Privacy Policy

1. Who we are

Altascio Technologies ("Altascio", "we", "us") operates altascio.ai and the related subdomains used to deliver our applied AI engagements, applications, and the onescio platform. This Privacy Policy applies to information collected through altascio.ai and any pages served from this domain.

Our enterprise products (Taxscio, Revscio, onescio) have separate data processing agreements with our customers. This policy governs the public marketing website only.

2. What we collect

We collect two categories of information: data you give us, and data the browser automatically sends when you visit.

2.1 Information you give us

When you fill in a form on altascio.ai — for example the "Talk to an expert" enquiry, the Talent application, or a product access request — we collect:

• Full name — required
• Email address — required
• Company or organisation — required
• Phone number — required for most enquiry types
• Message / use case — what you've told us about your problem
• Attachments — only when you upload one (e.g. a brief or resume). Files are scanned for permitted types and stored on our server.

2.2 Information collected automatically

We run a first-party analytics script (tracker.js) on every page of altascio.ai. It records technical and behavioural signals so we can understand how the site is used and improve it.

3. Why we collect it

• Respond to your enquiry. Contact details and message go to our pipeline so a human can reply.
• Understand site performance. Page-view, scroll, and click data tell us which pages are useful and which need work.
• Detect abuse. IP and User-Agent help us spot scraping, brute-force form submissions, and unusual traffic patterns.
• Attribute marketing. UTM parameters and referrers help us understand which channels send useful visitors.
• Match enquiries to visit history. When you submit a form, we link the enquiry to your visitor ID so we can see the pages you read before getting in touch — this helps the person responding give you a more relevant answer.

4. Legal basis (GDPR & equivalents)

If you're in the UK, EU, or another jurisdiction with similar rules, we rely on the following bases:

• Legitimate interests — for analytics, security, and understanding how the site is used. We've balanced this against your rights and limited the data we collect accordingly.
• Performance of a contract — when you ask us to contact you about an engagement, we process your information to respond.
• Consent — where required by local law (e.g. for non-essential analytics in some jurisdictions).
• Legal obligation — if we ever need to retain data to comply with law (e.g. tax or audit records).

5. Where it's stored

All site analytics, enquiry data, and uploaded files are stored in our own infrastructure under the altascio.ai domain. We use a managed MySQL database and standard server-side file storage. We don't ship your data to third-party SaaS analytics products.

Our primary data centre and operational team are based in India. We may process data in other regions as our infrastructure grows. International transfers are made under appropriate safeguards (e.g. standard contractual clauses where required).

6. Sharing & processors

We don't sell your data. We don't share it for advertising. The third parties we do work with are limited to operational processors:

• ip-api.com — receives your IP address to return country / city / ISP. Used by our analytics for geo enrichment. (ip-api privacy →)
• Google Fonts & cdnjs (Font Awesome) — serve fonts and icons. These connections expose your IP and User-Agent to those CDNs as part of the standard web request.
• Our hosting provider — receives data in transit to operate the website.

We may share information with law enforcement or regulators if legally required.

7. How long we keep it

• Page views & events — retained while they remain useful for product and marketing analysis, typically up to 24 months, then aggregated or deleted.
• Enquiry records — retained for the duration of the commercial relationship and for a reasonable period after, so we can pick up where we left off if you return.
• Uploaded files — kept for the duration of the enquiry and deleted on request.
• Visitor and session IDs — the cookie-like values in your browser persist until you clear them. We don't reset them server-side.

8. Cookies & local storage

altascio.ai uses localStorage and sessionStorage instead of cookies for first-party analytics. Tracking is opt-in: on your first visit you'll see a consent banner at the bottom of the page.

• Accept — analytics start. The tracker creates two local keys: _msc_vid (visitor identifier, random UUID) and _msc_sid (session identifier, random UUID).
• Reject — the analytics script never runs. No identifiers are created, no requests are made to our tracker endpoint, and no IP → geo lookup is performed.

Your choice is stored in your browser under altascio_consent. You can change it any time by clicking Cookie settings on the banner (it reappears via the link in the footer) or by clearing site data in your browser. We also record your choice on our side (state, timestamp, IP, user-agent) so we can demonstrate consent under data-protection law — this record is kept regardless of whether you later accept or reject.

We do not use any other cookies on altascio.ai. Other domains we link to (Google Fonts, cdnjs) may set their own cookies according to their policies.

9. Your rights

Depending on where you live, you have the right to:

• Access — ask what we hold about you.
• Correct — ask us to fix anything that's wrong.
• Delete — ask us to remove enquiry records and analytics tied to your visitor ID.
• Object & restrict — tell us to stop processing your data in particular ways.
• Portability — receive a copy in a structured, machine-readable format.
• Withdraw consent — where processing relies on consent.
• Complain — to your local supervisory authority (in the UK, the ICO; in the EU, your national DPA).

To exercise any of these rights, email heyscio@altascio.ai with enough information for us to identify your records. We'll respond within 30 days.

10. Security

We protect data in transit with TLS and at rest using the access controls and encryption of our database provider. Access to enquiry data and analytics is restricted to authorised Altascio staff under the same role-based controls we build into our products.

No system is perfectly secure. If we ever experience a breach affecting your personal data, we'll notify you and the relevant authorities within the timeframes required by applicable law.

11. Children

altascio.ai is intended for business audiences and is not directed at children under 16. We don't knowingly collect personal data from children. If you believe we have, please contact us and we'll delete it.

12. Changes to this policy

We'll update this page when our practices change. Material changes will be reflected in the "Last updated" date at the top. For significant changes, we'll provide notice on the website. Continued use of altascio.ai after a change constitutes acceptance of the revised policy.

13. Contact