Privacy Policy
Last updated: 21 July 2026
Your privacy matters. This Policy explains how Alphorix collects, uses and protects your personal information when you interact with the Alphorix website (alphorix.net) and the Alphorix marketing & sales CRM (the "Service").
1. Who we are
Alphorix ("we", "us", "our") is a marketing technology company headquartered in Abu Dhabi, United Arab Emirates. You can reach the team at info@alphorix.net for general enquiries and at legal@alphorix.net for privacy and data-protection matters.
2. Information we collect
We collect information you provide directly to us when you submit a form on our website (such as your name, email, company, phone number, country and the message you send), when you create an Alphorix workspace (company name, admin full name, work email, phone, country, password stored hashed, and workspace configuration such as logo, brand colour and custom domain), when you correspond with us, and when you engage our paid services (billing details processed by Stripe — we retain only the last 4 digits of the card, the card brand, and the billing address).
We also collect technical information automatically, including IP address, browser type, device, referring URL and pages viewed, via first-party cookies and similar technologies. We do not deploy third-party advertising or cross-site tracking cookies on alphorix.net.
Separately, inside the CRM you may upload or capture data about your own leads, contacts and campaigns ("Customer Data"). For that data we act as a data processor — you are the controller. We process Customer Data strictly on your instructions to deliver the Service you signed up for.
3. How we use your information
- To respond to your enquiry and provide the services you request.
- To operate your Alphorix workspace and every feature it exposes.
- To send you transactional emails (welcome, password reset, billing receipts, product notices) from info@alphorix.net.
- To improve our website, the Service, and our customer experience.
- To secure the Service, prevent fraud and abuse, and comply with legal obligations.
- With your consent, to share occasional major product updates and insights — you can unsubscribe from every message.
We do not sell your personal data. We do not use Customer Data to train third-party AI models.
4. Legal basis
Where the GDPR, UK GDPR or an equivalent regime applies, we process personal data on the basis of (i) your consent, (ii) the performance of a contract with you, (iii) compliance with a legal obligation, or (iv) our legitimate interests in running and improving our business — always balanced against your rights and interests.
5. Sharing your information
We do not sell your personal data. We share it only with a small number of vetted service providers who help us operate the Service — currently Stripe (payment processing), Resend (transactional email delivery), a managed MongoDB cluster (primary application database) and S3-compatible object storage (logo and document uploads). Each sub-processor is bound by appropriate confidentiality and data-protection obligations. A full up-to-date sub-processor register is available on request at legal@alphorix.net. We may also disclose information if required by law or to protect our rights.
6. International transfers
Because we serve customers globally, your information may be processed in jurisdictions other than your own. Where required, we use appropriate safeguards — including the EU Standard Contractual Clauses — to protect your data in line with applicable law.
7. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements, and then securely delete or anonymise it. When you cancel a workspace, Customer Data is held in a read-only state for 30 days to allow export, then permanently deleted.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to our processing of your personal data, and to data portability. For account-level data you can act directly from Workspace Settings inside the CRM. For any other request — including GDPR / UK GDPR data-subject requests concerning Customer Data — email us at legal@alphorix.net and we will respond within 30 days.
Where we act as a processor for you, we will forward data-subject requests to you and support you in responding to them.
9. Cookies
Our website uses a first-party session cookie strictly necessary to keep you signed in, and lightweight technical cookies to remember your preferences and analyse traffic. You can disable cookies in your browser settings, but some parts of the Service may not function as intended.
10. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction — including TLS 1.2+ in transit, encryption at rest, per-user bcrypt password hashing, workspace isolation at the database layer, brute-force lockout on the login endpoint, and OWASP-recommended security headers on every API response. Every sub-processor we rely on is bound by equivalent controls. Please review our Trust Center for the full list of controls. However, no online transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Children
Our website and services are not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
12. Changes
We may update this Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Where changes are material we will notify Workspace Admins by email or in-product at least 14 days before they take effect.
13. Contact
Questions or requests regarding your privacy? Email legal@alphorix.net.
Registered address: Abu Dhabi, United Arab Emirates.