Privacy Policy

Information you provide directly

• Name, email address, phone number when you create an account or place an order
• Billing and shipping address
• Payment information (processed securely through our payment gateway — we do not store card details)
• Business name, GST number, and designation for institutional or B2B orders
• Messages you send us via contact forms or email

Information collected automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent, and navigation patterns via cookies and analytics tools
• Referral source (how you arrived at our site)

Information from third parties

• Payment gateway transaction references
• Shipping partner delivery status updates

• To process and fulfil your orders, including shipping and invoicing
• To communicate order confirmations, shipping updates, and support responses
• To manage your account and purchase history
• To issue GST-compliant tax invoices
• To respond to enquiries, complaints, and refund requests
• To improve our website, products, and customer experience
• To send you relevant product information or offers — only where you have consented
• To comply with applicable Indian laws and regulatory obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We share your data only to the extent necessary to fulfil your order or comply with law:

• Payment gateways — to process transactions securely
• Shipping and logistics partners — to deliver your order
• Accounting and invoicing software — for GST-compliant billing
• Website analytics providers (e.g. Google Analytics) — for aggregated, anonymised usage data
• Legal or regulatory authorities — where required by Indian law, court order, or government direction

All third-party service providers we work with are required to handle your data in a manner consistent with this policy.

We retain your personal data for as long as necessary to provide our services and meet legal obligations:

• Order records and invoices are retained for a minimum of 8 years in compliance with Indian tax and accounting laws
• Account information is retained while your account is active and for a reasonable period thereafter
• Marketing consent records are retained until you withdraw consent
• Analytics data is retained in anonymised, aggregated form

You may request the following, subject to applicable law and its commencement provisions:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Erase your personal data where we no longer have a lawful basis for processing it
• Withdraw consent for marketing communications at any time
• Nominate a person to exercise your rights in the event of your death or incapacity

To exercise any of these rights, write to us at care@allesclinx.com. We will respond within 30 days.

We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include SSL encryption on all data transmissions, access controls, and secure hosting.

However, no method of internet transmission is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. In the event of a data breach that is likely to cause you harm, we will notify you as required under applicable law.

Our website and products are intended for adult individuals and institutional buyers. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Where a change requires fresh consent, posting a revised notice does not replace that requirement.

The main website maintains your WordPress/WooCommerce customer identity. auth.allesclinx.com helps verify that identity for connected services, including ai.allesclinx.com, through a sign-in redirect. The AI service receives a minimum internal account identifier and maintains its own session; it does not receive your WordPress password. If you choose Google, the identity information authorised on its consent screen is used by our social-login integration to recognise or create your customer account. This does not grant Nova access to Gmail, Google Drive, contacts or private Google files.

Nova sends your question, relevant conversation context and any selected attachment to the AI application server. Configured AI, search, vision or OCR providers process the content required for the requested capability. Current integrations include Groq, Brave Search and Mistral OCR when configured. Turning off Web does not make an AI conversation local-only. Avoid confidential files and personal records; redact unnecessary identifiers before sending. Read the AI site’s Privacy and AI & data use notices for the applicable processing boundaries and provider details.

Nova’s live product and document cards retrieve public catalog and document-library information. This connection does not retrieve your private orders, addresses, payments or customer records. A shared login does not make your WooCommerce information part of an AI prompt. A PDF preview or download requests the file from its host; a link in an answer does not mean Nova has read the full PDF. Product purchases and support cases continue to be handled through the main site.

Recent Nova conversations and Like/Dislike feedback are stored in the browser on the AI site. Saved facility-tool drafts can also remain on the device. These records do not automatically sync across accounts or devices. New conversation clears the current saved chat; browser site-data controls remove remaining or legacy data for that origin. Signing out does not delete local history. Copy text uses your device’s clipboard. Listen uses browser speech synthesis and available voices, whose processing can depend on the browser or operating-system vendor; it does not record your microphone.

We use the details needed for the task you request: account verification, quotations, order fulfilment, invoices, delivery, support and service security. Marketing choices are separate from necessary order and account messages. You may withdraw marketing consent without cancelling an order or losing access to essential support. Where consent is required for optional processing, it should be obtained for that purpose; visiting a page or reading this notice is not a substitute for that consent.

Customer records, invoice retention and legal obligations are distinct from browser chat history. The current AI request handler does not write conversation messages or uploaded file contents to an application conversation database. Hosting and external providers may maintain operational logs or apply their own retention terms, including processing outside India. Clearing a browser does not erase provider records, downloaded files or support emails. We do not promise zero retention, India-only hosting or a universal provider training opt-out through this notice.

Write to care@allesclinx.com with the subject Privacy request, the relevant website and account, and the access, correction, deletion, consent or grievance issue you want addressed. We may need proportionate verification before releasing data or altering an account. Do not include a password, OTP or unredacted identity document in the first message. We will explain any records that must remain for an applicable legal, accounting, dispute or security purpose. Statutory rights apply according to the law in force and its commencement provisions. Escalation to an applicable authority remains available where the law provides it.