Last updated: April 26, 2026
Afalcon Luxe (“we”, “our”, or “us”) operates the Afalcon Helper application (the “App”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App.
1. Information We Collect
Account Information
When you create an account, we collect your email address and password (stored in hashed form). You may optionally provide your name and phone number.
Service Request Data
When you submit a service ticket, we collect:
- Contact name and phone number
- Physical address
- GPS coordinates (with your permission, to facilitate on-site service visits)
- Product category and problem description
- Photos and documents you attach (up to 6 files per submission)
Authentication Data
If you use passkey login, we store your WebAuthn credential identifiers, public keys, and device names. We do not store biometric data — biometric verification is handled entirely by your device’s secure enclave.
Usage Data
We collect login attempt records (email, IP address, timestamp) for security and rate-limiting purposes. Admin actions are recorded in an audit log for accountability.
AI Chat Data
Conversations with our AI assistant are processed in real time to generate responses. We do not permanently store your chat history on our servers.
Calculator Data
Cooling load calculations are stored locally on your device only and are not transmitted to our servers.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Process and track your service requests
- Send email notifications about ticket updates, including OTP verification codes and password resets
- Provide AI-powered troubleshooting assistance
- Ensure the security of your account through rate limiting and CAPTCHA verification
- Improve and maintain the App
3. Third-Party Services
We use the following third-party services to operate the App:
| Service | Purpose |
|---|---|
| Supabase | Database hosting and file storage (service request images and documents) |
| Google Gemini | AI chat responses for troubleshooting assistance |
| Cloudflare Turnstile | CAPTCHA verification to prevent automated abuse |
| SMTP Email Provider | Sending transactional emails (verification codes, ticket notifications) |
These providers process data on our behalf under their respective privacy policies and data processing agreements.
4. Data Storage and Security
- Passwords are hashed using bcrypt before storage
- Sessions are managed via encrypted JWT tokens stored in HTTP-only cookies
- File uploads are stored in Supabase Storage with access controls
- All data transmission is encrypted via HTTPS/TLS
- Rate limiting is applied to prevent brute-force attacks on authentication endpoints
5. Data Retention
- Account data is retained for as long as your account is active
- Service tickets are retained indefinitely to provide ongoing support history; deleted tickets are soft-deleted and may be retained for record-keeping purposes
- Authentication attempt logs are retained for security monitoring
- You may request deletion of your account and associated data by contacting us
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data
- Export your service ticket history
- Withdraw consent for optional data collection (e.g., GPS location)
7. Children’s Privacy
The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
Email: [email protected]
Website: https://service.afalcon-luxe.com
