Privacy Policy

1. Who we are

Alvistac develops a B2B platform for enterprise mobility management (EMM) operations, corporate IT asset inventory, device assignment, lifecycle tracking, access administration and authorized device enrollment workflows. Some business modules may support separate retail or financing records where applicable.

“Alvistac,” “we,” “us” and “our” refer to the operator of the relevant Alvistac website or service. Our contact details appear in section 17.

2. Information we collect

Depending on the services used and their configuration, data may include:

• contact details such as name, organization, work email, business phone and correspondence;
• organization, branch, tenant, account, user role, authorization and subscription details;
• corporate asset records, purchase or inventory references, device ownership/assignment and handover history;
• device identifiers such as serial number, IMEI where appropriate, manufacturer, model and operating-system or security-patch information;
• enrollment status, management status, policy/compliance signals, device events and administrative actions where exposed by an authorized integration;
• technical and security data such as IP address, browser, timestamps, login events, diagnostics and audit logs;
• support inquiries, contractual, billing and service communications; and
• separate retail customer, commercial or financing records where a relevant service is actually used.

We do not request passwords, one-time codes or payment-card credentials through public contact forms. The exact categories processed depend on enabled services; no universal device-data access is implied.

3. How we collect information

We may collect information directly from you through forms, registration and support; from the authorized business customer or its administrators; through service and security logs; and through permitted APIs, enrollment providers, OEM programs and infrastructure vendors when configured and authorized.

Device-related information is collected only to the extent supported by the applicable management mode, customer instructions and provider terms.

4. How we use information

We use relevant information to:

• provide, administer, secure and support business accounts and subscriptions;
• maintain organizational asset inventories, device ownership and assignment records;
• support authorized enterprise enrollment, provisioning, policy administration and lifecycle operations;
• display supported device status, security/compliance information and operational audit records;
• enable permissioned staff workflows and assist with incident handling or support requests;
• prevent abuse, investigate security incidents and maintain service availability;
• meet applicable legal, contractual and record-keeping obligations; and
• process separate commercial or financing records only where applicable to the relevant service.

Google Android Management API services are not used to restrict or control consumer device functionality based on installment or payment status. Any Samsung Knox Guard financing-protection activity is a separate OEM-specific program, subject to Samsung eligibility, licensing, applicable terms, transparency and law.

5. Information processed for business customers

Business customers may provide information about their organization, employees, authorized users, assets, branches and business operations. The customer is generally responsible for its management authority, lawful basis, relevant notices, appropriate consents and user-facing disclosures.

Where we act as a service provider or processor, we process data to deliver the contracted services and under applicable customer instructions, including necessary security, reliability and support activities. Additional data-processing agreements may apply.

Customers must not enroll or manage a device without appropriate authorization, or use provider technology for purposes that violate its rules.

6. Device and enterprise mobility information

For supported, authorized enrollments, Alvistac may receive device identifiers, hardware and OS attributes, enrollment and compliance status, management-policy state, and recorded device or administrator events. Availability depends on the manufacturer, management mode, device ownership, Android version, vendor permissions and enabled services.

Corporate fully managed, dedicated and work-profile scenarios have different data boundaries. We do not claim unrestricted access to private messages, personal photos, account credentials or other content. Any specific access must be supported, permitted and disclosed for the actual management configuration.

Android Enterprise/Android Management API is intended for permitted enterprise management uses, not consumer payment-default device locking. Samsung Knox Manage, Knox Mobile Enrollment and Knox Guard are distinct Samsung offerings with different eligibility, features and licensing requirements; referring to them does not establish that Alvistac has been approved to use them.

7. Contact and support forms

Contact or support forms may collect your name, business name, work email, phone, organization type, device requirements, asset or enrollment references and your message. We use that information to respond, assess requests and maintain support history where appropriate.

Do not submit passwords, verification codes, payment-card data or sensitive personal content through a public form. Messages may be delivered using our configured email and service infrastructure.

8. Cookies and website technologies

Our WordPress website may use necessary cookies and similar technologies for functionality, authentication, security and preferences. Any optional analytics or advertising tools, if enabled, will be handled with appropriate disclosures and choices where required by law.

9. When we share information

We may disclose information only as needed for legitimate service delivery, administration or legal compliance, including to:

• hosting, infrastructure, email, support, security and operational service providers;
• authorized business customers and administrators within their permitted access scope;
• Google, Samsung or other device-management/OEM providers when a supported, authorized integration is enabled;
• billing or payment service providers for applicable commercial subscriptions;
• professional advisers, regulators or law-enforcement authorities where lawful; and
• a lawful successor in a business transfer, subject to applicable protections.

We do not sell personal information to advertisers. Sharing with an enrollment provider depends on customer configuration, service terms and applicable law.

10. Third-party services and provider programs

Hosting, communication and device-management services may involve independent third parties. Google Android Enterprise, Android Management API and Samsung Knox services are governed by their providers’ applicable terms, eligibility requirements and privacy notices.

Samsung Knox Guard is a distinct OEM protection service that may support certain financing arrangements through an eligible, licensed program; this does not change Google’s prohibition on Android Management API payment-based consumer restrictions.

Product names are used descriptively. They do not imply partnership, approval, certification or integration availability unless specifically confirmed and accurately stated.

11. Data retention

We retain information only as long as reasonably needed for service delivery, customer instructions, security, support, legal obligations, audit requirements and dispute resolution. Periods depend on data category, contractual settings and applicable law.

Upon authorized deletion requests, account closure or device retirement, information is deleted, anonymized or retained only as legally or contractually required, subject to technical backup cycles and applicable provider systems.

12. Security

We aim to implement appropriate administrative, technical and organizational safeguards such as authentication, permissions, tenant separation, secure communications, event logging and operational access controls.

No online system can guarantee absolute security. Organizational customers must safeguard credentials, manage staff access, verify their device-management authority and promptly report suspected misuse.

13. International processing

Alvistac and selected service providers may process or host information outside the country of the business customer or user. Where applicable, we address cross-border processing through suitable contractual, legal and technical safeguards.

14. Your privacy rights

Depending on applicable law, individuals may have rights to request access, correction, deletion, a copy of data or restrictions on processing. We review and respond to requests according to applicable law and verification requirements.

If your information was supplied by your employer, retailer or another organizational customer, that organization may control the relevant record. You may need to contact its privacy or IT administrator first; we will assist as appropriate under our obligations.

15. Children’s privacy

Alvistac’s B2B services are intended for organizations and authorized business users, not children creating independent business accounts.

If an organizational customer lawfully processes information about a minor, it is responsible for the applicable legal basis, parental or guardian requirements and required notices.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, processing practices, providers or legal obligations. The revised version will be posted here with a new effective date, and additional notice will be provided where required.

17. Contact us

For questions, privacy requests or concerns, use our Contact page or email admin@alvistac.com.