Legal
Privacy Policy
Last updated: April 2026
AlitaGPT ("ALITA", "we", "us") takes your privacy seriously. This policy explains how we collect, use, and safeguard your information when you use our managed AI assistant platform.
1. Information We Collect
Account information
Name, email address, and billing details you provide when you create an account or subscribe.
Usage data
IP address, browser type, device identifiers, and interaction patterns. We use this to improve the service and maintain security.
Container data
Your AI assistant interactions, files, and data live inside your isolated container. We do not access this data unless you explicitly request technical support.
We never use your container data to train AI models.
2. How We Use Your Information
Provide the service
Operate your dedicated AI assistant, process transactions, and send service-related communications.
Improve the platform
We analyze aggregate, anonymised usage patterns. We never inspect individual container content for analytics.
Security
Detect threats, prevent fraud, and enforce our acceptable use policies.
3. Data Storage & Security
Per-user isolation
Every user receives a dedicated Kubernetes pod on Google Cloud Platform. No shared runtimes, no cross-contamination.
Encryption
TLS 1.3 in transit, AES-256 at rest. Persistent volumes use GCP-managed encryption keys.
Backups
Automatic daily backups with configurable retention. Data survives pod restarts and infrastructure events.
Edge security
Cloudflare provides DDoS mitigation, WAF, and zero-trust tunnel connectivity.
4. Third-Party Services
AI providers
Anthropic and OpenRouter for model inference. Prompts are sent per-request and not retained for training by these providers under our agreements.
Authentication
Clerk handles sign-in, MFA, and session management. Your credentials are never stored by AlitaGPT.
Payments
Stripe processes all billing. We never see or store your full card number.
Integrations
When you connect apps (Gmail, Slack, Notion, etc.), only the permissions you grant are used. You can revoke access at any time.
Each provider maintains its own privacy policy. We share only the minimum data necessary.
5. Your Rights
Access & export
View and download all your data at any time from your ALITA dashboard.
Correction
Update your personal information through account settings or by contacting support.
Deletion
Request account deletion and we will permanently remove your container and all associated data within 30 days.
GDPR & CCPA
If you are in the EU or California, you have additional rights including data portability, right to restrict processing, and the right to opt out of data sales (we do not sell data).
6. Contact Us
Privacy inquiries
Reach us at legal@alitagpt.com. We will respond within 30 business days.