Privacy Policy

1. Who we are

This policy explains how Alpichel ("we"), owner of Alpichel (https://alpichel.com), handles the personal data of people who use the platform: business owners and staff, customers who use the app, and visitors to the website.

If you have questions, write to https://alpichel.com/.

2. Two different roles

We are the controller of the data of accounts registered on Alpichel (owners, cashiers, front-desk staff and app customers) and of browsing data on the public website.

For the data each business records about its own customers (names, phone numbers, plates or references, purchase history, notes, bookings), that business is the controller and we act as its processor: we store and process the data only to provide the service and following its instructions. If you are a customer of a business and want to exercise your rights over that data, contact that business first; we will help it handle your request.

3. Data we collect

Depending on how you use Alpichel:

• Account: name, email, password (stored hashed, never in plain text), language and, if you add it, phone number.
• Business: business name, type of business, country, currency, time zone, address, map location, opening hours, services, prices and settings.
• Business operations: customer names, phone numbers and references, orders, inventory, payments, expenses, cash shifts, points, memberships, notes and follow-up tags.
• Bookings: business, date and time, reference or plate, chosen service, phone number and any notes you write.
• Sign in with Google (optional): the name, email and account identifier Google provides. We never receive your Google password.
• Push notifications (optional): the technical subscription address your browser generates.
• Technical data: IP address, browser type and security logs (sign-ins, failed attempts and administrative actions).

4. How we use the data

We use data only to:

• Create and manage your account and let you sign in.
• Provide the platform features: queue, tickets, cash register, reports, loyalty, memberships, bookings, directory and CRM.
• Send necessary emails (account confirmation, password reset, booking confirmations or cancellations) and the notifications you turn on.
• Keep the platform safe by preventing fraud, abuse and unauthorized access.
• Charge paid plans, when they are enabled.
• Measure and improve the website, only if you accept analytics cookies.

Our legal bases are performance of the contract (providing the service you asked for), our legitimate interest in keeping it secure, compliance with legal obligations and, for analytics, advertising and notifications, your consent, which you can withdraw at any time.

We do not sell personal data or share it so third parties can advertise to you.

5. Cookies

We use essential first-party cookies: a session cookie to keep you securely signed in and one to remember your language. They do not require consent.

If the site has analytics or advertising tools enabled (for example Google Analytics, Google Tag Manager, Microsoft Clarity, Meta Pixel or Google AdSense), their cookies load only after you accept in the cookie banner. You can decline and the site keeps working.

6. Third-party services

To operate we rely on providers that receive only the data they need:

• Web hosting and database, where the information is stored.
• PayPal, to process plan payments. We never see or store your card details.
• Google, if you choose to sign in with Google.
• OpenStreetMap, which serves the map images; your browser connects to its servers when you view a map.
• Your browser's push services (Google, Apple, Mozilla or Microsoft) to deliver notifications.
• Waze, Google Maps and WhatsApp open only when you tap their buttons; from then on their own policies apply.
• The analytics or advertising tools mentioned above, only with your consent.

7. Location

When you tap "Near me" or "Use my location", your browser asks for permission. Your location is used only on your device to sort businesses by distance and is not sent to or stored on our servers.

The only location we store is the one each owner sets for their business, to show it on the public map.

8. How long we keep data

We keep data while the account is active. Technical and security logs are deleted or anonymized over time. Billing records may be kept for the periods required by tax and accounting laws.

If a customer deletes their account, we anonymize it and unlink it from businesses. If a business closes its account, we delete its data on request, except what the law requires us to keep.

9. Security

We apply reasonable technical and organizational measures: encrypted connections (HTTPS), passwords hashed with strong algorithms, secrets encrypted in the database, protection against common attacks, sign-in rate limits, data isolation between businesses and role-based permissions. No system is 100% secure; if we detect a breach that affects you, we will notify you as the law requires.

10. International transfers

Our providers may be located in a country other than yours. When that happens we use providers with adequate data protection safeguards, such as standard contractual clauses where the law requires them.

11. Your rights

Depending on the law of your country, you can request access to your data, its correction, deletion or objection to certain uses, restriction of processing, portability, and you can withdraw consent. This includes, among others, the GDPR (European Union and United Kingdom), the LGPD (Brazil), the CCPA/CPRA (California), the LFPDPPP (Mexico), Law 1581 (Colombia), Law 25,326 (Argentina), Law 29733 (Peru) and Law 19,628 (Chile).

You can correct most of your data in your profile, and app customers can delete their account from Profile. For any other request write to https://alpichel.com/; we will reply within the period set by law. You can also file a complaint with the data protection authority in your country.

12. Children

Alpichel is intended for businesses and adult customers. We do not knowingly collect data from children under 16. If you believe a child gave us their data, contact us and we will delete it.

13. Changes to this policy

We may update this policy when the service or the law changes. We will publish the new version here with its date and, if the change is significant, notify you by email or inside the platform.

14. Contact

Alpichel · https://alpichel.com/