Privacy Policy

AlphaDesk never sees what is on your screen, what you type, which keys you press, the contents of files you transfer, or the contents of your clipboard. We do not store the content of a remote session beyond what is needed to pass it between the two computers.

What we do record is information about connections — which device connected to which, when, how well it performed, and what went wrong when it failed. We need this to run the service, to help you when you report a problem, and to investigate abuse.

There is one exception to the first paragraph, and we would rather name it than hide it: see Crash reports below.

Alpha ERP Solutions Private Limited, 819, Times Square Arcade, opp. Rambaug, Thaltej-Shilaj Road, Ahmedabad, Gujarat 380059, India, is the Data Fiduciary (the term the DPDP Act uses for what other laws call a data controller). Contact us about anything in this policy at privacy@alphadesk.me.

We process your data on the basis of your consent, which you give by installing and using AlphaDesk after being shown this notice, and for the legitimate uses the DPDP Act permits — principally responding to a problem you have reported to us, and complying with law.

You can withdraw consent at any time. Uninstalling AlphaDesk stops all further collection, and you can ask us to erase what we already hold — see Your rights.

Website analytics in the European Economic Area, the United Kingdom and Switzerland runs only on the consent you give on the cookie banner; elsewhere it runs on the notice in this policy. Either way you can withdraw under Cookie settings at the bottom of any page.

About your device

Recorded so your device can be reached by its AlphaDesk ID, and so support can reproduce problems on comparable hardware:

• Your AlphaDesk ID — the number other people use to connect to you.
• The computer's name (hostname) and the Windows user name it is running under.
• The network address the application connects to us from, including your public IP address. This is recorded each time the application registers, not only during a session.
• Windows version, processor, graphics adapter and amount of memory.
• The version of AlphaDesk you are running, when you were last online, and whether unattended access is enabled.

About your sessions

• Which AlphaDesk ID connected to which, when the session started and ended, and how it was authorised (a one-time password or unattended access).
• Whether the connection was direct or went through one of our relay servers, and how much data passed through it.
• Connection quality measurements — round-trip time, packet loss and signal strength.
• Which features were used during the session, and how often.
• Why a session ended, the error code if it failed, and whether a host restart during the session completed.

About file transfers and the clipboard

• For a file transfer: the file name, its size, how much was transferred, how long it took, and whether it succeeded.
• For a clipboard copy between machines: whether it was text, an image or files, the direction, the size in bytes, and how many files — but never the contents.

We record file names but never file contents. If a file name would itself be sensitive, be aware that it is logged.

Failed password attempts

When someone enters the wrong password trying to connect to a device, we record the IP address they attempted from, the device they targeted, and how many times they tried. Repeated failures result in a temporary block. We keep this to protect our users from people trying to guess their way into a computer.

When something goes wrong

• Error reports: which part of the application failed, the error message and code, and the build version.
• Diagnostic logs from a failed session. These are technical traces of the connection process and may contain device names, network addresses and error details.
• Any feedback or rating you choose to send us, together with whatever you write in it, and the session log if you tick the box to attach it.

Crash reports

When AlphaDesk crashes it sends us a crash report containing the fault location, the stack trace and the build version. It also sends a memory dump— a snapshot of the application's memory at the moment it failed.

We use these only to find and fix the cause of a crash, and nothing reads them except our engineers. But we want to be straight with you about what one can contain: because it is a snapshot of memory, a dump may include fragments of whatever the application was handling at that instant — parts of the screen image, a file path, clipboard data, or in principle a password. It is the one place where the promise at the top of this page does not hold absolutely.

For that reason memory dumps are kept for a short period only, far shorter than anything else described here, and are deleted automatically afterwards.

Download clicks on this website

When you click a download button on alphadesk.me we record the click: Windows or Mac, which button, the website that sent you here (its address only, never your search terms), any campaign tag in the link you followed, your IP address and your browser type. We use this only to count downloads and to learn which channels bring new users; your IP address lets us tell whether a download went on to become an install. Until you close the tab, your browser remembers which page you arrived on so the click can include it; that is never sent anywhere else.

Website analytics (Google Analytics)

This website uses Google Analytics, which sets cookies (_ga) and sends Google the pages you view, how you reached them, your browser and device type, your approximate location (country and city) and the files you download. Google uses your IP address to work out the location and does not store it. We use this only to count visits and learn which pages are useful. Google's advertising features are switched off.

If you visit from the European Economic Area, the United Kingdom or Switzerland, we ask first: nothing is sent to Google unless you click Accept on the cookie banner. From anywhere else, Google Analytics starts when the page loads, and you can turn it off at any time with Decline under Cookie settings. Your country is looked up from your IP address by our content delivery provider and is not stored. After you decline, nothing more is sent to Google and its cookies are removed. Your browser remembers your choice; use Cookie settings at the bottom of any page, or below, to change it.

Cookie settings

• The contents of your screen. Screen data travels encrypted between the two computers; where it passes through our relay servers we cannot read it, and we never store it.
• Keystrokes or mouse input. These are passed to the remote computer and never recorded.
• The contents of transferred files.
• The contents of your clipboard.
• Your session password. It never leaves your computer in a readable form.
• We do not use advertising trackers, and we do not sell or rent your data to anyone.

This website uses no advertising pixel. The only cookies it sets are Google Analytics', described above.

• To operate the service — your ID has to be reachable for anyone to connect to you.
• To support you — when you report a fault, the session record and diagnostic log are usually the only way to find the cause.
• To keep the service secure, including blocking repeated password guessing.
• To investigate and stop abuse of AlphaDesk, including its use in fraud against members of the public.
• To meet legal obligations where the law requires us to keep or produce records.

• Connection and usage data — session records, transfer and clipboard metadata, connection quality and feature usage: kept for as long as your consent stands, or 2 years, whichever ends first.
• Diagnostic logs, error and crash reports — kept while they are useful for fixing the fault, and at least 1 year from the date they were processed.
• Memory dumps — deleted automatically after 7 days. These are the most sensitive thing we hold, so they go soonest.
• Failed password attempts and blocks — kept while needed to protect the targeted device from repeated guessing.
• Download clicks — the IP address and browser type are deleted after 90 days; the rest is kept as a count of downloads.
• Website analytics — Google deletes visit-level data after at most 14 months; only totals are kept after that. The cookies expire after at most 2 years, or when you decline.
• Device records — kept while the device keeps connecting, so your AlphaDesk ID stays yours.

Whatever the period above, we erase data at the earlier of:

• the point at which you withdraw your consent, unless a law requires us to keep it; or
• the point at which it is reasonable to conclude the purpose it was collected for is no longer being served.

Where a law requires a longer period — accounting and tax records, for example — we keep that data for as long as the law requires and no longer. We may also hold a record beyond these points while it is part of an open abuse investigation.

One decision affecting you is made automatically, without a person reviewing it: if repeated wrong passwords are entered trying to reach a device, the source is temporarily blocked from connecting. This protects people from having their computer guessed into.

If you believe you have been blocked in error, write to support@alphadesk.me and a person will review it and lift the block if it was wrong.

We do not sell your data and we do not share it for marketing. Outside Alpha ERP Solutions Private Limited it is seen only by:

• the service providers listed on our subprocessors page, who process it on our behalf and may not use it for anything else; and
• law enforcement or a court, where we are legally compelled, or where we need to act on serious abuse of the service.

See the full subprocessor list.

Your data is stored on servers located in India, under our control. The database, the signaling server and this website all run on that same infrastructure.

Relay servers carry encrypted session traffic in transit only; they do not store session content. Our content delivery provider handles requests to this website from its global network, which means a request for a page or a download may be served from outside India even though the data behind it is not.

Website analytics data is stored by Google on its own servers, which may be outside India.

• Session traffic is encrypted between the two computers.
• Passwords are never stored in a readable form.
• Access to the administration system is restricted to named staff accounts and is not publicly reachable.
• If a breach affects your personal data, we will notify you and the Data Protection Board of India as the DPDP Act requires.

Under the DPDP Act you have the right to:

• ask what personal data we hold about you and how we have processed it;
• have it corrected, completed or updated if it is wrong;
• have it erased;
• withdraw your consent at any time, as easily as you gave it;
• nominate someone to exercise these rights on your behalf if you are unable to; and
• complain to us, and then to the Data Protection Board of India if you are not satisfied.

Write to privacy@alphadesk.me with your AlphaDesk ID, which is the identifier we use to find your records. Uninstalling AlphaDesk stops all further collection immediately.

If you have a complaint about how we handle your data, you can write directly to our Grievance Officer:

Nitesh Lunagaria
Alpha ERP Solutions Private Limited
819, Times Square Arcade, opp. Rambaug, Thaltej-Shilaj Road, Ahmedabad, Gujarat 380059, India
admin@alphaerp.ai
+91 79 4014 4144

We acknowledge complaints within 48 hours and resolve them within 90 days. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

AlphaDesk is not intended for children under 18, and we do not knowingly collect their data or process it for tracking or advertising.

If we change what we collect or why, we will update this page and move the effective date at the top. Where a change requires your consent, we will ask for it before the change takes effect.

• Terms of Service and licence
• Acceptable Use Policy
• Subprocessors
• Data Processing Agreement
• Company details