Privacy Policy and Personal Data Processing

Last Updated: March 5, 2026

1. Introduction

This Privacy Policy describes how Alephius S.A. (Tax ID / CUIT: 30-71815935-7), located at Vidal 2261, Autonomous City of Buenos Aires, Argentina (hereinafter, “Alephius”, “we”, or “the Company”), collects, uses, stores, and protects information in the context of providing its Internet of Things (IoT) services and associated technological solutions.

Our service operates under a B2B (Business to Business) model. We do not register end users directly; the client companies that contract our services provide us with the necessary data of the authorized personnel to use our platforms.

2. Information We Collect

To ensure the correct technical and operational functioning of our services, we process the following types of data:

Data provided by client companies: Name, email address, and phone number of the operators or users designated by the client company to access our platforms.
Meta (WhatsApp) integration data: When interacting with our services through alerts, notifications, or bots managed via WhatsApp, we receive the standard information that the Meta API allows processing for message delivery (e.g., phone number and messaging metadata).
Technical and telemetry data: We collect information automatically generated by the technical operation of the service, including telemetry from IoT devices and sensors connected to our infrastructure, as well as general usage data from the web platform.
Third-Party Integrations: If the client company chooses to link external services (e.g., Atlassian’s Jira), we collect and store the necessary credentials (such as API Tokens or OAuth 2.0 access tokens) to establish the connection. We also process the identifiers for workspaces or projects selected by the client.

3. Use of Information

The collected information is used exclusively for the following purposes:

Technical operation: Ensure connectivity, monitoring, and proper functioning of IoT ecosystems, cloud platforms, and embedded systems.
Service communications: Send sensor alerts, operational notifications, and technical support via email or WhatsApp.
Service improvement and future development: Telemetry and usage data (properly anonymized and unlinked from the user’s personal identity) may be used in the future to train and optimize Alephius’s own machine learning models and data algorithms to improve the efficiency of IoT solutions.

4. Data Storage and Security

At Alephius, we consider information security a fundamental pillar of our infrastructure. Data is hosted in a hybrid environment that combines our own infrastructure with Google Cloud (GCloud) services, ensuring high availability and redundancy.

We implement industry-standard technical, administrative, and physical security measures to protect information against unauthorized access, alteration, disclosure, or destruction. Our security practices include, but are not limited to:

Encryption in transit: All communications between our clients, web platforms, and APIs are encrypted using secure protocols (HTTPS/TLS), ensuring the integrity of data in motion.
Storage Security: Passwords and access credentials are not stored in plain text; we use robust hashing algorithms and salting practices. Credentials and access tokens for third-party integrations (Atlassian, etc.) are treated with encryption protocols equivalent to our internal security measures, ensuring they are not accessible in plain text.
Database Protection: We implement strict access controls, network segmentation, and query parameterization to prevent vulnerabilities such as SQL injections in our relational databases.
Authentication and access control: Access to our cloud services and administration panels is protected by token-based authentication systems, ensuring that only authorized personnel from the client company can access their respective information.
Information backup: We perform regular backups of critical data to ensure service continuity and rapid recovery in the event of technical incidents.

5. Sharing Information with Third Parties

Data exchange with integrated platforms: When a user activates an integration with external services (such as Jira), Alephius acts as an intermediary to transfer the information necessary to execute the requested action (e.g., sending incident data to create a ticket). The processing of that data on the destination platform will be governed by the terms and privacy policies of that provider (e.g., Atlassian).

6. User Rights and Data Deletion

In strict compliance with Law No. 25,326 on Personal Data Protection of the Argentine Republic and international privacy standards, every user (or the client company on their behalf) has the irrevocable right to access, rectify, update, or request the permanent deletion of their personal data from our systems.

To exercise the right of suppression and request the deletion of an account and all its associated data (including the unlinking of any messaging service or third-party integration), the applicant must send an email to:

ventas@alephius.com

Our support team will process the request, proceeding with the deletion of the records in our databases and confirming the resolution of the process within a maximum period of 5 business days.

7. Contact

For any doubts, inquiries, or the exercise of rights related to this Privacy Policy, please contact us through our official email: ventas@alephius.com.