Privacy Policy

1. Controller

The data controller is FKlausnir ehf. (AlpaCore), kt. 610918-2040, Strandgötu 11, 220 Hafnarfjörður, Iceland. Contact: [email protected]. We process personal data in line with the EU/EEA General Data Protection Regulation (GDPR).

2. Data we collect

• Account & contact data: name, email, company details.
• Transaction data: plan, amount, currency, order references, payment status (we do not store full card numbers).
• Usage data: log data, device/browser info, and interactions needed to run and secure the service.
• Content you provide: messages, documents, and operational/accounting data you connect for the AI features.

3. Why we process it (legal bases)

To provide the service and fulfil our contract with you; to process payments (legal obligation/contract); to secure and improve the platform (legitimate interests); and, where required, with your consent (e.g. marketing emails).

3a. Business-to-business outreach emails

We occasionally send a short, individually reviewed email to a company's generic business address (for example info@ or hello@) that the company publishes on its own website. We only use the address, the company name and the website it came from. Our legal basis is legitimate interest (GDPR Art. 6(1)(f)): telling a business about a product that is relevant to it. You have the right to object at any time: use the unsubscribe link in the email or enter your address here, and we will add it to our do-not-contact list and not email it again. We keep the do-not-contact entry so the objection keeps being respected. Sender: FKlausnir ehf. (AlpaCore), kt. 610918-2040, Strandgötu 11, 220 Hafnarfjörður, Iceland.

4. Payment processors

Payments are handled by Revolut, PayPal, and the TON network. These providers process your payment data as independent controllers/processors under their own privacy policies. On-chain TON transactions are public by nature.

5. AI processing & sub-processors

To deliver AI features we may send content to model providers (e.g. OpenAI) strictly to generate responses for you. We use reputable infrastructure providers (e.g. Railway for hosting). We do not sell your personal data.

6. Retention

We keep personal data only as long as needed for the purposes above or as required by law (e.g. accounting records). You may request deletion subject to legal retention duties.

7. Your rights

Under GDPR you may access, correct, delete, restrict, or port your data, and object to certain processing. To exercise these rights, email [email protected]. You may also lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) or your local supervisory authority.

8. International transfers

Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Cookies

We use only essential storage needed to run the site (e.g. remembering your language). We do not use invasive advertising trackers.

10. Changes

We may update this policy; the "Last updated" date will reflect changes.