Privacy Policy

Last updated: 26 September 2026

Alfacan Defence Group Limited Registered in England and Wales | Company No. 17062702 Registered Office: 66 Paul Street, London, EC2A 4NA, United Kingdom Email: info@alfa-can.com

1. Introduction

Alfacan Defence Group Limited ("we", "us", "our") operates the Guardian AI platform available at guardian.alfa-can.com ("Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR 2016/679).

By using our Platform, you agree to the collection and use of information in accordance with this Policy.

2. Data We Collect

2.1 Account Data

Full name
Email address
Company name and registration details
Billing address
Payment information (processed securely via third-party payment providers)

2.2 Technical Data

IP address
Browser type and version
Operating system
Pages visited and time spent
Referral URLs

2.3 Platform Usage Data

Infrastructure connection details (server endpoints, cloud provider identifiers)
Log data and error reports generated by your connected systems
Configuration settings and automation rules you create

2.4 AI Coding and Testing Tools (α-Coder, α-Tester)

Task summaries: when you accept a result of the AI assistant in α-Coder, a short summary of the task is sent to our servers — what was asked, what the assistant said and did, errors and the final result. File contents are not included; command output and error text are clipped, and recognisable secrets (passwords, tokens, API keys, private keys) are masked before sending.
Lessons: our AI models extract reusable engineering lessons from the summary. Summaries themselves are not stored; we keep only the extracted lessons and their quality assessment.
You can switch this off at any time in the editor settings (Share experience / falco.shareExperience); nothing is sent while it is off.
α-Tester: lessons learned from a test job (about your tested system) are kept only for your own account, serve only your future test jobs, and are never added to the shared knowledge base.

2.5 Communication Data

Support requests and correspondence
Survey responses and feedback

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose	Legal Basis
Providing and maintaining the Platform	Performance of contract
Processing payments and managing subscriptions	Performance of contract
Sending service notifications and updates	Performance of contract
Improving our Platform and developing new features	Legitimate interests
Improving the AI assistants from task lessons (see 2.4): lessons from your projects are used only for your own account; a lesson is added to the shared knowledge base only after it has been rewritten without any details of your project and either reviewed by our staff or independently confirmed by at least two other customers	Legitimate interests (you can opt out)
Sending marketing communications (with consent)	Consent
Complying with legal obligations	Legal obligation
Fraud prevention and security	Legitimate interests

We never sell your personal data to third parties.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account termination:

Account data is deleted within 30 days
Billing records are retained for 7 years (UK legal requirement)
Log data is deleted within 90 days
Lessons extracted from your tasks (see 2.4) stop being used after 60 days and are deleted within the following month; on request (for example, when you close your account) we delete them earlier. Anonymised lessons that entered the shared knowledge base contain no data about you or your projects and are kept

5. Data Sharing

We may share your data with:

Cloud infrastructure providers (Google Cloud Platform, AWS, Azure) — for platform operation
Payment processors — for subscription billing
Analytics providers — anonymised usage data only
Legal authorities — when required by law

All third-party providers are contractually bound to protect your data and may not use it for any other purpose.

6. International Transfers

We may transfer data outside the UK/EEA. When we do, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK ICO or European Commission.

7. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict processing
Data portability
Object to processing
Withdraw consent at any time

To exercise any of these rights, contact us at: info@alfa-can.com

We will respond within 30 days.

8. Cookies

We use cookies to improve your experience. You can control cookie settings through your browser. For full details, see our Cookie Policy available on our website.

9. Security

We implement industry-standard security measures including:

TLS/SSL encryption for all data in transit
AES-256 encryption for data at rest
Regular security audits and penetration testing
Access controls and two-factor authentication

10. Children's Privacy

Our Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Platform. The "Last updated" date at the top of this page will always reflect the most recent version.

12. Contact & Complaints

For privacy-related queries, contact us at: Email: info@alfa-can.com Address: 66 Paul Street, London, EC2A 4NA, United Kingdom

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or the relevant EU supervisory authority in your country.