Privacy Policy

Last updated: October 7, 2026

Alystron (“Alystron”, “we”, “us”) is a decision system for solo founders, operated by Sashanka Sekhar Muduli. This policy explains what information we collect through this website and the Alystron app, why we collect it, who we share it with, and the choices you have. If anything here is unclear, write to support@alystron.com.

Early access. Alystron is in early access, and some features described below are not live yet: connecting Google Analytics, entering metrics by hand, and AI-written recommendations. Until they are, we handle only the waitlist information, and the sign-in and business details of people we have invited. Each section below applies to a feature from the day it goes live.

1. Information we collect

When you join the waitlist

Your email address.
Whether you chose to receive occasional product updates (this box is unticked by default).
A record of your consent: the date and time you signed up and confirmed, the version of the wording you were shown, your IP address, and your browser's user agent string. We keep this so we can show when and how you agreed.

When you visit the website

Page views, counted with Vercel Web Analytics: which pages are visited, the website that sent you, and broad details such as your country, device type and browser. It does not use cookies and it does not follow you to other websites. We remove everything after the “?” in a page's address before it is counted, so sign-in and confirmation links are never recorded.

When you use the app

Account details: your email address and sign-in records.
Business information you give us: your business name and description, stage, goals, the channels you use, what you've already tried and how it went, and any notes or explanations you write.
Metrics you enter manually, such as customer counts and revenue.
Data from services you choose to connect. For Google Analytics 4, we request read-only access and import aggregated daily reports for the property you select — for example, sessions by traffic source and the count of the event you tell us means “signup”. We do not request reports about individual visitors.
Billing information: payments are handled by Dodo Payments (see section 5). We receive your subscription status, plan and the email used at checkout. We never see or store your full card details.
Technical information: IP address, browser type and timestamps in server logs, and error reports, used to keep the service secure and working.

Cookies

We use only the cookies needed to keep you signed in and to protect sign-in. We do not use advertising cookies, and nothing on this website follows you to other websites. The page counting described above uses no cookies.

2. How we use your information

To run the waitlist: send your confirmation email and, if you're selected, your founding-member invite.
To send product updates — only if you opted in. Every update has an unsubscribe link.
To provide the app: analyse your data, produce one recommended next decision, help you act on it, measure what happened, and remember what you learned.
To manage your subscription and access.
To keep the service secure, prevent abuse, and fix problems.
To meet legal obligations, such as tax and accounting records.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of our contract with you (providing the app and waitlist), your consent (product updates and connecting data sources, which you can withdraw at any time), our legitimate interests (security and improving the service), and legal obligations.

3. AI processing (Anthropic)

Alystron uses Anthropic's API (Claude) to write the wording of recommendations and the drafts that help you carry them out. To do this, we send Anthropic a structured summary that can include your business description and goal, metrics we have computed from your connected or manually entered data (for example, signup rates by channel), relevant entries from your decision history, and notes you have written.

The recommendation itself, its ranking and its confidence level are calculated by our own code before this step; the AI only writes the text. We never send Anthropic your passwords or the access tokens for your connected services. Anthropic processes this data as our service provider. Under its commercial terms, it does not use data sent through its API to train its models, and it keeps that data only for a limited period.

4. Google user data

Alystron's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request read-only access to Google Analytics (analytics.readonly). We cannot change your Google Analytics settings or data.
We use Google Analytics data only to provide and improve the features you see in the app: your business picture, your recommended next decision, and measuring what happened after you acted.
We transfer it only to the service providers needed to provide those features — Supabase (where it is stored) and Anthropic (to write recommendation text, as described in section 3) — or when required by law.
We never sell it, never use it for advertising, never share it with data brokers or information resellers, and never use it to decide creditworthiness or for lending.
We do not use it, and do not allow our providers to use it, to develop, improve or train generalized AI or machine-learning models.
No person reads your Google data unless you ask us to (for example, in a support request), it is needed for security purposes, or the law requires it.
You can disconnect Google Analytics at any time in the app, and you can also remove Alystron's access from your Google Account permissions. When you disconnect, we revoke our access. You can ask us to delete metrics we have already imported.

5. Who we share information with

We do not sell your personal information. We share it only with these providers, and only as needed to run Alystron:

Supabase — database, sign-in and secure storage.
Vercel — website and app hosting, and the page counts described in section 1.
Resend — delivering emails (waitlist confirmation, invites, sign-in links, product updates if you opted in).
Anthropic — writing recommendation text and drafts (section 3).
Dodo Payments — our merchant of record. When you subscribe, you buy from Dodo Payments, which processes your payment and handles sales tax and VAT. Dodo Payments handles your payment details under its own privacy policy.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of the business (in which case this policy will continue to apply to your information).

6. International transfers

Our providers may store or process information outside your country, including in the United States. Where required, we rely on the contractual safeguards those providers offer, such as standard contractual clauses.

7. How long we keep information

Waitlist emails: until the waitlist closes or you ask us to remove you. If you never confirm your address, we delete it 30 days after the confirmation link expires.
Consent records: for as long as we rely on that consent, and for a reasonable period afterwards so we can show it was given.
Account and business data: while your account is active. If you delete your account, your business data is removed from the live service immediately; any backup copies expire on their normal schedule, and we keep only records we must keep by law (such as billing records).
Records of how each recommendation was generated: 90 days.
Access to connected services: until you disconnect them.

8. Security

Information is encrypted in transit. Each account can access only its own business data. Access tokens for connected services are stored encrypted, used only by our servers, and never sent to your browser. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a breach where the law requires.

9. Your rights

Depending on where you live, you can ask us to:

tell you what information we hold about you and give you a copy;
correct or complete it;
delete it;
export your data in a portable format;
stop sending product updates or withdraw any other consent (this doesn't affect processing that happened before);
object to or restrict certain processing.

Once you have an account, you can download a copy of your data and permanently delete your account yourself, at any time, under Settings. Deleting your account removes your business data and your waitlist record straight away. For anything else, or if you don't have an account, email support@alystron.com.

Under India's Digital Personal Data Protection Act, 2023, you also have the right to grievance redressal and to nominate another person to exercise your rights if you die or become incapable. To use any of these rights, email support@alystron.com. We respond within 30 days. If you are in the EEA or UK, you can also complain to your local data protection authority.

10. Grievance Officer

In line with India's Digital Personal Data Protection Act, 2023, you can raise any concern about how we handle your personal data with our Grievance Officer:

Name: Sashanka Sekhar Muduli
Email: support@alystron.com

We acknowledge grievances within 48 hours and aim to resolve them within 30 days, and in any case within the time required by law. If you are not satisfied with our response, you may approach the Data Protection Board of India.

11. Children

Alystron is for founders running a business and is not intended for anyone under 18. We do not knowingly collect information from children.

12. Changes to this policy

If we make material changes, we will update the date above and, if you have an account or are on the waitlist, email you before the changes take effect.