Privacy Policy

1. Who we are and what this policy covers

Alambrix (“we”, “us” or “our”) is an AI engineering company based in Uttar Pradesh, India. We build custom AI systems for businesses and run our own products, including IPOinfo, a free information portal about public offerings.

This policy covers personal data we handle through:

• our website at alambrix.ai and any pages and forms on it;
• IPOinfo at ipoinfo.ai and our other public products and tools (together with the website, the “Services”); and
• our direct dealings with you, such as emails, calls, meetings, social media messages and job applications.

For these purposes we decide why and how your data is used, so we are the “data fiduciary” under Indian law and the “controller” under laws such as the GDPR.

Client projects are different. When a business hires us to build or run a system, the data we handle inside that project belongs to the client. We process it only on the client’s instructions, under a written agreement, and as its “data processor”. This policy does not govern that data. If you are an end user of one of our clients, please contact that client about your data.

If you do not agree with this policy, please do not use the Services.

“Personal data” means any information that relates to an identified or identifiable person.

2. The data we collect

What you give us

• Enquiries and calls. Your name, work email, phone number, company, job title and what you tell us when you fill in a form, book a discovery call, email us or contact us on social media.
• Updates and newsletters. Your email address, and your name if you give it, when you subscribe.
• Feedback. Anything you send us about IPOinfo or our other products.
• Job applications. Your CV, contact details, education, work history and anything else you choose to send.

What we collect automatically

• Device and connection data. IP address, device type, browser, operating system, language and time zone.
• Usage data. Pages and features you use, links you click, referring pages, dates and times, and error logs.
• Approximate location. A general location (usually city or region) worked out from your IP address. We do not collect precise location.
• Cookies and similar tools. See section 7.
• Email data. When we email you, we may see whether a message was opened and which links were clicked.

What we receive from others

• From service providers such as analytics, scheduling, email, hosting and recruitment tools.
• From public sources and business networks, for example to confirm a business contact’s role or company, or from LinkedIn when you contact us there.

What we ask you not to send

Please do not send us government ID numbers, financial account or card details, health information or other sensitive data through our forms or emails. We do not need it for the purposes in this policy. IPOinfo shows publicly available market information and does not ask for investment or portfolio details.

3. How we use your data

We use personal data only for purposes we can explain. In practice:

• To respond to you. Answering enquiries, arranging calls, sending proposals and following up on conversations you start.
• To run and improve the Services. Keeping the website and products working, fixing bugs, understanding what visitors find useful and building better features.
• To keep you informed. Sending the updates you subscribed to and, where the law allows, occasional business messages you might care about. You can opt out at any time.
• To keep things safe. Detecting and preventing spam, fraud, abuse and security incidents.
• To meet legal duties. Complying with law, responding to lawful requests, and establishing or defending legal claims.
• To hire. Assessing job applications and keeping in touch about roles.
• To create aggregated insights. Statistics that no longer identify anyone, which we may use for any lawful purpose.

If we want to use your data for a new purpose that is not compatible with these, we will tell you first and, where required, ask for your consent.

4. Our legal bases

Where Indian law applies, we process personal data with your consent or for the “legitimate uses” the Digital Personal Data Protection Act, 2023 allows, such as responding to a request you made, complying with the law, or dealing with a security threat. Where European or UK law applies, we rely on:

• Consent, for example for optional cookies and marketing emails. You can withdraw it at any time, which does not affect what we did before.
• Legitimate interests, such as keeping the Services secure, understanding how they are used, and contacting business professionals about relevant services, where these interests are not outweighed by your rights.
• Contract, where we need your data to take steps you asked for.
• Legal obligation, where the law requires it.

5. Who we share data with

We do not sell your personal data. We share it only with:

• Service providers that help us run our business, such as hosting and cloud providers, analytics tools (we currently use Google Analytics), scheduling, email and CRM tools, and recruitment platforms. They may use your data only on our instructions and under confidentiality and security obligations.
• Professional advisers such as lawyers, auditors and insurers.
• Authorities and other parties where the law requires it, or where we believe in good faith that disclosure is needed to protect rights, property or safety, or to investigate fraud or misuse.
• A buyer or investor, in connection with a merger, acquisition, financing or sale of assets. We will require them to respect this policy or tell you about any material change.
• Anyone else you ask us to share with, or whose involvement you consent to.

Some providers, such as Google Analytics, may also collect data about your activity on other websites under their own policies.

6. Artificial intelligence

AI is our business, so we want to be clear. We may use the messages and enquiries you send us, and usage data from our public products, to train, test and improve our AI features and models. We take care to remove obvious identifiers where we reasonably can. You can opt out at any time by emailing info@alambrix.ai with the subject “AI opt-out”. After that, we will stop using your content for this purpose and, where we reasonably can, remove it from future training sets. Opting out does not affect your access to the Services. We do not use data handled inside client projects to train models unless the client has agreed in writing. Where our public products use AI features, we use them to generate or organise information and do not make decisions about you that have legal or similarly significant effects. AI output can contain mistakes, so please check anything important against official sources. Data handled inside client projects is covered by the client’s agreement with us, not by this section.

7. Cookies and tracking

We use cookies and similar technologies of three kinds: strictly necessary ones that keep the Services working, analytics ones that tell us how the Services are used, and, if we run campaigns, marketing ones that measure them. Where the law requires it, we ask for your consent before setting anything other than strictly necessary cookies. You can change your choice through our cookie banner or your browser settings. Blocking some cookies may stop parts of the Services from working properly.

There is no accepted industry standard for “Do Not Track” signals, so we do not currently respond to them.

8. Your rights and choices

Depending on where you live, you may have the right to:

• Access a summary of the personal data we hold about you and how we use it.
• Correct data that is wrong or incomplete.
• Erase your data, subject to legal exceptions, for example records we must keep by law.
• Object to or restrict certain uses, including direct marketing.
• Receive a copy of your data in a common format, or have it sent to another provider where feasible.
• Withdraw consent at any time.
• Nominate another person to exercise your rights if you die or become unable to (under Indian law).
• Complain to a data protection authority, such as the Data Protection Board of India, or a European or UK supervisory authority.

To use any of these rights, or to raise a grievance, email info@alambrix.ai. We may need to verify your identity first. We will usually reply within 30 days, or sooner where the law requires. Some rights have exceptions, and if we cannot act on a request we will tell you why.

You can unsubscribe from marketing emails using the link in the message. We will still send essential messages about your enquiry or relationship with us.

9. How long we keep data

We keep personal data only as long as we need it for the purposes in this policy, and then delete or anonymise it. As a guide:

• Enquiries, call notes and any account or subscription data: kept while you are active and for up to 12 months after you become inactive, then deleted or anonymised. If we start working together, client records follow the retention period in our agreement and the law.
• Newsletter subscriptions: until you unsubscribe.
• Website and analytics data: up to 12 months.
• Job applications: up to 12 months after the role is filled.
• Records we must keep for tax, accounting or legal reasons: for the period the law requires.

Backups and logs roll off on a schedule, so deleted data may remain in them for a short time. We may keep data longer where needed to resolve a dispute or meet a legal duty.

10. Security

We use technical and organisational measures that suit the data we hold, including encryption in transit, access controls, confidentiality duties for staff and contractors, and logging. No system is completely secure, so we cannot promise your data will never be accessed or lost without authorisation. If a personal data breach affects you, we will notify you and the relevant authority within the time the law requires.

11. Where your data goes

We are based in India, but our providers may store or process data in other countries, including the United States. When data crosses borders, we follow the laws that apply. For data from the EEA or UK, we use safeguards such as Standard Contractual Clauses. For data under Indian law, we transfer it only to countries and recipients the Government of India has not restricted. You can ask us about the safeguards we use.

12. Children

Our Services are meant for adults and businesses. We do not knowingly collect personal data from anyone under 18. If you think a child has given us personal data, please contact us and we will delete it.

13. Links to other sites

The Services link to websites and tools we do not control, including social media and the public sources behind IPOinfo’s information. This policy does not cover them, and we encourage you to read their privacy policies.

14. Changes to this policy

We may update this policy as our Services or the law change. We will post the new version here with a new date and, for material changes, give you reasonable notice, and ask for fresh consent where the law requires it. Using the Services after a change means you accept the updated policy.

15. Contact us

For questions, requests or complaints about your personal data, please write to us.

We will acknowledge questions and complaints within 7 days and aim to resolve them within 30 days. If a request is complex, we may need up to 60 more days, and we will tell you why.