This policy explains how AlfaNest Labs ("we", "us") processes personal data when you visit our websites or use our software services (including authentication, subscriptions, and product dashboards). We are established in France (SIREN 103036695).
Data controller
AlfaNest Labs, France. Contact: contact@alfanestlabs.com.
What data we process
Depending on how you interact with us, we may process:
- Account and authentication data (for example email address, name where provided, session identifiers) when you sign in.
- Product usage data necessary to operate features you use (for example scan inputs you submit, workspace metadata, security analysis outputs).
- Billing data when you subscribe: payment processing is handled by our payment provider; we typically receive limited billing metadata (for example customer id, subscription status, invoice references).
- Technical and security data (for example IP address, user agent, timestamps, logs) to secure services and investigate abuse.
- Communications you send to us (for example support emails).
Purposes and legal bases (GDPR)
- Provide the service (contract / pre-contractual steps): account creation, authentication, delivering product features you request.
- Billing and accounting (contract / legal obligation): invoices, tax compliance where applicable.
- Security and fraud prevention (legitimate interests): protecting accounts, infrastructure, and users; detecting abuse.
- Product improvement (legitimate interests): diagnostics and quality metrics that do not rely on non-essential tracking cookies.
- Compliance (legal obligation): responding to lawful requests where required.
Recipients and processors
We use service providers where necessary to run the platform (for example hosting, email delivery, payment processing). Those providers process data on our instructions and under appropriate safeguards (including contractual clauses where transfers apply).
Retention
We retain personal data only as long as needed for the purposes described, including legal, tax, and security requirements. Retention periods vary by data category; contact us for specifics relating to your account.
Your rights
Where the GDPR applies, you may have rights to access, rectify, erase, restrict processing, object, and data portability, and the right to lodge a complaint with a supervisory authority. To exercise rights, email contact@alfanestlabs.com. We may need to verify your identity before responding.
Children
Our services are not directed to children under 16, and we do not knowingly collect their personal data.
Changes
We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision.