Privacy Policy

Alberoz Group Private Limited (“we”, “us”, or “our”) acts as the data fiduciary / data controller for the personal data we process. This Policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 in India, and reflects the core principles of the EU General Data Protection Regulation (GDPR) where applicable to users in the European Economic Area (EEA) and the United Kingdom.

By using our website or services, you acknowledge that you have read and understood this Policy.

We collect information that you provide directly to us, information collected automatically when you use our services, and information from limited third-party sources such as our analytics and payment providers.

Depending on how you interact with us, we may collect:

• Identity and contact details — name, email address, phone number, company/organisation name, and role;
• Enquiry and project details — the content of forms, messages, proposals, and correspondence you send us;
• Account credentials — username and password for our client portal or SaaS products (passwords are stored in encrypted/hashed form);
• Billing information — billing name, address, GST details, and transaction records (full card/bank details are handled by our payment gateway, not stored by us);
• Any other information you choose to provide, including complaint details and optional attachments.

When you visit our website or use our products, we may automatically collect:

• Device and browser information — IP address, device type, operating system, and browser type;
• Usage data — pages visited, referring URLs, actions taken, timestamps, and session activity;
• Log and diagnostic data used to maintain security, prevent fraud, and improve performance.

We use cookies and similar technologies to operate our website, remember your preferences (such as light/dark theme), keep you signed in, and understand how our site is used. Essential cookies are required for the site to function; non-essential cookies are used only with an appropriate legal basis. You can control or disable cookies through your browser settings, though some features may not work correctly without them.

We use analytics and advertising measurement tools (such as web analytics and pixel-based measurement) to understand traffic and improve our services. These tools may set cookies and collect usage data as described above. Where required, we rely on your consent for such processing, and you may withdraw it at any time.

We use personal data for the following purposes and legal bases:

• To provide, operate, and maintain our website, products, and services (performance of a contract / legitimate use);
• To respond to enquiries, provide quotes, and deliver customer support;
• To process payments, issue invoices, and maintain financial records (legal obligation);
• To send service-related communications, updates, and security notices;
• To improve, personalise, and secure our services, and to detect and prevent fraud or misuse;
• To comply with applicable legal, regulatory, and tax obligations.

With your consent, or where otherwise permitted by law, we may send you marketing communications about our products, offers, and content. You can opt out at any time by using the unsubscribe link in our emails or by contacting us. Opting out of marketing does not affect service-related or transactional communications.

Your personal data is stored on secure servers and managed using reputable cloud and hosting infrastructure. We apply access controls and encryption where appropriate. Data may be stored in India and, where our service providers operate elsewhere, in other jurisdictions subject to the safeguards described in this Policy.

We implement reasonable technical and organisational security measures — including encryption in transit (HTTPS), hashed credentials, restricted access, and monitoring — to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal-data breach that is likely to affect you, we will notify you and the relevant authority as required by law.

We do not sell your personal data. We may share it only in the following circumstances:

• With trusted service providers (data processors) who perform services on our behalf, under confidentiality and data-processing obligations;
• With payment gateways and financial institutions to process transactions;
• Where required by law, court order, or a lawful request from a competent authority;
• To protect our rights, property, and safety, or those of our users and the public;
• In connection with a merger, acquisition, or restructuring, subject to this Policy.

Our website and products may link to or integrate with third-party services (e.g., hosting, cloud, payment gateways, analytics, and social platforms). These third parties process data under their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies before providing personal data.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and request a copy;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data where it is no longer required or consent is withdrawn;
• Withdraw consent at any time, without affecting prior lawful processing;
• Nominate another individual to exercise your rights in the event of death or incapacity (as provided under the DPDP Act);
• For EEA/UK users: object to or restrict processing, and request data portability, in line with GDPR.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. You also have the right to lodge a complaint with the Data Protection Board of India or your local supervisory authority.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, tax, or reporting requirements. When data is no longer required, we securely delete or anonymise it. Retention periods vary by data type and the nature of the engagement.

Our services are intended for businesses and individuals aged 18 and above and are not directed at children. Where we provide education programs involving minors (such as AI labs for schools), personal data of children is processed only through the school/institution acting as our client, with verifiable parental or guardian consent obtained by that institution as required under the DPDP Act. We do not knowingly collect personal data directly from children without such consent.

Where personal data is transferred outside your country (for example, to cloud or service providers located abroad), we take reasonable steps to ensure it receives an adequate level of protection through contractual safeguards and by working with reputable providers, consistent with the DPDP Act and, for EEA/UK data, appropriate GDPR transfer mechanisms.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. Material changes will be communicated where required by law.

For any privacy-related questions, to exercise your rights, or to reach our Grievance Officer appointed under applicable Indian law, please contact us:

• Grievance Officer / Data Protection contact: info@albero.in
• Phone: +91 91707 80671
• Registered office: H No. 1582, Naubasta, Rajendra Nagar Road, Kanpur, Uttar Pradesh 208021, India

See also our Terms & Conditions and Refund & Cancellation Policy.