Alapan
Legal

Privacy Policy

Last updated: 30 May 2026

This Privacy Policy explains how Alapan collects, uses, and protects your personal information when you visit our website or contact us. We are committed to handling your data with care and transparency.

1. Who we are

Alapan ("we", "us", "our") is a web engineering studio based in Hyderabad, India. We build agentic websites and custom AI applications for clients in India and internationally. Our registered address is: Pranava Business Park, Land Mark Residency, Serilingampalli, Kothaguda, Hyderabad – 500084, Telangana, India. You can reach us at contact@alapan.dev for any privacy-related queries.

2. What data we collect

We collect the following categories of personal data: Contact form data: When you contact us via our website, we collect your name, email address, company name, and the message you send. This data is submitted voluntarily. Usage data: We may collect anonymised information about how visitors use our website, including pages visited, time spent, and referring URLs. This data does not identify you personally. Cloudflare Turnstile: Our contact form uses Cloudflare Turnstile to prevent spam. Cloudflare may process your IP address and browser signals to determine whether you are a human. Cloudflare's privacy policy governs this processing. We do not receive or store this data directly. Cookies: We may use essential cookies to operate our website. We do not use advertising or tracking cookies.

3. How we use your data

We use the data you submit through our contact form to: - Respond to your enquiry or project request - Create a contact record in our internal Relationship Intelligence system - Follow up with information relevant to your enquiry We do not use your data for marketing communications unless you explicitly consent. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal basis for processing

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your personal data is: Legitimate interest: processing enquiries and communicating with prospective clients is necessary for us to operate our business. Contract: where we process data to fulfil a service agreement with you or your organisation. Consent: where we have explicitly requested and received your consent for a specific purpose.

5. Data storage and security

Your contact form submissions are stored in our self-hosted PayloadCMS database, which runs on infrastructure we control. We do not use hosted third-party CRM services. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Access to your data is restricted to team members who require it to respond to your enquiry. Where we transfer data internationally (for example, if we engage service providers outside India), we take steps to ensure appropriate protections are in place.

6. Data retention

We retain contact form submissions and associated Relationship Intelligence records for as long as reasonably necessary to manage our client relationships, or until you request deletion. If we do not proceed to a working relationship, we will delete your data within 24 months of your initial contact unless you have asked us to keep it.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data: Right to access: You can request a copy of the personal data we hold about you. Right to rectification: You can ask us to correct inaccurate or incomplete data. Right to erasure: You can ask us to delete your data ("right to be forgotten"). Right to restrict processing: You can ask us to limit how we use your data. Right to data portability: You can ask us to provide your data in a structured, machine-readable format. Right to object: You can object to our processing of your data based on legitimate interest. To exercise any of these rights, contact us at contact@alapan.dev. We will respond within 30 days. If you are in the EEA or UK and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.

8. Third-party services

Our website integrates the following third-party services that may process your data: Cloudflare Turnstile: bot detection on our contact form. Governed by Cloudflare's Privacy Policy (cloudflare.com/privacypolicy). We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.

9. Children's privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact

For any questions about this Privacy Policy or how we handle your data, contact us at: Email: contact@alapan.dev Address: Pranava Business Park, Land Mark Residency, Serilingampalli, Kothaguda, Hyderabad – 500084, Telangana, India