Privacy Policy

1. Who we are

Alta Torres Capital LLC ("Alta Torres Capital," "we," "us") operates the capital advisory platform at www.altatorres.com and the Torres deal-management app. The platform is founded and operated by Brandon Hopen. Questions or requests related to this policy can be sent to brandon@altatorres.com.

2. What data we collect

We collect only what is necessary to operate the service:

• Account information. Your name, email address, and any profile details you provide when you sign up or update your account.
• CRM data. Contacts, companies, deal opportunities, notes, and activity records you create inside the app.
• Gmail data. When you connect a Gmail account, we access your Google account via OAuth 2.0. We request the following scope:
  • gmail.send — to send outreach emails on your behalf from your own Gmail address, so recipients see email coming from you directly.
  We do not read, store, or index any of your email content.
• Usage data. Standard web server logs (IP addresses, page views, browser type) for security and performance monitoring.

3. How we use data

• To operate and improve the Torres platform.
• To send transactional emails (account setup, deal notifications).
• To send outreach emails from your connected Gmail account at your explicit direction.
• To sync Gmail replies into your in-app inbox.
• To respond to your support requests.

4. Google API Limited Use disclosure

Alta Torres Capital's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: Gmail data accessed through our OAuth integration is used only to provide the in-app email features described in Section 2. We do not use Gmail data for advertising, we do not allow humans to read your Gmail content except at your request or for security purposes, and we do not transfer Gmail data to third parties except as necessary to provide the service (for example, our database infrastructure provider).

5. Data storage and security

• Data is stored in a managed PostgreSQL database hosted on Neon (a SOC 2 Type II cloud provider). All data is encrypted at rest and in transit.
• Each user's data is isolated at the application level. No user can access another user's contacts, deals, or email connections.
• OAuth tokens (Gmail access token and refresh token) are stored encrypted in the database and are never logged.

6. Data retention

We retain your data for as long as your account is active. If you request deletion (see Section 8), we will delete or anonymize your data within 30 days, subject to any legal retention obligations.

7. Data sharing

We do not sell your personal data. We do not share your data with third parties for advertising or marketing purposes. We share data only with service providers that help us operate the platform (database, email delivery, analytics) and only to the extent necessary for those services. All sub-processors are contractually bound to protect your data.

8. Your rights and choices

• Revoke Gmail access. You can disconnect your Gmail account at any time by visiting Google Account permissions and removing Torres. This immediately stops all Gmail access.
• Request deletion. Email brandon@altatorres.com with "Delete my account" in the subject line. We will confirm receipt and complete deletion within 30 days.
• Access or correction. Contact us at the same address to request a copy of your data or to correct inaccuracies.

9. Cookies

We use a session cookie to keep you logged in. We do not use third-party advertising cookies. Analytics (Vercel Analytics) are privacy-preserving and do not use cookies for cross-site tracking.

10. Changes to this policy

We may update this policy. If changes are material, we will notify you by email or with a notice in the app before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Alta Torres Capital LLC
United States
brandon@altatorres.com