Privacy Policy

Last Updated: 25/04/2026

1. Introduction and Scope

Alplatform, a company registered in Tunisia under registration number 164589N, with its registered office at street Habib Bourguiba 4013 Messadine, Sousse, Tunisia (“Company,” “we,” “us,” “our”), operates the Proxylink platform (“Platform”). We act as the data controller for the personal data we collect directly from you. This Privacy Policy applies to information collected through www.proxylink.com and the Platform, and via related communications.

2. Information We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, username, password, company/school name (optional), and profile details.
• Payment Information: Billing address, card details, and transaction history. Full payment card numbers are processed by our PCI-compliant payment processor(s) and are not stored on our servers.
• Usage Data (Content): Prompts, inputs, files, images you submit, and the AI-generated outputs received. We also retain interaction logs (timestamps, selected model, session duration).
• Automatically Collected Information: IP address, device type, browser settings, operating system, referring URLs, and data collected via cookies (see Section 9).
• Communications: Records of support tickets, emails, and survey responses.

3. How We Use Your Information

We process personal data for the following purposes:

• Service Delivery: To create and maintain accounts, process subscriptions, relay prompts to AI Providers, return outputs, and enable collaboration features.
• Billing: To charge fees, manage renewals, and handle billing disputes.
• Support: To respond to inquiries and send service-related notifications.
• Analytics & Product Improvement: To analyse trends, monitor performance, and develop features (using aggregated/pseudonymised data where possible).
• Security & Abuse Prevention: To detect fraud, unauthorised access, and Terms of Use violations, including automated content scanning.
• Marketing: To send promotional messages with your opt-in consent (or, where permitted, to existing customers about similar products). You may withdraw consent at any time.
• Legal Compliance: To comply with laws, regulations, legal processes, or governmental requests.

4. Legal Bases for Processing

Depending on your location, we rely on the following:

• Contractual Necessity: To provide the Platform under our Terms.
• Legitimate Interests: For analytics, security, direct marketing (as allowed), and service improvement, provided these interests are not overridden by your rights.
• Consent: For marketing emails, non-essential cookies, and (if ever offered) training AI on your data. You may withdraw consent at any time.
• Legal Obligation: For tax, accounting, and regulatory compliance.

For residents of the European Economic Area (EEA) and the United Kingdom, these align with the GDPR/UK GDPR. For Tunisia, processing is based on your consent, the performance of a contract, our legitimate interest, or a legal obligation, in accordance with Law No. 2004-63 of 27 July 2004 on the Protection of Personal Data.

5. Sharing and Disclosure of Information

We do not sell your personal data. We share data only as follows:

• Third-Party AI Providers (Sub-processors): To deliver the core service, we transmit your prompts, inputs, and configuration data to the AI models’ APIs (e.g., operated by OpenAI, Anthropic, Google, Stability AI). These providers are our data sub-processors, contractually bound to process data only per our instructions. IMPORTANT: Your prompts and outputs are processed on the AI Providers’ infrastructure and may be subject to their own data usage and retention policies. We strongly advise you to review the privacy policies of these providers before submitting sensitive or personal information.
• Service Providers: Cloud hosting, payment processors, email services, and analytics providers, who are restricted to processing data solely for the contracted services.
• Legal Disclosures: If required by law, court order, or to protect our rights, safety, or property, or that of others.
• Business Transfers: In a merger, acquisition, or sale of assets, subject to the same privacy commitments.
• Aggregated/De-identified Data: We may share non-identifiable insights publicly or with partners.

6. International Data Transfers

Our servers are located in Tunisia. Your data may be transferred to and processed in countries outside your jurisdiction, including the United States where certain AI Providers operate. For data transfers from the EEA, UK, or Switzerland, we ensure appropriate safeguards, including the use of Standard Contractual Clauses or the UK International Data Transfer Agreement, as applicable. For transfers by our AI Provider sub-processors, they commit to equivalent transfer mechanisms. For Tunisian residents, transfers are made in accordance with the requirements of the Tunisian data protection authority (INPDP), and we ensure adequate protection.

7. Data Retention

We retain personal data only as long as necessary:

• Account & subscription records: for the life of the account + 90 days after termination, unless longer retention is required by law.
• Prompt history & outputs: up to 90 days after account closure to allow export, then securely deleted or anonymised.
• Payment records: retained per tax/accounting laws (typically 7–10 years).
• Analytics & security logs: in identifiable form up to 24 months, then aggregated.
• Marketing consents: retained indefinitely unless withdrawn.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure (deletion) of your data, subject to legal exceptions.
• Restriction of processing in certain circumstances.
• Data Portability in a structured, machine-readable format.
• Object to processing based on legitimate interests (including marketing).
• Withdraw Consent at any time, without affecting prior lawful processing.
• Non-Discrimination for exercising your privacy rights.

For Tunisian residents, you also have the right to object to processing for direct marketing and to lodge a complaint with the INPDP.

To exercise any right, email legal@alplatforms.com with “Privacy Request” in the subject. We will verify your identity before responding. If unsatisfied, you may lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France, INPDP in Tunisia).

9. Cookies and Tracking Technologies

We use cookies and similar technologies:

• Essential Cookies: Necessary for login and core functionality (cannot be disabled).
• Functional Cookies: Remember language preferences to enhance your experience.
• Analytics Cookies: Help us understand usage with your consent.

On your first visit, a consent banner allows you to manage non-essential cookies. You can update preferences via “Cookie Settings” in the footer. Browser settings can also block cookies, but some features may be impacted.

10. Children’s Privacy

The Platform is intended for users aged 15 and above. Users between 15 and 18 (or the age of majority) must have verifiable parental consent. We do not knowingly collect personal data from anyone under 15. If we learn that a person under 15 has provided data, we will delete it promptly. Contact us if you believe we have inadvertently collected such information.

11. Security

We implement technical and organisational measures, including encryption in transit (TLS 1.3) and at rest (AES-256), access controls, regular security audits, and penetration testing, to protect personal data. However, no method is 100% secure, and you play a role by using a strong password.

12. Third-Party Links

The Platform may link to external sites not controlled by us. This Privacy Policy does not apply to those services; please review their policies.

13. Changes to This Policy

We may update this policy. Material changes will be notified by email and/or a prominent notice on the Platform prior to the effective date. Continued use after the effective date indicates acceptance. Please review this page regularly.

14. Contact Us

For questions or to exercise rights:

• Email: legal@alplatforms.com
• Postal Address: Alplatform, street al Habib Bourguiba 4013 Messadine, Sousse, Tunisia
• Tunisian registration number: 164589N