What this site collects, and what it does not

This notice covers AlloyPath’s website only. Data handling inside a client engagement is governed by the agreement for that engagement, and is described in general terms on the security page.

Who is responsible

AlloyPath is a provisional working name for a founder-led business run by Ali Ahmad. There is no registered company entity at present, so the responsible party is Ali Ahmad personally. Contact is via the workflow review form.

What the contact form collects

The form collects your name, work email address, company name, an optional note about your current system or ERP, your description of the workflow, and optionally how you found this site. Those fields are submitted to the server, validated, and delivered by email. There is no database, no account system and no customer portal behind this website, so the application itself does not store a copy.

The email address is used to reply to you about your request. It is not added to any mailing list, no marketing consent is requested or assumed, and the information is not sold, rented or shared for advertising.

What is processed automatically by infrastructure

Serving a website necessarily involves processing technical data. The hosting provider receives your IP address, the requested URL, your user agent and similar request metadata, and may retain them in operational logs under its own retention policy. That processing is outside this application’s control, and it would be inaccurate to claim that no personal data is processed simply because this site keeps no records of its own.

The email provider that delivers form submissions processes the contents of those submissions and the sending and receiving addresses, in order to deliver the message.

Cookies and analytics

This site sets no cookies of its own, and there is no advertising, retargeting, session recording, heatmap, visitor identification, tag manager or Google Analytics on it. Fonts are self-hosted, so no font provider receives your request. No third-party script is loaded on any page.

Analytics is disabled in configuration. If privacy-conscious, cookieless analytics is enabled later, this notice will be updated first to name the provider and describe what is collected, and form field values will be excluded from it in any case.

The interactive demonstration

The RFQ demonstration runs entirely in your browser on synthetic data. There is no upload, no free-text entry, no network request, and nothing you do in it is transmitted, recorded or stored.

Retention

• Form submissions live in the recipient mailbox and are kept while a conversation is active, and for up to 24 months afterwards, so an enquiry can be picked up again.
• Deletion can be requested at any time, and the message will be deleted from the mailbox.
• Hosting and email provider logs are retained according to their policies, which are not controlled here.

Who else processes this data

• The hosting provider, which serves the site and runs the form endpoint.
• The transactional email provider, which delivers the notification and your confirmation.
• The mailbox provider where the message is received and read.

The named providers are listed on the security page and will be kept current there. Some of these providers operate in the United States and elsewhere, so information you submit may be processed outside your own country.

Your requests

You can ask what has been received from you, ask for it to be corrected, or ask for it to be deleted. Send that request through the contact form and it will be actioned; a reply confirming what was done normally follows within a few business days.

Security, honestly stated

Reasonable measures are in place: server-side validation, transport encryption, minimal logging that excludes form contents, and no unnecessary storage. No system is completely secure, and no guarantee of absolute security is offered here. No independent audit or penetration test has been carried out.

Please do not send restricted material

Do not submit export-controlled technical data, controlled unclassified information, CMMC-scoped material, or documents covered by a non-disclosure agreement through this website. It is a public contact route and is not an appropriate channel for that material.

Changes

If this site changes in a way that affects this notice — a provider changes, or analytics is enabled — the notice will be updated before the change goes live.