Privacy Policy

Introduction

ALTAI (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website or interact with our services.

What Data We Collect

We collect minimal personal data. Currently, the only personal information we collect is your email address when you voluntarily sign up to our waitlist. We also collect anonymous analytics data (page views, device type, approximate location) to understand how visitors use our site.

How We Store Your Data

Email addresses collected via our waitlist are stored securely using Klaviyo, a third-party email marketing platform based in the United States. Klaviyo maintains industry-standard security practices and is compliant with GDPR requirements for international data transfers. We do not sell, rent, or share your email address with any other third parties.

How Long We Keep Your Data

We retain your email address for as long as you remain subscribed to our mailing list. If you unsubscribe or request deletion, your data will be removed within 30 days. Analytics data is retained in aggregate form and cannot be used to identify you personally.

Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request portability of your data in a machine-readable format
• Object to processing of your data
• Withdraw consent at any time

Cookies

We use cookies for analytics purposes to improve your experience. You can manage your cookie preferences using the consent banner displayed when you first visit our site. Essential cookies required for the site to function cannot be disabled.

Ops Platform — Multi-Tenant Data Handling

The ALTAI Operations Platform (“Ops”) is a separate, subscription-based service available to fashion brands. Each client operates in a fully isolated Supabase project with its own database, storage, and credentials. No client’s data is co-mingled with another client’s data at the infrastructure level.

Data Ownership

Client data entered into the Ops platform — including pipeline records, supplier contacts, cost models, financial transactions, and communications — remains the sole property of the client. ALTAI processes this data only to deliver the contracted service and does not use it for any other purpose, including training AI models or benchmarking against other clients.

Retention Periods (Ops Platform)

• Pipeline, costing, and supplier records: retained for the duration of the subscription plus 30 days post-cancellation.
• Activity log: entries older than 12 months are archived to cold storage and removed from the active database.
• Notifications: automatically deleted after 90 days.
• Webhook delivery logs: automatically deleted after 30 days.
• Share link views: automatically deleted after 90 days.

Right to Deletion (Ops Platform)

Upon cancellation, clients may request a full data export in CSV format via the Settings page. All client data is permanently deleted 30 days after cancellation, unless an earlier deletion is explicitly requested. ALTAI retains a minimal administrative record (billing history, contract dates) for legal and accounting purposes only — this record contains no operational data.

Data Processing — EU Clients

Clients operating within the European Union may request a Data Processing Agreement (DPA). Our DPA covers: the legal basis for processing, sub-processor disclosures (Supabase, Vercel, Anthropic AI), data transfer safeguards (Standard Contractual Clauses where applicable), and security measures. To request a signed DPA, contact privacy@altai.com. A template DPA is also available at /ops/legal/dpa.

Contact Us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at privacy@altai.com.