This Privacy Policy explains how Alterra processes information when you visit byalterra.com, request a demo, or use the Alterra BI platform. It is written with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its Implementing Regulations in mind.
1. Who we are
Alterra and Alterra BI are operated by Maharat Al Holol Co. (“Alterra”, “we”, “us”), Unified No. 7016605029, with its address at 3875 Al Abbas Ibn Al Ahnaf, Al Amir Fawaz Ash Shamaly District, Unit 746, [City, postal code and additional number to confirm], Kingdom of Saudi Arabia.
For any privacy question or request, contact us at bi@byalterra.com or +966 56 465 8658.
2. What this policy covers
This policy covers:
- our website, byalterra.com, in English and Arabic;
- demo requests and other enquiries you send us;
- the Alterra BI platform, including compliance scoring, alerts, reports, event snapshots and the “Ask your data” conversational feature; and
- our relationship with customers, their authorized users, suppliers and partners.
3. Our role and our customers’ role
Alterra BI analyzes live feeds from cameras that our customers own and operate at their own premises. For that camera data, the customer decides why and how its cameras are used and is the controller. Alterra processes that data on the customer’s behalf and according to its instructions and our agreement with it.
For information we collect directly, such as website enquiries, demo requests and customer account and billing details, Alterra is the controller.
If you are a member of staff or a visitor at a location that uses Alterra BI, please contact that business first about its use of cameras. We will help our customers respond to your request.
4. How camera feeds are handled
- Video is never recorded or stored. Live feeds are analyzed as they happen, and the video itself is not kept by Alterra.
- Event data. The analysis produces structured data such as the type of event, the standard it relates to, time, location, camera and resulting scores. This is kept in the customer’s account to provide dashboards, trends and reports.
- Snapshots of flagged events. When an event is flagged, one still image of that moment is kept so managers can see what happened. Snapshots are deleted automatically after 90 days.
- Purpose. Alterra BI is designed to assess compliance with operational standards set by the customer, such as hygiene, safety, cleanliness and service. [Confirm whether the platform identifies individuals, for example through facial recognition. If it does not, state: “Alterra BI does not identify individuals by face.”]
5. Information we process
| Category | Examples | Source |
|---|---|---|
| Enquiry and demo request data | Name, business email, company, role, industry, number of locations, message | You, through our website or by email or phone |
| Customer account data | Names, work email addresses, phone numbers and roles of authorized users; account settings; configured standards | The customer and its users |
| Billing data | Company details, billing contact, subscription plan, invoices and payment status | The customer |
| Camera-derived data | Event data and snapshots of flagged events, as described in section 4 | Customer cameras, processed by Alterra BI |
| Conversational queries | Questions typed into “Ask your data” and the answers generated | Authorized users |
| Technical and usage data | Log data, device and browser type, IP address, pages and features used, error reports | Your browser or device |
6. Why we use it, and our legal bases
- To respond to enquiries and arrange demos and trials, on the basis of your request and our legitimate interest in answering it.
- To provide the platform under our agreement with the customer: analysis, scoring, alerts, notifications, reports, snapshots and conversational answers.
- To bill, administer accounts and provide support, under our agreement with the customer.
- To keep the service secure and reliable and to prevent misuse, on the basis of our legitimate interests and legal obligations.
- To improve the service. [Confirm whether customer data or snapshots are used to train or improve AI models, and on what basis. If not, state: “We do not use customer camera data or snapshots to train AI models.”]
- To meet legal obligations, such as tax, accounting and lawful requests from competent authorities.
Where the PDPL requires consent, we will ask for it, and you may withdraw it at any time.
7. Customers’ responsibilities for cameras
Customers are responsible for operating their cameras lawfully, including placing clear notices and signage where cameras are in use, informing staff about how monitoring is used, not placing cameras in areas where it is prohibited (for example washrooms or changing areas), and having a lawful basis for using Alterra BI at their premises.
9. Where data is stored
All customer data processed by Alterra BI, including event data and snapshots, is hosted in the Kingdom of Saudi Arabia. We do not transfer personal data outside the Kingdom except as permitted by the PDPL and its regulations on transfers outside the Kingdom. [Confirm the hosting provider and location for the website and email services.]
10. How long we keep it
- Video: not stored.
- Snapshots of flagged events: 90 days, then deleted automatically.
- Event data and reports: for the duration of the customer’s subscription, then deleted or returned as set out in the agreement [period after termination to confirm].
- Demo requests and enquiries: [24 months] after our last contact, unless you become a customer.
- Billing records: for the period required by Saudi tax and accounting laws.
11. How we protect it
We use technical and organizational measures appropriate to the risk, including encryption in transit, access controls based on role, logging of access, and staff confidentiality obligations. If a personal data breach occurs that the PDPL requires us to report, we will notify the Saudi Data and Artificial Intelligence Authority (SDAIA) and affected customers or individuals as required.
12. Your rights
Under the PDPL you have the right to:
- be informed about how your personal data is processed;
- access your personal data and obtain a copy;
- ask us to correct incomplete or inaccurate data;
- ask us to destroy data we no longer need; and
- withdraw consent where processing is based on consent.
To make a request, email bi@byalterra.com. We may need to verify your identity, and we will respond within the period set by law. Where we process data for a customer, we will pass your request to that customer and help it respond. You may also file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).
14. Children
Our website and platform are intended for businesses and are not directed at children.
15. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new date, and tell customers directly about significant changes.
16. Contact
Maharat Al Holol Co. · bi@byalterra.com · +966 56 465 8658