Alpha.

Privacy Policy.

Last updated: March 10, 2026

Introduction

Alpha Digital Agency ("we", "us", or "our") operates two products. This Privacy Policy explains how each product collects, uses, stores, and protects your data.


Product 1: Alpha Booking Engine

A direct booking management system for hospitality businesses (hotels, villas, resorts).

Personal Data We Collect

When you make a reservation through our booking engine, we collect:

Data Purpose
First and last name To identify the guest and process the reservation
Email address To send booking confirmation and updates
Phone number (optional) To contact you regarding your reservation
Check-in and check-out dates To manage room availability
Number of guests To assign the appropriate room
Booking amount To process the reservation and payment

How We Collect Data

  • Directly from you when you fill out the booking form on the property's website
  • From external calendar syncs (e.g., Airbnb iCal) for availability management only — no personal data is imported

How We Use Your Data

  • To process and confirm your reservation
  • To send booking confirmation and update emails to you
  • To notify the property owner/admin of your booking
  • To manage room availability and prevent double bookings
  • To sync availability with third-party platforms (Airbnb, etc.)

We do not use your data for marketing, profiling, or any purpose unrelated to your reservation unless you give explicit consent.

Third-Party Data Sharing

We may share your booking information with:

  • The property owner/manager — to fulfill your reservation
  • Email service provider — to deliver confirmation emails

We do not sell, rent, or trade your personal data to any third party.

Data Retention

  • Booking records are retained for as long as the property requires for business and legal purposes
  • You may request deletion of your data by contacting us (see Contact Us below)

Cookies and Tracking

  • Our booking engine uses essential cookies for session management
  • We do not use advertising or tracking cookies on the booking engine
  • No third-party analytics or tracking scripts are loaded during the booking process

Children's Data

Our booking engine is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data through our booking engine, please contact us and we will delete it.

Security Measures

  • All booking data is transmitted over HTTPS encryption
  • Booking data is stored in a secured database
  • Access to booking records is restricted to authorized property administrators

Product 2: Alpha AI Assistant

An AI-powered workspace assistant that helps clients manage their Google Workspace data through natural language.

How It Works

When a client authorizes the application through Google OAuth, the assistant connects to their Google account and can access and manage their data on their behalf through natural language requests.

Google API Scopes

Upon authorization, the application may request access to:

  • Google Drive — list, read, create, and organize files
  • Google Sheets — read, write, and manage spreadsheets
  • Google Docs — read, create, and manage documents
  • Google Calendar — view and manage calendar events
  • Google Analytics — view website analytics data (read-only)
  • Google Ads — view advertising campaign data (read-only)
  • Google Search Console — view search performance data (read-only)

How We Use Your Google Data

We access your Google data only to fulfill requests you make through the AI assistant.

We do NOT:

  • Store your Google data permanently on our servers
  • Share your Google data with third parties
  • Sell any personal information
  • Use your data for advertising or profiling
  • Access your data without your explicit request

Data Storage

  • Your Google OAuth refresh token is stored securely to maintain your authorized session
  • Conversation history is held in server memory only and cleared on server restart
  • No database stores your Google account data

Third-Party Services

  • Google Gemini API — processes your natural language requests
  • Google Workspace APIs — reads and manages your Google data as you request

Revoking Access

You can revoke the application's access at any time:

  1. Go to Google Account Permissions
  2. Find "Alpha" in the list of third-party apps
  3. Click "Remove Access"

General Provisions

Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your personal data
  • Withdraw consent — revoke OAuth access or opt out at any time
  • Complaint — contact us if you have concerns about how your data is handled

International Data Transfers

Your data may be processed on servers located outside your country of residence (e.g., Google Cloud infrastructure). We ensure that any data transfers comply with applicable data protection standards.

Security

  • All communications use HTTPS encryption
  • OAuth tokens and credentials are stored securely and never exposed
  • We follow Google's API usage policies and terms of service

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Location

Bali, Indonesia