Legal

Privacy Policy

Last updated: 9 August 2026 · Published by ALTERX. Not legal advice; has not been reviewed by outside legal counsel.

1. Who we are

This Privacy Policy explains how ALTERX ("ALTERX," "we," "us," or "our") collects, uses, discloses, stores, and protects personal data when you visit alterx.co.in, use Alter Engine or the ALTERX Platform, use Cognitive AI by ALTERX, contact us, request a trial or demonstration, receive support, apply for a role, or otherwise interact with our services.

ALTERX — 8-1-346/10/A/1, Sabza Colony, Brindavan Colony, Toli Chowki, Hyderabad, Telangana 500008, India. Primary email: alterx@alterx.co.in. Telephone: +91 93905 85526.

2. Scope and roles

For website, account, sales, support, recruitment, and service-administration information, ALTERX generally determines why and how personal data is processed and acts as the relevant Data Fiduciary or controller.

When a customer uses ALTERX services to process information under its instructions, the customer generally determines the purpose of that processing and ALTERX generally acts as a Data Processor or processor/service provider under the customer agreement and Data Processing Addendum.

3. Personal data we may collect

Depending on your interaction, we may collect:

• Identity and contact data: name, business email, telephone number, role, company, address, country, and communication preferences.
• Account and access data: account ID, organization, workspace, role, authentication events, invitations, permissions, and security settings.
• Commercial data: subscription, order, billing contact, invoice, payment status, tax information, and contract records.
• Communications: contact forms, emails, support messages, call notes, survey responses, event registrations, and meeting information.
• Customer and mission content: instructions, prompts, uploaded files, connected-system data, approvals, outputs, artifacts, evidence, and related metadata submitted or created through the service.
• Integration data: connection identifiers, permission scopes, event payloads, and data requested through integrations selected by a customer.
• Usage and device data: IP address, browser, device, operating system, pages or features used, timestamps, referring pages, diagnostic data, and approximate location inferred from IP.
• Security data: audit events, suspicious activity, access attempts, rate-limit events, and incident information.
• Marketing data: campaign source, engagement, preferences, and consent record.
• Recruitment data: résumé, work history, education, portfolio, interview information, references, and eligibility information.

We do not configure the website or product to collect special-category, sensitive, financial, health, biometric, or children's data unless the use is explicitly approved, documented, secured, and supported by an appropriate lawful basis and customer agreement.

4. Sources of personal data

• Directly from you.
• From your employer, organization, or account administrator.
• From connected services that you or your organization authorize.
• From service providers supporting authentication, payments, communications, hosting, analytics, security, and support.
• From public business sources where lawful.
• Automatically from browsers, devices, logs, and service usage.

5. Why we use personal data

• Provide, operate, secure, and support the website and ALTERX services.
• Create and administer accounts, workspaces, roles, and permissions.
• Process requested missions, workflows, connections, approvals, artifacts, and evidence.
• Authenticate users and prevent abuse, fraud, or unauthorized access.
• Communicate about inquiries, trials, service changes, support, and incidents.
• Process billing, accounting, taxation, and contracts.
• Improve reliability, performance, usability, and accessibility.
• Conduct permitted analytics.
• Send marketing where allowed and provide an opt-out.
• Recruit and assess candidates.
• Comply with law, enforce agreements, and protect rights and safety.

Where lawful-basis terminology applies, the basis may include performance of a contract, steps requested before a contract, consent, compliance with legal obligations, and legitimate interests that are not overridden by individual rights.

6. AI and mission processing

ALTERX may process instructions, prompts, uploaded content, connected-system information, approvals, tool results, and generated outputs to perform a requested mission or workflow.

ALTERX does not use customer mission content to train a generally available model unless the customer has received clear notice and provided any consent or contractual authorization required for that use.

Production documentation must accurately state which providers or subprocessors may receive mission data, whether model providers retain content, whether customer content is used for provider training, and available opt-out, isolation, regional, or enterprise controls. This section will be replaced with the verified production configuration before launch.

7. Sharing and subprocessors

We may share personal data with authorized service providers supporting hosting, authentication, storage, communications, analytics, security, customer support, payments, and other contracted operations.

• At the direction of a customer or user.
• To protect users, ALTERX, or third parties.
• To investigate abuse or security incidents.
• When required by law, legal process, or a competent authority.
• In connection with a corporate transaction, subject to appropriate safeguards.

A production subprocessor list will be published or made available before customer processing begins.

8. International processing

Personal data may be processed in countries other than the country where it was collected. ALTERX will use legally required contractual, organizational, and technical safeguards where applicable. A specific data-residency location will not be promised until the production hosting and subprocessor architecture is verified.

9. Retention and deletion

ALTERX retains personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining security and evidence, complying with law, resolving disputes, and enforcing agreements.

Verified retention periods will be published before launch for contact and sales inquiries, accounts and authentication records, mission content and evidence, security logs, billing and tax records, support communications, recruitment records, and backups.

Users and customers may request deletion where applicable. Some information may be retained where required by law, necessary for security, or preserved under a customer agreement.

10. Security

ALTERX uses reasonable administrative, technical, and organizational measures designed to protect personal data. No internet transmission or storage method can be guaranteed completely secure.

Public claims use qualified language such as "designed to," "supports," or "can be configured to" unless a specific control has been independently verified.

Security enquiries and suspected vulnerabilities may be sent to alterx@alterx.co.in with the subject line "Security enquiry".

11. Your choices and rights

Depending on applicable law, you may have rights to:

• Receive information about processing.
• Access personal data.
• Correct inaccurate or incomplete data.
• Request deletion.
• Withdraw consent where consent is the basis.
• Object to or restrict certain processing.
• Receive a portable copy where required.
• Nominate another person where applicable.
• Submit a grievance or complaint.

Requests may be sent to alterx@alterx.co.in. ALTERX may need to verify identity and authority before acting on a request.

12. Marketing communications

ALTERX will not silently subscribe a contact-form user to marketing. Marketing consent must be separate and optional. Every marketing email includes an unsubscribe method. Transactional, security, account, and service communications may still be sent where necessary.

13. Children

ALTERX services are intended for business and professional use. We do not knowingly collect or process children's personal data unless the use has been specifically approved and all required consent and safeguards are implemented.

14. Third-party services

ALTERX may link to or connect with third-party services. Their independent privacy practices are governed by their own terms and notices. Customers are responsible for selecting and authorizing connections appropriate to their use.

15. Changes

ALTERX may update this Policy. The page will show the current date and may provide additional notice where legally required or where a change is material.

16. Contact and grievance redressal

ALTERX, 8-1-346/10/A/1, Sabza Colony, Brindavan Colony, Toli Chowki, Hyderabad, Telangana 500008, India.

Email: alterx@alterx.co.in · Telephone: +91 93905 85526.

Contact and grievance: alterx@alterx.co.in · +91 93905 85526 · 8-1-346/10/A/1, Sabza Colony, Brindavan Colony, Toli Chowki, Hyderabad, Telangana 500008, India