01 Overview
This Privacy Policy applies to the website alphaloop.in and to the services we provide, including custom software and web development, AI solutions, SEO, digital marketing, UI/UX design, e-commerce, cloud and related services (together, the "Services").
By visiting our website, contacting us, or using our Services, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use our website.
We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Where we serve clients or visitors in other regions, we also respect the data protection laws that apply to them (for example, the GDPR in the EU/UK).
02 Who We Are
Alpha Loop Web Solutions ("Alpha Loop", "we", "us", "our") is a software development and digital solutions company based in Thalassery, Kannur, Kerala, India - 670102.
For the purposes of this policy, we act as the data fiduciary / controller for information collected through our own website and business communications. When we process personal data on behalf of a client inside a project, we act as a data processor on that client's instructions (see Client Project & AI Data).
03 Information We Collect
Information you give us
- Contact & enquiry details: full name, work email address, phone number, company name, the service you are interested in, and the project details you share through our contact form, email, phone or messaging apps.
- Business correspondence: requirements, briefs, proposals, feedback, and any files you send us while discussing or running a project.
- Hiring information: if you apply for a job or internship, your CV/resume, work history, portfolio links and contact details.
- Billing details: business name, billing address, GST/tax identifiers and payment references for invoicing. We do not store full card or net-banking credentials; payments are handled by regulated payment providers or your bank.
Information collected automatically
- Device & usage data: IP address, browser type and version, operating system, device type, referring page, pages viewed, time spent, and approximate location (city/region level) derived from IP.
- Cookies and similar technologies: see Cookies & Tracking.
- Server logs: standard request logs kept for security, debugging and performance monitoring.
04 How We Use Your Information
- To respond to enquiries, prepare quotes and proposals, and start or manage a project.
- To deliver, operate, maintain, support and improve our Services.
- To send project updates, invoices, security notices and other administrative messages.
- To send occasional news, offers or insights about our Services, where you have opted in or where permitted by law. You can unsubscribe at any time.
- To analyse website traffic and performance so we can improve content, usability and SEO.
- To protect our website, prevent fraud, spam and abuse, and enforce our agreements.
- To meet legal, tax, accounting and regulatory obligations.
- To evaluate job applications and manage recruitment.
We do not sell your personal information, and we do not use it for purposes that are incompatible with those described above.
05 Legal Basis for Processing
We process personal data only where we have a valid reason to do so:
| Basis | Examples |
|---|---|
| Consent | Submitting the contact form, subscribing to updates, accepting non-essential cookies. |
| Contract | Preparing or performing a services agreement with you or your organisation. |
| Legitimate use / interest | Securing our systems, preventing abuse, understanding how our site is used, responding to business enquiries. |
| Legal obligation | Tax, accounting, and responding to lawful requests from authorities. |
Where processing is based on consent, you may withdraw it at any time by contacting us. Withdrawal does not affect processing carried out before it.
08 Client Project & AI Data
When we build websites, applications, automations or AI systems for clients, we may handle our clients' business data and their end users' data. In that role:
- We process that data only on documented instructions from the client and for the purpose of delivering the agreed project.
- Client data, source code, documents, prompts and datasets are treated as confidential and are not used to market our services or shared with other clients.
- We do not use client data to train general-purpose or third-party AI models unless the client has expressly agreed in writing.
- Where a project uses third-party AI or cloud APIs (for example, large language model providers), we select configurations and providers appropriate to the project and describe the data flows in the project agreement.
- On project completion or on request, we return or securely delete client data, subject to legal retention requirements.
Clients remain responsible for having a lawful basis and any required notices or consents for the data they ask us to process.
09 International Transfers
We are based in India, but some of our service providers (for example, cloud hosting, email or analytics platforms) may store or process data in other countries. Where this happens, we take steps to ensure that your data receives an adequate level of protection, such as contractual safeguards and choosing reputable providers, and we comply with transfer restrictions that apply under Indian law.
10 Data Retention
We keep personal data only for as long as needed for the purposes in this policy:
- Enquiries that do not become projects: typically up to 24 months.
- Client and billing records: for the duration of the engagement and for the period required by tax and accounting laws.
- Job applications: up to 12 months unless you ask us to remove them sooner or we hire you.
- Server logs and analytics: for a limited period, usually under 26 months.
When data is no longer required, we delete or anonymise it.
11 Security
We apply reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS/TLS), access controls based on need-to-know, secure development practices, regular updates and backups, and monitoring for suspicious activity.
No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authorities as required by law.
12 Your Rights
Subject to applicable law, you have the right to:
- Access a summary of the personal data we hold about you and how it is processed.
- Correct or update inaccurate or incomplete data.
- Erase data that is no longer necessary for the purpose it was collected.
- Withdraw consent at any time, including opting out of marketing emails.
- Grievance redressal – raise a complaint with us and, if unresolved, with the Data Protection Board of India or the competent authority in your region.
- Nominate another person to exercise your rights in the event of your death or incapacity (under the DPDP Act, 2023).
- If you are in the EU/UK: object to or restrict processing and request data portability.
To exercise any of these rights, email us at info@alphaloop.in. We may need to verify your identity first and will respond within a reasonable time, normally within 30 days.
13 Children's Privacy
Our website and Services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age without verifiable parental consent. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
14 Third-Party Links
Our website may link to third-party websites, social media profiles or tools. We do not control and are not responsible for their content or privacy practices. We encourage you to read the privacy policy of every site you visit.
15 Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top shows when it was last revised. Material changes will be highlighted on our website or communicated by email where appropriate. Continued use of our website after an update means you accept the revised policy.
16 Contact & Grievance Officer
If you have any questions, requests or complaints about this policy or how we handle your personal data, please contact us:
Please mark your email "Privacy Request" so that it reaches the right person. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.