1. Personal data we collect
We may collect the following data:
Data you provide
- your email address when you join the waitlist;
- your name, email address, message, and attachments when you contact us;
- your marketing preferences, including an unsubscribe request;
- billing and transaction details if digital-product purchases become available;
- an order number and support history when you ask for help with a purchase.
Data collected automatically
When you use the website, our hosting, security, and analytics services may collect your IP address, browser type, device type, operating system, referral page, pages viewed, date and time of access, approximate location derived from the IP address, and cookie or similar identifiers.
We do not collect your prompts, reference photos, or AI-generated outputs through the current public website because ALPA does not provide an image-generation tool on alpa-ai.com.
2. How we use personal data
We use personal data to:
- add you to the ALPA waitlist and send launch or product updates you requested;
- respond to support, privacy, and partnership messages;
- operate, secure, maintain, and analyse the website;
- prevent spam, fraud, and misuse;
- deliver a purchased digital product and maintain transaction records when sales become available;
- meet tax, accounting, consumer-protection, and other legal duties;
- establish, exercise, or defend legal claims.
We do not sell your personal data.
3. Legal bases
Where the General Data Protection Regulation or similar law applies, we rely on:
- **consent** for waitlist emails, optional marketing, and non-essential cookies;
- **contract** to process an order, deliver a digital product, and provide customer support;
- **legitimate interests** to secure the website, prevent misuse, analyse basic performance, and respond to business enquiries;
- **legal obligation** for records required by tax, accounting, consumer, or regulatory law.
You may withdraw consent at any time. Withdrawal does not affect processing carried out before that request.
4. Service providers and data sharing
We may share limited data with providers that help us run the website, host data, manage the waitlist, send email, process payments, measure site use, prevent fraud, and provide customer support. Each provider may process data under its own privacy terms and our contractual instructions where applicable.
If the website uses the Pinterest Tag or another advertising measurement tool, the cookie banner and this Policy must name that provider and explain the related data sharing before the tag runs for visitors who must give consent.
We may also disclose data when required by law, a court order, or a valid request from a public authority, or when needed to protect users, our rights, or the website.
5. Payments
When purchases become available, payments may be handled by a third-party payment provider. ALPA does not store full payment-card numbers or card security codes. The payment provider may collect payment, billing, device, and fraud-prevention data under its own privacy policy.
6. Cookies and analytics
The website may use necessary cookies for security, language settings, and core functions. Analytics, advertising, or preference cookies should run only after consent where local law requires it.
You can manage cookies through the website's consent panel, if available, and through your browser settings. Blocking some cookies may affect site functions.
7. International transfers
Some service providers may process data outside your country. Where transfer rules apply, we use an approved transfer mechanism, such as an adequacy decision or standard contractual clauses, and any additional safeguards required by law.
8. Data retention
We keep personal data only for the period needed for the purpose described in this Policy:
- waitlist data: until you unsubscribe, the waitlist closes, or the data is no longer needed;
- support messages: for up to 24 months after the request is closed, unless a longer period is needed for a dispute;
- transaction and tax records: for the period required by applicable law;
- security logs: for a limited period set by our hosting or security provider;
- consent records: for as long as needed to document your choice.
We delete or anonymise data after the relevant period, unless the law requires longer storage.
9. Data security
We use reasonable technical and organisational controls to reduce the risk of unauthorised access, alteration, loss, or disclosure. No online service can guarantee absolute security.
10. Your rights
Depending on your location, you may have the right to:
- request access to your personal data;
- correct inaccurate or incomplete data;
- request deletion;
- restrict or object to processing;
- receive certain data in a portable format;
- withdraw consent;
- complain to your local data-protection authority.
To make a request, email [project.alpa.team@gmail.com] with “Privacy Request” in the subject line. We may ask for information needed to confirm your identity. We will respond within the period set by applicable law.
11. Children
ALPA is intended for users aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has submitted personal data, contact us so we can review and delete it where required.
12. Third-party websites and AI tools
The website may link to third-party AI tools, social platforms, or other websites. Their operators control their own data practices. Review their privacy policies before uploading a face image, client material, confidential information, or personal data.
13. Changes to this Policy
We may update this Policy when the website, product, providers, or legal requirements change. The latest version will appear on this page with a revised “Last updated” date. If a change materially affects your rights, we will provide any notice required by law.
14. Contact
For privacy questions or requests, email [project.alpa.team@gmail.com].