Privacy Policy

1. Controller

The data controller is AlpaCore Software Systems (Iceland). Contact: [email protected]. We process personal data in line with the EU/EEA General Data Protection Regulation (GDPR).

2. Data we collect

• Account & contact data: name, email, company details.
• Transaction data: plan, amount, currency, order references, payment status (we do not store full card numbers).
• Usage data: log data, device/browser info, and interactions needed to run and secure the service.
• Content you provide: messages, documents, and operational/accounting data you connect for the AI features.

3. Why we process it (legal bases)

To provide the service and fulfil our contract with you; to process payments (legal obligation/contract); to secure and improve the platform (legitimate interests); and, where required, with your consent (e.g. marketing emails).

4. Payment processors

Payments are handled by Revolut, PayPal, and the TON network. These providers process your payment data as independent controllers/processors under their own privacy policies. On-chain TON transactions are public by nature.

5. AI processing & sub-processors

To deliver AI features we may send content to model providers (e.g. OpenAI) strictly to generate responses for you. We use reputable infrastructure providers (e.g. Railway for hosting). We do not sell your personal data.

6. Retention

We keep personal data only as long as needed for the purposes above or as required by law (e.g. accounting records). You may request deletion subject to legal retention duties.

7. Your rights

Under GDPR you may access, correct, delete, restrict, or port your data, and object to certain processing. To exercise these rights, email [email protected]. You may also lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) or your local supervisory authority.

8. International transfers

Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Cookies

We use only essential storage needed to run the site (e.g. remembering your language). We do not use invasive advertising trackers.

10. Changes

We may update this policy; the "Last updated" date will reflect changes.