Privacy Policy
Last updated: 6 May 2026
1. Introduction
AltScape (“we”, “our”, “us”) is a spatial social platform operated by AltScape Technologies Pvt. Ltd., India. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, mobile applications, and related services (collectively, the “Services”).
This policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, as well as applicable global privacy frameworks including the GDPR (EU/UK) and similar regulations.
2. Data Fiduciary
Under the DPDP Act, AltScape Technologies Pvt. Ltd. is the Data Fiduciary responsible for processing your personal data.
Contact: privacy@altscape.ai
Address: AltScape Technologies Pvt. Ltd., Bangalore, Karnataka, India — 560001
3. What Personal Data We Collect
We collect the following categories of personal data:
- Identity & Contact: Email address, display name, username, avatar image, date of birth, and phone number (if provided).
- Account & Authentication: OAuth provider identifiers (Google, Apple), session tokens, and authentication metadata.
- Profile & Preferences: Bio, location label (optional), theme preferences, notification settings, and AI companion configuration.
- Usage Data: Experiences joined, time spent, interactions with friends, content created (marks, stories, capsules, drops), and achievement progress.
- Device & Technical: Operating system, app version, browser type, IP address, push notification tokens, and crash logs.
- Spatial & Media: Audio recordings (spatial drops), images, video content, and 3D scene preferences — only when you explicitly create and upload them.
- Social Graph: Friend connections, group memberships, and interaction patterns.
We do NOT collect: Precise GPS location, contacts from your device, or browsing history outside our Services.
4. Legal Basis for Processing (DPDP Act)
Under the DPDP Act, we process your personal data based on the following grounds:
- Consent (Section 6): For most processing activities — you provide explicit consent during onboarding and can withdraw it at any time via Settings → Privacy.
- Legitimate Uses (Section 7): For essential operations such as fraud prevention, security, and compliance with legal obligations.
- Employment & Safety: Where necessary to protect your safety or the safety of others in emergency situations.
5. How We Use Your Data
- To provide, maintain, and improve the Services.
- To personalise your feed, recommend experiences, and suggest friends.
- To send notifications you have explicitly opted into.
- To ensure platform safety and enforce our Community Guidelines.
- To analyse usage patterns and improve performance (anonymised where possible).
- To comply with legal obligations and respond to lawful requests.
6. Data Sharing & Transfers
We do not sell your personal data. We share limited data with:
- Cloud & Infrastructure: Supabase (database hosting), LiveKit (video/audio rooms), and cloud storage providers — under strict data processing agreements.
- Authentication: Google and Apple OAuth services — only the minimum data required for sign-in.
- Analytics & Error Tracking: Sentry (crash reporting) and PostHog (product analytics) — anonymised or pseudonymised where feasible.
- Law Enforcement: Only when legally required by a competent authority under Indian law.
Cross-border transfers: Some service providers may process data outside India. We ensure adequate safeguards through Standard Contractual Clauses (SCCs) and provider certifications.
7. Data Retention
We retain your personal data for as long as you maintain an active account. If you delete your account, we erase or anonymise your data within 30 days, except where we are legally required to retain it (e.g., for tax, fraud prevention, or legal dispute purposes). Backup systems may retain copies for up to 90 days in encrypted form.
8. Your Rights Under DPDP Act
As a Data Principal, you have the following rights:
- Right to Access (Section 12): Request a copy of your personal data.
- Right to Correction & Erasure (Section 12): Correct inaccuracies or request deletion of your data.
- Right to Grievance Redressal (Section 13): Lodge a complaint with our Data Protection Officer or the Data Protection Board of India.
- Right to Nominate (Section 14): Nominate another individual to exercise your rights in case of death or incapacity.
- Right to Withdraw Consent (Section 6): Withdraw consent for any processing activity at any time.
To exercise these rights, email privacy@altscape.ai or use the in-app controls at Settings → Privacy.
9. Grievance Officer
Under the DPDP Act, 2023, AltScape has appointed a Data Protection Officer / Grievance Officer to address your concerns:
- Name: AltScape Data Protection Officer
- Designation: Data Protection Officer (DPO)
- Email: grievance@altscape.ai
- Response time: Within 30 days of receiving your complaint
If you are not satisfied with our response, you may approach the Data Protection Board of India under the DPDP Act, 2023.
10. Cookies & Tracking Technologies
Our website uses cookies and similar technologies. For detailed information, please see our Cookie Notice.
10. Children's Privacy
AltScape is not intended for users under 13 years of age (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
11. Security Measures
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), Row-Level Security (RLS) in our database, regular vulnerability audits, and access controls. Despite these measures, no system is completely secure. Please use a strong, unique password and enable two-factor authentication where available.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice at least 30 days before they take effect. The “Last updated” date at the top of this page indicates when the policy was last revised.
13. Contact Us
Data Protection Officer
Email: privacy@altscape.ai
Address: AltScape Technologies Pvt. Ltd., Bangalore, Karnataka, India — 560001
If you are unsatisfied with our response, you may lodge a complaint with the Data Protection Board of India under the DPDP Act, 2023.