Thank you for choosing the products and services of AlpacaX Inc. We value your privacy, and respect and protect your personally identifiable information. Below is a copy of the Company's privacy policy. Your use of the Company's platform and services constitute your acceptance of the Privacy Policy, and our Terms of Service, Cookies Policy, and Cancellation and Refund Policy (collectively, the "Agreement") If at any time you do not agree to this Privacy Policy or any terms of the Agreement, you must cease your use of any of our products or services.
AlpacaX Inc. ("AlpacaX," "we," "our," or "us") require certain information to provide our products and services to you ("User," "you," "your," and "yours"). This privacy policy applies when you access or use the Alpacon platform and any associated products, services, or features in any form or on any platform through any media (collectively, the "Services"). This privacy policy may be updated from time to time and may be supplemented by additional privacy statements, terms, or notices provided to you. Any changes will be posted on this page or our website with an updated revision or a notice given to you through the Services or by other means.
We collect personal data to: (a) provide and operate the Services offered through the Alpacon platform, the Website, the App, and other channels; (b) support security, privacy, compliance, trust and safety, fraud and abuse prevention, monitoring, and auditing; (c) respond to questions, feedback, requests, and reports regarding the Services or information provided through them; (d) improve the Services and the information provided through them; and (e) (with your consent where required,) publish your comments and annotations (and related information) and provide optional features.
We also use personal data to communicate with you through the Services and to share additional information or events that may interest you. We may combine personal data collected through the Services with information from other sources, including information we obtain from or about you in connection with the Services.
We collect information about you in three ways: directly from your input, from third-party sources and public databases, and through automated technologies.
We collect information you provide directly when you:
Depending on what account type (individual or business) or Services you choose or how you interact with us, we may collect your personal information. "Personal Information" means any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, to an individual or household and it may include, without limitation:
We may collect technical data automatically, including:
We also may collect data from partners, affiliates, other third parties' or public sources for business and marketing purposes, including:
We use your information for:
If you are an administrator of an organization with a subscription to the Services, we will use your details to communicate with you about your organization's subscription and related services. If you supply us with contact information of your colleagues, we may contact those individuals with communications about the Services that may include references to you.
For our use of cookies and other tracking technology and opt-out policy, please refer to our Cookies Policy.
If you access the Services through a subscription administered by your organization, your Personal Information and certain usage data gathered through the Services may be accessed by or shared with the administrators authorized by your organization for the purposes of usage analysis, subscription management and compliance, cost attribution, and departmental budgeting.
If you access a third-party application on the Services through a license agreement with the licensor of that application, Personal Information relevant to that application will be shared with the licensor so that it can provide you access to the application, subject to the terms of its license agreement and privacy policy.
Depending on the Services you choose to access, use, or purchase, we may share Personal Information with our affiliates (including our entities, subsidiaries, and divisions that provide technology, customer service, and other shared services functions) and third-party service providers (including payment processors and sub-processors, customer support, email service providers, IT service providers, and similar vendors) at our discretion in connection with our Services or Platform, in compliance with this Privacy Policy and appropriate confidentiality and security measures, only to the extent necessary to provide the Services, complete a transaction, fulfill your requests, or to perform the Services on our behalf, based on our instructions.
We may share your Personal Information with our affiliates and other third parties when you indicate your consent or preference in your account or settings or when you choose to disclose such information publicly at your discretion. The Services may allow you to post and share Personal Information, comments, materials, and other content. Any content you disclose publicly can be collected and used by others, may be indexed by search engines, and might not be removable. Please be careful when disclosing Personal Information in public areas of the Services. If you do not consent to such sharing, please do not submit any Personal Information to us or post it through our Services.
We also will disclose your Personal Information if we have a good faith belief that such disclosure is necessary to:
We retain your personal information for as long as necessary to provide the Services and fulfil the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting, and preventing fraud and abuse, and enforcing our agreements.
We will securely delete or anonymize data when no longer needed. Electronic records are securely deleted using commercially reasonable methods to ensure they cannot be recovered or reconstructed. Physical documents are destroyed by shredding or other secure means to prevent unauthorized access or use.
We implement industry-standard technical and organizational safeguards to protect your Personal Information from unauthorized access, use, or disclosure. These measures include:
While we implement strong safeguards, no system is entirely secure. If you believe your data has been compromised, contact us immediately at privacy@alpacax.com
To provide our Services, we may transfer, store, and process your Personal Information to countries outside your country of residence, including the United States, the Republic of Korea, Japan, and other jurisdictions where our service providers or partners operate. Depending on the Services, your data may be processed in one or more of these locations. For example, transfers may occur from the United States to other countries (including Korea or Japan), or from the other countries to the United States. We implement appropriate safeguards to ensure the security and confidentiality of your Personal Information, including data processing agreements, technical and organizational security measures, and access controls that limit data handling to authorized personnel only.
Without limiting the foregoing, below is a specific list of current key recipients, transfer destinations, types of Personal Information transferred, purposes, and retention periods.
| Recipient | Transfer Destination(s) | Purpose of Use | Information Transferred | Retention Period |
|---|---|---|---|---|
| Auth0, Inc. (Auth0) | USA | User authentication and login session management | Email, user ID, MFA settings | Until membership withdrawal or termination of the entrusted contract |
| Amazon Web Services, Inc. (AWS) | USA | Server infrastructure operation, data storage, and backup | Service usage records, access logs, and command history | Until membership withdrawal or termination of the entrusted contract |
| Datadog, Inc. (Datadog) | USA | System log collection, monitoring, anomaly detection | Access logs, system metrics, and agent status information | Until membership withdrawal or termination of the entrusted contract |
| Google LLC (Google Analytics, Google Cloud) | USA (default), other locations depending on Google server placement | Service usage monitoring, usage statistics analysis | Operating system (OS), device type, user behavior data, referral paths | Until membership withdrawal or termination of the entrusted contract |
| Stripe, Inc. (Stripe) | USA and other countries where Stripe sub-processors are located | Global payment processing and billing system operation | Name, email, payment method, payment history | Retained by applicable laws |
| Toss Payments Co., Ltd. (Toss Payments) | Republic of Korea | Payment processing and settlement | Name, email, payment method, payment history | Retained by applicable laws |
| IPinfo, Inc. (IPinfo Lite) | USA | Lookup of user IP-based geographic information | IP address | Until membership withdrawal or termination of the entrusted contract |
These countries may have data protection laws that are different from those in your country of residence and may not provide the same level of protection. Regardless of where your Personal Information is processed, we implement appropriate safeguards to ensure its security and confidentiality, including:
By using our Services, you acknowledge and consent to the transfer of your Personal Information to jurisdictions outside your country of residence, for the purposes described in this Privacy Policy. If you have any questions about how your data is protected when transferred internationally, please contact us at privacy@alpacax.com
We may use Artificial Intelligence ("AI") technologies to provide certain features of our Services, such as AI-driven features such as code assistance, analytics, and automated recommendations.
When you use these AI features, the following may apply:
We recognize the importance of children's safety and privacy. No Services of ours are designed to attract or target children under 13, nor are they intended for use by any children under the age of 13. We do not request, or knowingly collect, any personally identifiable information from children under the age of 13.
If you are under age 13, you may not use our Services without verified parental or legal guardian consent. If we discover that we have collected Personal Information from a child under the age of 13 without proper consent, we will delete it promptly.
If you believe that a person under 13 has provided us with his or her personal information, please notify us at privacy@alpacax.com so that we can take reasonable steps to remove the information from our Services.
Users between the ages of 13 and 15 may use the Services, but we will not sell or share their Personal Information without their affirmative opt-in consent, as required under applicable privacy laws.
We may update this Privacy Policy from time to time. We will notify users of any material changes at least 30 days in advance via our website or email.
You have the following rights under applicable privacy and data protection laws, as may be applicable in your jurisdictions:
You can exercise these rights by contacting: privacy@alpacax.com. We will respond to your request consistent with applicable laws. To protect your privacy and security, we may require you to verify your identity.
Please note that certain Personal Information is necessary to provide you with our core Services. If you choose not to provide such data or request its deletion, your ability to use some or all features of the Services may be limited. However, you may opt out of non-essential uses, such as marketing communications or third-party sharing, where applicable under the law.
Do Not Track Disclosure
As required by Section 22575 of the California Business and Professions Code, the following disclosure is made to California residents and to residents of other states:
Neither our Website nor the App alter their respective behavior or change their respective services when they receive a "do-not-track" flag or signal from your operating system or browser. As described herein, we use cookies and other tools to collect information about you when you visit our App to, among other things, better tailor the features, performance, and support of our Services, the Website, and the App. After you leave or close-out from the Website or App, we do not track your online activity on other apps or websites, but third parties (and their affiliates) may track your online activity to offer you advertisements. This tracking is anonymous and is not linked to your personal data.
Marketing
We collect various types of personal data about you during the course of your relationship with us. Under California law, if you are a resident of California, you may make a written request to us to disclose the categories or specific pieces of personal data of yours which we have shared with third parties for the third parties' direct marketing purposes during the prior year. In response to your written request, we are allowed to provide you with a notice describing the cost-free means to opt-out of our sharing your information with third parties with whom we do not share the same brand name if the third party will use such information for its direct marketing purposes.
If you would like to exercise your rights under California law, please send your written request to the e-mail address or postal address below with the words "CALIFORNIA OPT-OUT" in ALL CAPS in the subject line or clearly set forth elsewhere. Please include your postal address in your request. Within thirty (30) days of receiving your written request, we will provide you with a Third-Party Direct Marketing Opt-Out Form so you may request that your personal data not be disclosed to third parties for their direct marketing purposes.
Consumer Rights Under the California Consumer Privacy Act of 2018 (the CCPA)
To the extent the California Consumer Privacy Act is applicable, with certain exceptions, including in connection with data subject to federal regulation (i.e., the Health Insurance Portability and Accountability Act (HIPAA), the Gramm-Leach Bliley Act California (GLBA), the Fair Credit Reporting Act (FCRA), or the Drivers' Privacy Protection Act (DPPA)), contractual rights and obligations, and certain other exceptions, California residents have the following rights with respect to our data collection and data processing of California residents' personal data which is collected in California, processed in California, or part of a transaction occurring in California:
TO THE EXTENT APPLICABLE, AND TO EXERCISE ANY OF THE ABOVE RIGHTS, PLEASE CONTACT US AT ANY OF THE BELOW AND INCLUDE THE WORDS "CCPA RIGHTS" IN ALL CAPS IN THE SUBJECT LINE, AND LET US KNOW THAT YOU WANT TO EXERCISE YOUR CCPA RIGHTS AND WHAT RIGHTS YOU SEEK TO EXERCISE.
If you have any questions, comments, complaints or requests regarding this privacy policy or our processing of your information, please contact us:
Alpacon Team - Privacy
We will confirm receipt within 10 business days and respond within 45 days or notify you if additional time is needed.