Privacy Policy

AltOne is provided by Nexority Infotech Private Limited. This policy explains how we handle personal data when you use AltOne. For account and billing data we decide how it is used (we are the data fiduciary or controller). For content an organisation uploads, we process it on that organisation’s behalf and under its instructions.

We follow India’s Digital Personal Data Protection Act, 2023, and, where they apply to you, other data protection laws such as the GDPR.

• Account details: your name, email address, password (stored only as a secure hash), and optional details such as phone number and profile picture.
• Organisation details: organisation name, members and their roles, settings such as house style guidelines, and billing details (legal name, address, GSTIN).
• Your content: files and images you upload or import, text around the images that helps describe them, the descriptions drafted and approved, translations, and review comments and history.
• Payments: amounts, plans and Razorpay payment references. Card and bank details go directly to Razorpay; we never see or store them.
• Integrations: when you connect a learning management system, we receive your name, email and course details from it; when you import from Google Drive, Dropbox or OneDrive, we use the access you grant only to fetch the files you choose.
• Usage and security data: sign-in sessions (device, browser and IP address), an audit log of actions in your organisation, and error logs.

• to provide AltOne: extract images, draft and translate descriptions, run the review workflow and write approved text back into your files;
• to run your account and organisation, including invitations, notifications and two-step verification;
• to take payments, issue invoices and meet tax and accounting obligations;
• to keep AltOne secure, prevent abuse and fix problems;
• to answer your questions and send important service messages.

To draft a description, AltOne sends the image and nearby text (such as captions, headings and the surrounding paragraph), together with your organisation’s guidelines, to an AI provider. Approved descriptions are sent again if you ask for translations.

We use these providers through their commercial APIs, whose terms state that data sent this way is not used to train their models. We do not use your content to train models ourselves. Descriptions remain drafts until a person in your organisation approves them.

We share data with these service providers only as needed to run AltOne:

Some of these providers are outside India. When data is transferred abroad we rely on the safeguards the law requires. We will update this list before adding a new sub-processor that handles your content.

• Uploads that never become part of a project are deleted after 24 hours.
• Projects, with their images and original files, are kept until someone in your organisation deletes them; deleted projects are then removed from storage.
• Personal data exports can be downloaded for 7 days, then are deleted.
• When you delete your account, your personal details are erased. Projects you shared with your organisation stay with it and are handed over to another member.
• Payment and invoice records are kept for as long as Indian tax law requires, even after an account is deleted.
• Backups are overwritten on a rolling basis, so deleted data may remain in them for a short time.

You can:

• get a copy of your data from Settings → Your data → Request export;
• correct your details in Settings at any time;
• delete your account from Settings → Your data;
• ask us about, or object to, how we process your data, or withdraw consent where we rely on it;
• complain to us, and if you are not satisfied, to the Data Protection Board of India or your local data protection authority.

If your account belongs to an organisation, some requests about its content are handled by that organisation’s administrators. To use any of these rights, or to reach our grievance officer, write to support@nexorityinfotech.com.

AltOne uses only the cookies it needs to work: a session cookie that keeps you signed in and security cookies that protect sign-in forms. Your light or dark theme choice is remembered in your browser. We do not use advertising or third-party tracking cookies.

Data travels over encrypted connections (HTTPS). Passwords are hashed, original files are kept in private storage, and access inside an organisation follows the roles its administrators assign. You can turn on two-step verification and review your active sessions in Settings. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

AltOne is not intended for children, and we do not knowingly collect personal data from anyone under 18.

We will post any changes here with a new date at the top, and tell account owners about significant changes before they take effect. See also our Terms of Service.