Privacy Policy

The controller of your personal information is MINDRA (AI) Solutions OÜ Ltd (registry code 17236155, registration number Ä 50282131), Narva mnt 5, 10117 Tallinn, Estonia. Contact for all privacy matters: info@mindrasolutions.com.

Account. Your email address, your password (kept by our sign-in provider in protected form, never in readable form), when you signed up and your plan.

What you do in ALPA. The searches you run (business type and location), the businesses you save, your lists and notes, your usage against your quota, and the actions that let us give you the product, such as exporting a CSV.

Trial. Without an account, your trial results and a trial identifier are kept in your browser and on our servers so that the results survive a reload and can be moved into an account if you sign up.

Billing. Stripe handles your card. We keep identifiers that link your account to your Stripe customer and subscription, the plan, its status and renewal dates.

Website activity. Pages and buttons used, the page you came from, campaign tags in the link (UTM), and approximate device type and browser, so that we can understand which pages and plans work and keep the service running.

Support. What you send us when you write to us.

ALPA assembles information about businesses from third-party sources and from their public websites: names, addresses, phone numbers, websites, ratings, categories and email addresses. Some of it can identify a person, for example an email address of a sole trader. We process it to provide the service to you; you are responsible for how you use it afterwards (see the Terms of Service).

If you are named in a result and want it corrected or removed, write to info@mindrasolutions.com. We will review the request and act on it as the law requires. Removing a business from ALPA’s results does not remove it from the third-party sources it came from.

• to run the service you asked for (sign you in, find and save businesses, apply your plan and quota, export your lists) and to take payment and manage your subscription. Basis: performing our contract with you;
• to keep ALPA secure, prevent abuse, fix problems and understand how it is used. Basis: our legitimate interests in a safe and working service;
• to provide business information to our customers for B2B prospecting. Basis: our and our customers’ legitimate interests, balanced against the rights of the people concerned, who can object as described above;
• to keep payment and accounting records. Basis: our legal obligations;
• to set analytics cookies, where that requires your consent. Basis: your consent.

We send you account emails (confirmation, password reset and billing messages) that you need to use the service. We do not send marketing emails, and we do not sell your personal information.

We share information with the companies that help us run ALPA, only as needed for the role listed:

• Supabase — database and sign-in (your account, saved businesses, usage records)
• Vercel — hosting and delivery of the website and its server functions
• Stripe — payments and subscriptions (card details are entered on Stripe, not on ALPA)
• Resend — sending account emails such as confirmation and password reset
• Google Places and Serper — finding businesses; they receive your search words and location, not your identity
• OpenAI — AI summaries of public business information
• Google Analytics — website statistics

We may also disclose information where the law requires it or to protect our rights, and to a successor if the business is sold.

Our database is hosted by Supabase in the United States. Our other providers may also process information outside the European Economic Area. Where we transfer personal information outside the EEA, we rely on a safeguard the GDPR allows for that transfer, such as an adequacy decision or standard contractual clauses. You can ask us for information about these safeguards.

ALPA uses cookies and browser storage that are needed to keep you signed in, hold your trial and remember your plan choice while you sign up. It also keeps campaign tags from the link you arrived on for the length of the visit.

Optional analytics cookies (Google Analytics) are used only if you accept them in the cookie banner. Before you choose, and if you reject them, Google Analytics is not loaded and sets no cookies. If you accept, it receives page views and a few event counts (such as which plan was viewed), not your email address, contact details, searches or the businesses you find. You can change your choice at any time, which stops further tracking and removes its cookies where possible: Cookie settings.

We keep your account and your saved business data while your account is open. If you ask us to delete your account we delete your personal information and the saved data linked to it, except records we are legally required to keep. Payment and accounting records are kept for as long as the law requires. Trial results that are not moved into an account are kept only as long as needed to run the trial.

Under the GDPR you can ask us for access to your personal information, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent you can withdraw it at any time. You can also cancel your subscription at any time (see the Refund and Cancellation Policy).

To use any of these rights, including account deletion, email info@mindrasolutions.com. At present these requests are handled by our team on request; there is no self-service deletion button in the product. We may need to confirm that the request comes from the account holder. We respond within the time the law requires.

Sign-in is handled by a dedicated provider, data is held in an access-controlled database where each customer can read only their own records, payments run through Stripe, and connections use encryption in transit. No system is perfectly secure, and we cannot promise that information will never be accessed without permission. Where the law requires it, we will notify the authority and the people affected of a breach.

ALPA is a business tool and is not directed at children. We do not knowingly collect their information.

If we change this policy in a material way we will update this page and give notice to account holders. The date of the latest update is shown at the top.

Privacy questions and requests: info@mindrasolutions.com. MINDRA (AI) Solutions OÜ Ltd, Narva mnt 5, 10117 Tallinn, Estonia. If you are not satisfied with our answer you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the data-protection authority of the country where you live or work.