Privacy Policy

Last updated: 10th February 2026

Last updated: 10th February 2026

1) Introduction

We are Aloft Labs Ltd. (company number 16558608) with registered office at Suite 6308 Unit 3A, 34-35 Hatton Garden, London, EC1N 8DX, United Kingdom (“Aloft”, “we”, “us”, “our”).

We provide an AI-driven property operations solution (“Aloft AI” / the “Aloft AI Solution”).

This Privacy Policy explains:

  • what personal information we collect about individuals,

  • how we use it and keep it secure,

  • who we share it with,

  • how long we keep it, and

  • the rights individuals have.

This Privacy Policy should be read alongside our Terms of Service and any contract and/or data processing terms we agree with our customers.

Our services are not intended for children, and we do not knowingly collect personal information relating to children.

If you have questions about this Privacy Policy or our privacy practices, contact us at hello@aloft.so.

ICO registration: ZB953885.

2) Who this policy applies to

This Privacy Policy is about the rights of individuals (natural persons).

Depending on the context, Aloft may act as:

  • Controller — where we decide why and how to process your personal information (for example, on our website, sales/marketing, business administration, and account management for our direct contacts); and/or

  • Processor — where we process personal information on behalf of our customers who use Aloft AI (for example, where our customer uploads or connects data about tenants, landlords, contractors, suppliers, or where Aloft AI communicates with them at the customer’s instruction).

If we are processing your information on behalf of one of our customers, that customer is typically the controller. If you want to exercise your rights in relation to that customer’s use of Aloft AI, you may need to contact the relevant customer first. We will support our customers in responding to rights requests where we are required to do so.

3) Personal information we collect

“Personal information” (or “personal data”) means information that identifies you or could reasonably be used to identify you.

We may collect and use the following categories of personal information (depending on your relationship with us and how Aloft AI is used):

A. Identity and contact data

  • Name, email address, phone number, job title, employer/organisation, and similar identifiers.

B. Account and profile data

  • Usernames, authentication details (such as hashed passwords or tokens), role/permissions, preferences, and settings.

C. Communications data

  • Messages and content sent to or from Aloft AI (for example, emails, SMS, messaging app content), including any attachments, documents, images, invoices, and files you provide or that are provided to Aloft AI via connected systems.

D. Call data (including recordings and transcripts)

  • Voice call recordings, call transcripts, call metadata (such as phone numbers, timestamps, duration), and related operational notes and outcomes created as part of call workflows.

E. Property/operations data that can be personal

  • Information relating to maintenance issues, appointments, access instructions, notes, and other operational records that may relate to identifiable individuals (e.g., tenants, landlords, contractors, suppliers).

F. Technical and usage data

  • IP address, device type, browser type and version, operating system, time zone, log data, and information about how you use Aloft AI and our website (including pages viewed, clicks, and similar usage analytics).

G. Marketing and event data

  • Preferences for receiving marketing, newsletter interactions, and event participation information.

Special category data: We do not intend to collect “special category” data (such as health data, biometric identifiers used for unique identification, etc.) unless it is provided to us and processed at a customer’s instruction and with appropriate safeguards. We encourage users and customers to avoid providing sensitive personal information unless necessary.

If you provide information to us about someone else, you are responsible for ensuring they understand how their information will be used and that you have the right to share it.

4) How we collect personal information

We collect personal information in a number of ways:

A. Directly from you

  • When you contact us, request a demo, sign up, create an account, use Aloft AI, communicate with us, or provide feedback.

B. From our customers and their authorised users

  • Where a customer uses Aloft AI and provides or connects data about individuals (for example tenants, landlords, contractors, suppliers) and instructs Aloft AI to process it.

C. From Third-Party Systems

  • Where a customer connects a property management system, CRM, email provider, telephony provider, messaging platform, contractor platform, or other system, and data is made available to Aloft AI.

D. Automatically

  • Through cookies and similar technologies on our website, and through logs generated when Aloft AI is used.

5) How we use personal information

Under UK data protection law, we can only process personal information where we have a lawful basis. The lawful basis depends on the context and the relationship.

We process personal information for the following purposes:

5.1 Providing and operating Aloft AI

Purpose

  • Set up accounts, authenticate users, enable features, deliver communications, coordinate workflows, generate outputs, and support integrations.

Legal basis

  • Performance of a contract (where we contract with you or your organisation), and/or

  • Legitimate interests (running and improving our business and services), and/or

  • Where we act as a processor, we process on the instructions of our customer (the controller).

5.2 Communications

Purpose

  • Place and receive calls, send and receive messages, record calls (where enabled), generate and store transcripts, and maintain operational audit trails.

Legal basis

  • Performance of a contract and/or legitimate interests (operational continuity, quality, training, and dispute handling), and/or

  • Consent where required by applicable law (often collected/managed by our customer as the controller).

Important: Where Aloft AI is used by a customer to contact individuals, the customer is typically responsible for providing notices and obtaining any required consents (including for call recording and automated communications), and for ensuring compliance with applicable communications laws.

5.3 Support and troubleshooting

Purpose

  • Provide technical support, respond to enquiries, diagnose problems, and manage service requests.

Legal basis

  • Performance of a contract and/or legitimate interests.

5.4 Security, fraud prevention, and abuse monitoring

Purpose

  • Protect accounts and systems, monitor for suspicious activity, prevent misuse, and maintain the integrity and availability of Aloft AI.

Legal basis

  • Legitimate interests, and in some cases legal obligation.

5.5 Analytics and product improvement

Purpose

  • Understand usage trends, improve features, monitor performance, and develop new functionality.

Legal basis

  • Legitimate interests, and/or where required, consent (especially for certain website cookies).

5.6 Legal and regulatory compliance

Purpose

  • Comply with legal obligations, respond to lawful requests, and maintain appropriate records.

Legal basis

  • Legal obligation and/or legitimate interests.

5.7 Sales and marketing

Purpose

  • Communicate with business contacts about Aloft AI, send newsletters and product updates, and run marketing campaigns.

Legal basis

  • Legitimate interests (B2B marketing) and/or consent where required by law.

    You can opt out at any time (see Section 6).

We will only use personal information for the purposes we collected it for, unless we reasonably consider we need to use it for another compatible purpose, or we are required or permitted by law to do otherwise.

We do not sell or market to your own personal identifiable contacts (e.g. tenants, landlords, contractors, suppliers).

6) Promotional communications

We may send business-related updates about Aloft AI (such as product announcements and offers). We do not sell your personal information or share it with third parties for their own marketing purposes.

We do not send promotional communications to your personal identifiable contacts (e.g. tenants, landlords, contractors, suppliers).

You can opt out at any time by:

  • contacting us at hello@aloft.so, and/or

  • using the unsubscribe link in our emails (where included).

7) Who we share personal information with

We may share personal information with:

A. Service providers (processors/sub-processors)

We use third-party providers to help us operate and deliver Aloft AI (for example: hosting and infrastructure, communications/telephony, analytics, customer support tooling, security monitoring, and professional services). We only allow providers to process personal information on our instructions and require appropriate contractual protections.

B. Professional advisers

Lawyers, auditors, insurers, and other advisers where necessary.

C. Authorities

Regulators, law enforcement, courts, and other public authorities where required by law or to protect our rights.

D. Corporate transactions

If we are involved in a merger, acquisition, financing, reorganisation, or sale of assets, personal information may be shared as part of that process (subject to confidentiality and appropriate safeguards).

8) International transfers

Aloft AI is hosted in the United States, and personal information may therefore be transferred to, stored in, or accessed from the United States and other countries outside the UK and/or EEA.

Where we transfer personal information internationally, we take steps designed to ensure it is protected in accordance with applicable data protection laws. This may include relying on:

  • adequacy regulations where applicable; and/or

  • appropriate contractual safeguards recognised under UK law (such as standard contractual clauses and/or the UK international data transfer arrangements); and/or

  • other legally permitted mechanisms.

You can contact us at hello@aloft.so if you would like more information about international transfers.

9) How we use AI in Aloft AI

Aloft AI uses foundational AI models from major providers, including OpenAI, Google, and Meta.

What data may be used with AI models

  • We may use content and operational context to generate Output, including call transcripts and messages that relate to the task being performed.

  • We aim to scrub personally identifiable information (PII) before processing data with external AI providers.

  • We do not include data from property management systems (PMS data) when sending prompts to external AI providers.

Purpose

  • To generate responses, summaries, classifications, drafted communications, and operational outputs requested by users or required to deliver workflows.

Training

  • We do not use your personal information to train or fine-tune foundational/general-purpose models.

  • Our external AI providers are used on terms that do not permit them to train their models on our prompts/inputs for our use of those services.

What you can do

  • Please avoid including unnecessary personal information in free-text prompts or messages. If you include personal information in your prompt, it may be processed as part of generating Output.

10) How long we keep personal information

We keep personal information only for as long as necessary for the purposes described in this Privacy Policy, including providing Aloft AI, meeting legal obligations, resolving disputes, enforcing agreements, and maintaining security.

Because Aloft AI is used to manage ongoing operational workflows, we may retain:

  • account and usage records,

  • communications (including attachments and documents),

  • call recordings and transcripts,

  • and audit logs,

for periods that are appropriate to operational needs and legal requirements. We may also anonymise or aggregate data so it can no longer be linked to an individual, and use that anonymised/aggregated data for analytics and service improvement.

If you are an individual whose data is processed by a customer using Aloft AI, your retention may also be governed by that customer’s policies and instructions.

11) Your rights

Under applicable data protection laws, you may have the following rights (subject to legal limitations):

  • Access: request a copy of your personal information.

  • Rectification: request correction of inaccurate or incomplete information.

  • Erasure: request deletion of your personal information in certain circumstances.

  • Restriction: request we limit processing in certain circumstances.

  • Portability: request transfer of certain information to you or another provider.

  • Objection: object to processing based on legitimate interests, and object at any time to direct marketing.

  • Automated decision-making: not to be subject to a decision based solely on automated processing producing legal or similarly significant effects (where applicable).

  • Withdraw consent: where we rely on consent, you can withdraw it at any time (without affecting prior lawful processing).

To exercise your rights, contact us at hello@aloft.so.

If we are processing your information as a processor on behalf of a customer, we may refer you to that customer (the controller) and support them in responding.

We may request information to verify your identity before responding to a request. We typically respond within one month, although this may be extended in complex cases as permitted by law.

12) Cookies and similar technologies

Our website uses cookies and similar technologies to operate, analyse performance, and improve user experience. Some cookies are necessary for the site to function; others are optional analytics/marketing cookies.

You can control cookies through your browser settings and, where available, cookie preference tools on our website. Disabling cookies may affect site functionality.

13) Security

We use appropriate technical and organisational measures designed to protect personal information against accidental loss, unauthorised access, alteration, or disclosure. Access to personal information is limited to people and service providers who have a genuine need to access it for the purposes described in this Policy and who are subject to confidentiality obligations.

No method of transmission or storage is completely secure. You should use strong passwords and keep credentials confidential.

14) How to complain

We hope we can resolve any concerns directly. Please contact us at hello@aloft.so.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

  • Website: ico.org.uk/concerns

  • Telephone: 0303 123 1113