went to, what it was about, and whether it went. The link in an invite email isn't kept. You can turn off reminders about things waiting for you, and emails about your projects (a weekly update and milestones, when Alio! switches them on for a project), in Account; emails about your own tickets and tasks can't be turned off.
Security record. A log of changes to who can get in and what's kept: people added or removed, roles changed, invites made, used or cancelled, files removed, settings changed, signatures saved and businesses deleted. Each entry has who did it, when, and the email addresses or mobile numbers involved. Only Alio!'s admins can see it.

Connect with Google

If you use Connect with Google on the access step, Google asks you to let the portal see your Analytics, Tag Manager or Business Profile accounts and add users to them. The portal uses that once: it lists your accounts so you can tick which ones to share, adds Alio!'s Google account as a user on the ones you tick, then cancels the permission with Google. For a Business Profile it also reads the phone number, website, address and opening hours on it, to offer them for your business details; they're only kept if you then press Looks right. It doesn't keep a copy of anything else, and it doesn't read or change anything else.

Alio!'s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

AI apps you connect, such as Claude or ChatGPT

You can let an AI app such as Claude or ChatGPT use the portal for you. It asks first, and you say yes or no on a portal page. If you say yes, it can see and do what you can in the portal, as you, and nothing more. What it reads goes to that app and the company that runs it, under their privacy terms, not this page. You can disconnect it any time on your Account page.

Who else handles it

Supabase stores the portal's data and files, in its Sydney data centre.
Zoho sends the portal's emails, from its Australian data centre.
Netlify serves the portal's pages.
Google, Microsoft and Facebook handle sign-in when you choose them.

Netlify, Google, Microsoft and Facebook are based overseas, mainly in the United States. Nothing is sold, and nothing is used for advertising.

Who sees it

People on your business's portal, and Alio! staff. Nobody else. Each business only ever sees its own things.

When someone signs, everyone on your business's portal can see their name, signature, email address or mobile number, the time, and the internet address and browser it came from. They're on the signed PDF too.

How long it's kept

While you're a client, and for at least 7 years after, so contracts and the records of who signed or accepted them are there if they're needed. Nothing is deleted automatically: once the 7 years are up, Alio! deletes them by hand, checking once a year, in July, for records past 7 years.

The security record stays for 7 years, including after a login or a business is deleted.

Getting it removed

See deleting your data. You can also ask what the portal holds about you, or ask for a mistake to be fixed, at caelan@aliobrandstudio.com.

Complaints

If you're unhappy with how the portal has handled your information, email caelan@aliobrandstudio.com and you'll get a reply within 30 days. If you're still not happy, you can complain to the Office of the Australian Information Commissioner on 1300 363 992.