Privacy Policy

The data controller for personal data collected on this website is Global Ace Technology Pvt. Ltd. operating as OrionAlerts.

• Address: K Raheja Platinum, 3rd Floor, Marol, Andheri East, Mumbai, Maharashtra 400059
• Privacy requests: privacy@orionalerts.com
• General contact: sales@orionalerts.com

To exercise privacy rights or ask a privacy question, email privacy@orionalerts.com or use the contact form and select a privacy-related topic in your message.

We process website-related personal data for the following purposes:

• Responding to demo requests and contact inquiries (legitimate interests / steps prior to a contract).
• Preventing abuse and automated submissions via rate-limiting and Google reCAPTCHA on the demo form (legitimate interests / security).
• Operating and securing the website and admin authentication cookie for staff (legitimate interests / necessary for service).
• Complying with applicable law when required (legal obligation).

The lawful bases above describe how we operate this website under India's Digital Personal Data Protection Act and other regimes that may apply to visitors or customers. Where another law requires consent or a different basis for a specific activity, we will apply that requirement.

Lead forms collect the following fields (phone is optional; product interest or contact topic depends on the form):

• Full name
• Work email
• Company
• Phone (optional)
• Message
• Product interest (demo) or contact topic (contact)

The server also records the requester IP address for rate-limiting and may write the full submission to application logs. This is personal data processing even when no marketing cookie is set.

We do not currently operate advertising pixels, behavioral analytics, or sessionStorage-based tracking in the public site source. Cookie preference choices are stored in first-party localStorage (oa_cookie_consent_v1) with version, timestamp, region (unspecified until geo detection exists), and category flags only.

The following register reflects technologies present in the current codebase and planned production roles.

International transfers (for example to Google for reCAPTCHA) should be assessed under applicable transfer rules. Do not assert ERP/CRM storage until that integration exists.

• Lead submissions: Retained only as long as needed to respond to your inquiry and related follow-up, then deleted or anonymised from application logs when no longer required.
• Application / server logs containing submission details: Server and application logs that include submission details are kept only as long as needed for security, debugging, and abuse prevention.
• reCAPTCHA verification records: Verification is processed under Google’s reCAPTCHA terms; OrionAlerts does not keep a separate long-term reCAPTCHA archive.
• Rejected or rate-limited attempts: retain only as needed for abuse monitoring, then delete or anonymize.

IP addresses used for rate-limiting should be minimized and not kept longer than needed for security. Personal data should be redacted from general application logs where feasible.

Depending on where you live, you may have rights to access, correct, delete, restrict, or withdraw consent for certain processing, and to receive information about how we use your data. Under India's Digital Personal Data Protection Act 2023 and related rules, additional rights and duties may apply once in force for OrionAlerts' operations.

To make a request, email privacy@orionalerts.com. We may need to verify your identity before fulfilling a request.

You may also have the right to complain to a competent data protection authority or, when applicable, India's Data Protection Board. Contact privacy@orionalerts.com first.

We apply administrative and technical measures appropriate to the nature of website lead data, including HTTPS in production, HttpOnly session cookies for admin access, and rate-limiting on lead endpoints. See our Trust & Security page for the program summary and responsible disclosure contact. No method of transmission or storage is completely secure.

This website and its lead forms are directed to business and institutional users. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact privacy@orionalerts.com so we can delete it.

We may update this Privacy Policy to reflect product, vendor, or legal changes. The effective date at the top of this page will be revised when material changes are published. Continued use of the website after an update constitutes notice of the revised policy where permitted by law.