Who we are and our role
Project Alpha is a trade name of Architechs B.V., located at Hymnestraat 11, 7323 KR Apeldoorn and registered with the Dutch Chamber of Commerce under number 89882105. For privacy questions, email privacy@alphamonitoring.app.
We have two roles under the GDPR:
- Controller for data about visitors to this website, people who request a demo or contact us, and for customer account administration and billing. This policy covers that data.
- Processor for the data our customers process in the platform: installation measurements, park configurations, uploaded documents and the users within a customer environment. For that data our customer is the controller and we sign a data processing agreement. If you work for one of our customers, your employer's privacy policy applies.
We have not appointed a data protection officer, as we are not required to.
What data, for what purpose, on what basis
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Technical data when you visit the website: IP address, browser, requested page and time | Deliver and secure the website, detect abuse | Legitimate interest: a secure, working website | 30 days |
| Demo request: name, business email, company, role, stated solar and storage capacity and your message | Contact you and prepare a demo | Legitimate interest, and steps at your request before a contract | 12 months after last contact, unless you become a customer |
| Account: name, email address, hashed password, organisation, role and preferences | Give access to the platform and manage the account | Performance of the contract | As long as the account exists, then 90 days |
| Sign-in and activity logs: sessions, IP address, time and actions taken | Security, abuse prevention and incident investigation | Legitimate interest: a secure platform | 12 months |
| Billing: company details, contact person, invoices and payments | Send invoices and keep records | Legal obligation (Dutch tax retention) | 7 years |
| Support messages and email correspondence | Answer questions and improve the service | Performance of the contract, or legitimate interest | 24 months |
You are not legally required to provide this data. Without account details, however, we cannot give you access to the platform, and without contact details we cannot respond to a demo request.
Data customers process in the platform
In the platform, customers process measurements from inverters, data loggers, meters and weather stations, details about their installations, documents they upload and messages to the AI assistant. We process that data only on the customer's instructions and under the data processing agreement.
Measurements from a small or residential installation can be traced to a person or address. In that case they are personal data, for example because generation and consumption can reveal whether someone is home. We therefore treat such data as personal data.
Data we don't get from you directly
We receive some data through others:
- From inverter manufacturers and monitoring portals such as SMA, through their official APIs. This only happens after the installation owner has given consent. It covers installation and measurement data and the name and email of the account that gave consent. You can withdraw consent at any time in the manufacturer's portal. We then stop collecting new data. Data already collected is kept as agreed with our customer.
- From your employer or a colleague who invites you to the platform: your name, email address and role.
- From files a customer uploads, such as datasheets, handover files and logger files.
AI features
The platform has an AI assistant and uses AI to extract data from uploaded documents. The interface clearly shows when you are working with AI.
For these features we send the necessary text and documents to an AI provider: Anthropic (Claude), OpenAI or Cloudflare (Workers AI). Through their business APIs, these providers do not use your data to train models. They keep it only temporarily for abuse monitoring, usually for at most 30 days.
We make no decisions based solely on automated processing that have legal or similarly significant effects on you. AI output is a suggestion; a person decides.
Who we share data with
We do not sell personal data. We only share it with parties that help us deliver the service. Those parties are bound by a data processing agreement:
| Party | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| OVH SAS (OVHcloud) | Hosting the website, platform, database and files | EU (Poland) | Not needed: within the EEA |
| Cloudflare, Inc. | Sending emails, AI processing (Workers AI) and bot protection (Turnstile) on the demo form | Global, including the US | EU-US Data Privacy Framework and standard contractual clauses |
| Anthropic, PBC | AI assistant and document extraction (Claude) | US | Standard contractual clauses, and the EU-US Data Privacy Framework where applicable |
| OpenAI | AI assistant and document extraction | US | Standard contractual clauses, and the EU-US Data Privacy Framework where applicable |
We also exchange data with the manufacturer portals a customer connects, and we share data when the law requires us to.
Transfers outside the European Economic Area
We store customer data in the EU, at OVHcloud. Some service providers, for email and AI, are based in the United States. Data is only transferred if the provider is certified under the EU-US Data Privacy Framework or if we have agreed the European Commission's standard contractual clauses. We add further measures where needed. On request, we'll send you a copy of the safeguards.
Security
We take appropriate technical and organisational measures to protect data. Our security page explains how, and how to report a vulnerability. If something does go wrong, we report a data breach to the Dutch Data Protection Authority within 72 hours where required, and inform the people and customers affected.
Your rights
You have the right to:
- access your data and receive a copy;
- have incorrect data corrected;
- have your data deleted;
- restrict processing;
- object to processing based on legitimate interest;
- receive your data in a common format or have it transferred;
- withdraw consent at any time.
Send your request to privacy@alphamonitoring.app. We respond within one month. If it concerns data we process for a customer, we forward your request to that customer.
Not happy with how we handle your data? You can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). We'd like to hear from you first.
Changes
We update this policy when our service or the law changes. The date at the top shows the last update. We inform customers in advance of important changes.