Alpheth · Legal
Privacy Policy
This policy explains how we handle personal data when providing the Alpheth website and products. We collect only the data needed to deliver the services.
1. Controller and scope
This policy applies to www.alpheth.com and the QuantSmith and AIChatFlow products. The personal data controller is Alpheth (Hong Kong SAR); registration details are governed by the Business Registration Certificate.
If you use AIChatFlow on behalf of an organisation, that organisation is normally the controller of customer data and we are the processor.
2. Data we collect
Account and identity data: name or display name, email, hashed sign-in credentials and language preference.
Billing and transaction data: plan, period, transaction identifiers returned by the payment channel, invoice name and address (tax ID optional). We do not store full card numbers.
Usage and log data: feature actions, allowance consumption, access times, IP address, browser and device type, and error logs.
Content data: knowledge-base documents, prompts, channel configuration and conversation records you upload; strategy descriptions and backtest parameters in QuantSmith.
3. Purposes and legal bases
We process data to perform our contract (delivery, metering, billing and support), to comply with legal obligations (tax and accounting), and for legitimate interests (security, abuse prevention and product improvement). Where consent is required, such as for cross-border transfer, we obtain it separately.
4. Cookies and similar technologies
We use essential cookies only: a session cookie for the sign-in session and a language cookie that remembers the interface language.
We do not use analytics cookies, advertising cookies, third-party tracking pixels or cross-site profiling, and therefore do not show a cookie consent banner. You can clear or block cookies in your browser, but sign-in and language memory will be affected.
5. Subprocessors
We may use subprocessors in the following categories: payment processing, email delivery, cloud hosting and identity services. We do not name specific vendors in this policy, and we do not let them use the data for their own marketing.
Subprocessors process data only on our instructions and are bound by confidentiality and security obligations.
6. Storage location and cross-border transfer
Our data is stored in the Hong Kong Special Administrative Region of China.
If you are located in mainland China, transferring data to Hong Kong may constitute a cross-border transfer. Where necessary we obtain your separate consent under applicable law, including the Personal Information Protection Law, and apply contractual and security measures.
7. Retention periods
Billing, transaction and tax records: 7 years (retained in de-identified form).
Access and error logs: 90 days.
Product data after account deletion: deleted once account deletion completes; backups expire naturally on their rolling cycle.
Where the law requires a longer period, we retain data for that period.
8. Sharing and disclosure
We do not sell personal data. We share it only with subprocessors delivering the services, third-party integrations you instruct, authorities where required by law, regulation or court order, and where necessary to protect rights and safety.
9. Security measures
We apply encryption in transit, access control, least privilege, key and credential isolation, and audit logging. No system can be absolutely secure; if an incident affects you, we will notify you as required by law.
10. Your rights
To the extent provided by applicable law, you may access, correct, export or delete your personal data, withdraw consent, or object to specific processing.
You can export data or delete your account in the account centre. For other requests, email support@alpheth.com. We aim to reply for the first time within 24 hours on business days.
If you believe processing breaches applicable law, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong, or your local regulator.
11. Children
The services are not directed at minors and we do not knowingly collect children’s personal data. If we become aware of such data, we delete it.
12. Changes and contact
We may update this policy and will change the date on this page. Material changes will be notified separately.
Contact email: support@alpheth.com.