1. Who we are
Alpha to Digits operates al-Kindi Ai, this website and the Masha Mini experience. For the purposes of this Privacy Policy, Alpha to Digits is the organization responsible for operating the service and handling personal data in connection with this experience. “al-Kindi Ai” and “Masha” refer to the relevant products and services.
Privacy and data-protection requests may be submitted through the official contact channels available at www.alkindiai.ai .
2. What personal data we may collect
Depending on how you use the service, we may process:
- contact and business information such as your name, work email, company and sector;
- jurisdiction, country, report-language and service preferences;
- datasets and content you choose to upload to Masha, including any personal data contained in those datasets;
- generated analysis, reports, classifications and operational outputs;
- technical, security and anti-abuse data, including device identifiers, IP-derived security information, timestamps, quota and usage events;
- browser-storage information used to remember language preferences and demo access;
- for authorized Staff Demo Mode, verified Google account information used to authenticate staff access; and
- marketing preferences where you separately choose to receive information from us.
3. Uploaded datasets
Please upload only data that you are authorized to provide. Where possible, remove or mask names, account numbers, identifiers and other unnecessary personal information before uploading a dataset.
Masha Mini is not intended for unnecessary sensitive personal data. If a dataset contains personal data relating to other individuals, the person or organization uploading it is responsible for ensuring that the collection, use and disclosure of that data is lawful and appropriate.
4. Why we process data
We process personal data to provide the requested Masha analysis and report, operate the website and demo, communicate with users, secure the service, prevent abuse, enforce usage limits, troubleshoot failures, maintain audit and operational records, improve reliability, and comply with applicable legal obligations.
Marketing communications are processed only where the relevant user has chosen to receive them or where another lawful basis applies.
5. Artificial intelligence processing
Masha uses artificial intelligence and deterministic analytical controls to process uploaded information and generate analysis. AI-generated outputs may contain limitations and should be reviewed in the context in which they are used.
Google Cloud states that customer data submitted to its enterprise AI services is not used to train Google foundation models without customer permission.
6. Public-signal analyses
al-Kindi Ai may create independent analyses from publicly available customer conversations and public signals for demonstration, research or product-illustration purposes.
Public availability does not remove data- protection responsibilities. When publishing such examples, we aim to minimize unnecessary personal identifiers and avoid implying that the organizations discussed sponsor, endorse or are affiliated with the analysis unless such a relationship actually exists.
7. Service providers and disclosures
We may use service providers that support cloud hosting, artificial intelligence, authentication, security, monitoring and email delivery. These providers process data only as required to provide the relevant service and subject to applicable agreements and safeguards.
We may also disclose information where required by law, regulation, a lawful government request, or where necessary to protect the security and integrity of the service.
8. Data location and international transfers
The current Masha Mini LEAP demonstration environment uses Google Cloud infrastructure in the europe-west3 region in Frankfurt, Germany. This means that personal data submitted through this demo may be processed outside the Kingdom of Saudi Arabia.
Where cross-border processing or transfer is subject to applicable data-protection law, we seek to apply the required contractual, organizational and technical safeguards. Enterprise deployments may use different hosting or data-residency arrangements under the relevant customer agreement.
9. How long we retain data
We retain information only for as long as reasonably necessary for the purposes for which it was collected, including delivering the requested report, service operations, troubleshooting, security, audit, dispute handling and legal obligations.
Different records may have different retention periods. When information is no longer required, it is deleted, destroyed or de-identified in accordance with applicable requirements and our operational retention processes.
10. Security
We use technical and organizational measures designed to protect data against unauthorized access, disclosure, alteration or loss. These include access controls, authenticated service communication, cloud-security controls, operational logging and least-privilege access practices.
11. Your privacy rights
Subject to applicable law and relevant exceptions, you may have rights to be informed about the processing of your personal data, access your data, obtain a readable copy, request correction or completion, request destruction where applicable, and withdraw consent where processing relies on consent.
We may need to verify your identity before acting on a privacy request.
12. Browser storage
The LEAP experience may use browser local or session storage to remember language settings, generate a demo device identifier, maintain authorized staff sessions and support service security and quota controls.
13. Changes to this policy
We may update this Privacy Policy as the service, deployment model or applicable legal requirements evolve. The current version will be published on this page with its effective date.
14. Contact
For privacy questions or requests relating to Alpha to Digits, al-Kindi Ai or Masha, please use the official contact channels available at www.alkindiai.ai .