1. Who We Are
Alactic (“we”, “our”, or “us”) operates the autonomous search and AI visibility platform accessible at https://alactic.in. We provide evidence-led search engine optimization audits, answer engine optimization (AEO) tracking across generative AI systems, and knowledge base workflows.
For questions or requests regarding your personal information, contact our Data Protection & Grievance Officer at support@alactic.in.
2. Information We Collect
- Account Information: Name, email address, password hash, and designated workspace name.
- Project and Domain Inputs: Public website URLs and hostnames submitted for auditing.
- Crawl and Technical Audit Data: Public HTTP status codes, headers, page titles, descriptions, headings, canonical links, schema markup, and robots.txt rules.
- AEO Observations: Prompts, target brands, model providers (ChatGPT, Claude, Perplexity, Gemini), response excerpts, citations, and sentiment classifications.
- Integration Credentials: Encrypted OAuth tokens for Google Search Console and GA4 stored in an isolated AES-256-GCM vault.
- Telemetry: Request timestamps, user-agent headers, and client IP addresses for authentication logging and defensive rate limiting.
3. How We Use Information
We process your data strictly to deliver and secure the Alactic platform, compute 95% Wilson confidence intervals, generate evidence receipts, enforce multi-tenant workspace isolation, process billing, and send critical service notices.
4. Legal Bases for Processing
We process personal data under contract performance, legitimate operational interests (platform security and anti-abuse), legal obligations, and user consent under the EU GDPR and India's DPDP Act 2023.
5. How We Share Information
We do not sell, rent, trade, or monetize your personal data or workspace information to any third parties or data brokers under any circumstances.
We share data exclusively with trusted technical subprocessors bound by confidentiality: Supabase Inc. (PostgreSQL database and authentication) and Vercel Inc. (edge hosting and CDN). If you supply your own API keys for third-party LLMs, queries are sent directly to those providers per your instruction.
6. Google API Services & Google User Data
When you connect Google Search Console or Google Analytics 4, Alactic accesses search analytics queries and organic traffic sessions. Credentials are encrypted at rest using AES-256-GCM. Data is stored strictly within your private workspace schema. You may revoke access at any time via https://myaccount.google.com/permissions.
Alactic’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. International Data Transfers & Retention
Data may be stored in EU, US, or India data centers with standard contractual clauses. Workspace records are retained while active and deleted within 30 days upon an authorized deletion request.
8. Security Safeguards
We employ TLS 1.3 with HSTS, database row-level security (RLS), crawler DNS pinning and SSRF blocking, and AES-256-GCM encryption for credentials.
9. Your Privacy Rights
Under the DPDP Act 2023 and GDPR, you have the right to access, rectify, export (JSON portability), or permanently erase your data. Contact support@alactic.in to exercise these rights.
10. Cookies & Children
We use strictly necessary session cookies only; no advertising cookies. The service is restricted to users 18 years of age and older.
11. Contact Us
Contact our Data Protection Desk at support@alactic.in.