Privacy Policy

Data controller: Alliance Regulatory Limited

2301, 23/F, Bayfield Building,

99 Hennessy Road, Wan Chai,

Hong Kong

For privacy questions: contact@allianceregulatory.com

We collect only the minimum data necessary to operate the Service securely and effectively.

Purposes: Abuse prevention, security (fraud / spam detection), service availability, basic analytics (aggregate usage trends), freemium enforcement (query limits).

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) - balanced against your rights; essential for security and proper functioning.

Chat content (queries and responses): Provide answers, improve response quality (limited manual review of last 100 - 200 anonymised interactions), debug issues. Contractual necessity (Art. 6(1)(b) GDPR) to deliver the Service; legitimate interests for quality improvement.

Freemium tracking (if enabled): Anonymous user identifier (via device fingerprint, localStorage, or cookie) for monthly query count (5 free queries).

Purposes: Enforce free-tier limits.

Legal basis: Consent (required for non-essential tracking under ePrivacy/GDPR; via banner); legitimate interests as fallback for truly essential elements. For users outside the EU, handled under local laws or legitimate interests without mandatory EU-style consent.

For users outside the EU, freemium tracking and other processing rely on our legitimate interests or local applicable laws, without mandatory EU-style consent where not required.

We do not collect names, emails, or other direct identifiers unless you voluntarily provide them (in a query or optional signup). We do not use chat content to train or fine-tune AI models without your separate explicit consent.

Alex Bridges is a limited-risk generative AI system under the EU AI Act.

We provide the following transparency information in line with EU AI Act requirements (applicable for interactions in the EU or outputs used in the EU). Similar clear disclosures about AI-generated content apply globally to promote trust and accuracy.

The following transparency information is provided in line with EU AI Act requirements (applicable when interacting with users in the EU or when outputs are used in the EU). We apply similar clear disclosures globally for trust and accuracy.

• You are interacting with an AI system (powered by Qwen model via Dify), not a human.
• All responses are AI-generated and may exceptionally contain inaccuracies or hallucinations - always verify with official EU / national sources (ECHA, EFSA, ANSES, etc.).
• Outputs are not intended as formal legal / regulatory advice; they are informational only. Where relevant (regulatory / professional guidance), outputs may be marked as AI-generated (via suffixes or notes).
• We do not engage in emotion recognition, biometric categorization, deepfakes, or high-risk processing.

• Chat logs and metadata: Maximum 60 to 90 days (auto-deleted unless needed for legal / security reasons).
• Anonymized aggregate stats: Up to 2 years for service improvement.
• IP / device fingerprints for freemium: Only during active session + 24h reset period.

We do not sell or share personal data for marketing / advertising.

• Processors (under GDPR Art. 28 Data Processing Agreements, DPAs): Hosting providers, Dify platform (for knowledge base and inference), local infrastructure (with EU data residency where possible), payment processor (Stripe). All bound by strict contracts.
• Legal requirements: If compelled by law, court order, or to protect rights / safety.

No transfers of personal data outside the EEA occur except as described in the 'Data location and international transfers' section above and are always covered by appropriate safeguards such as Standard Contractual Clauses (SCCs).

Our primary infrastructure and data processing are located in the European Economic Area (EEA). This means that, in normal operation, personal data (including chat content and metadata) is stored and processed within the EEA. For service resilience and redundancy, we may in the future replicate limited data in Hong Kong. Any such transfer to Hong Kong will be protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) together with technical and organisational measures. We do not routinely transfer personal data outside the EEA except where necessary for the purposes set out in this policy.

The rights listed below apply fully under GDPR to individuals located in the EU / EEA whose data we process under its scope. For users in other jurisdictions (China under PIPL, US states with privacy laws, Brazil LGPD, India DPDP), equivalent or similar rights may exist under local laws. Contact us at contact@allianceregulatory.com - we will respond to reasonable requests for access, deletion, correction, or other concerns within one month (extendable if complex).

You have the right to:

• Access your data
• Rectify inaccurate data
• Erase data ("right to be forgotten")
• Restrict processing
• Object to processing (especially legitimate interests)
• Data portability
• Withdraw consent (where applicable)
• Lodge a complaint with your national supervisory authority (CNIL in France: cnil.fr).

We implement appropriate technical and organizational measures:

• HTTPS encryption in transit.
• Logs encrypted at rest.
• Access controls on dashboard / backend.
• Anonymization / pseudonymization where possible.
• Regular security reviews.

• Essential cookies: For core functionality (session, freemium counter). No consent required.
• Non-essential (analytics / tracking): Only with your consent via banner.
• Consent banner: Appears on first visit; choices stored in localStorage / cookie. You can withdraw anytime via footer link.

The Service is not directed at children under 16. We do not knowingly collect data from children.

We may update this policy. Changes will be posted here with updated effective date. Significant changes notified via in-chat notice or email (if you provided one).

For privacy questions: contact@allianceregulatory.com

By using Alex Bridges, you acknowledge this Privacy Policy. Thank you for trusting us with your queries.