AkraLabs Privacy Policy

AkraLabs ("AkraLabs", "we", "us", or "our") operates the interactive solar system software discovery platform at akralabs.in and associated subdomains (collectively, the "Service").

This Privacy Policy describes our practices regarding the collection, storage, utilization, and disclosure of information obtained when you browse our celestial directory, upvote applications, submit apps for orbital listing, purchase sponsorship tiers (such as The Sun centerpiece or Planetary badges), or otherwise interact with our services.

We classify the data collected into three distinct categories based on your interaction with the Universe:

A. Information You Voluntarily Provide

• App Submissions: When launching an app into orbit via our submission modal, you provide the application title, tagline, product description, live URL, selected category planet (e.g. AI & ML, SaaS, Dev Tools), pricing tier, and optional contact email.
• Sponsorship & Partner Orders: When claiming The Sun sponsorship spot or planetary banners, you provide company name, billing email, target URL, and billing address. Payment card and digital transactions are processed directly by our PCI-DSS compliant payment gateway (Razorpay); AkraLabs never stores your credit card numbers.
• Support & Correspondence: Any inquiries, feedback, or DMCA/takedown notices transmitted to our support team.

B. Automatically Collected Telemetry

• Device & Viewport Attributes: Browser brand and version, operating system, screen dimensions, GPU vendor (for WebGL canvas acceleration), and preferred language.
• Platform Analytics: Interaction counts (e.g. upvoting a tool, clicking an outbound app moon, zooming in on planets, using Ctrl+K spotlight search) to maintain accurate real-time leaderboard statistics.
• Network Log Information: IP address (anonymized/hashed for rate limiting and spam prevention), referring URL, and timestamp of requests.

We utilize the collected data strictly for legitimate operational, security, and product-enhancement purposes:

• Orbit & Directory Rendering: Calculating orbital trajectories, clustering moons around their parent category planets, and rendering the dynamic 3D-styled solar canvas.
• Leaderboard & Trending Metrics: Aggregating genuine user upvotes, detecting robotic vote manipulation, and computing trending software metrics.
• Order Fulfillment & Centerpiece Activation: Instantly activating claimed sponsor centerpieces (such as The Sun) and broadcasting live launch events to the cosmic ticker.
• Platform Security & Abuse Mitigation: Throttling malicious traffic, preventing cross-site scripting (XSS), and enforcing submission quality guidelines.
• Developer Updates: Notifying founders when their application reaches milestone votes, is featured in trending sectors, or requires updated verification.

Under the European Union General Data Protection Regulation (GDPR) and UK Data Protection Act, we process personal data under the following recognized legal grounds:

• Performance of Contract: When you purchase an advertising spot or submit a project, processing is required to deliver the contracted visibility and invoicing.
• Legitimate Interests: Operating a secure, fraud-free software directory, analyzing aggregate usage patterns to optimize performance, and maintaining system integrity.
• Consent: Where you have opted in to non-essential tracking, developer notifications, or marketing newsletters. You may revoke consent at any time.
• Legal Compliance: Retaining financial transaction records for tax compliance, accounting audits, and responding to lawful government subpoenas.

To ensure high uptime, lightning-fast content delivery, and secure payments across the globe, AkraLabs engages trusted third-party service providers. Each subprocessor is vetted under strict Data Processing Agreements (DPAs):

The AkraLabs Universe is an open discovery index. By submitting an application or sponsoring an orbit, the following elements become publicly visible across all visitor sessions:

• Application Name, Logo, Tagline, and External Destination URL.
• Category Planet association and community upvote count.
• Sponsorship attribution badges (e.g. "GOLD PARTNER", "Featured in Dev Tools").

We do not publicly display internal founder contact emails, billing histories, or personal identities unless you explicitly choose to include them in your public product description.

We prioritize clean, low-footprint browsing. We do not use intrusive cross-site tracking pixels (like Facebook Pixels or surveillance ad trackers). Instead, we use modern client-side storage for functional usability:

• Local Storage (localStorage): Remembers your sound toggle preference (Sound On / Sound Off), custom camera zoom levels, and which apps you have already upvoted to prevent duplicate voting.
• Session Storage (sessionStorage): Maintains active filter queries and Spotlight (Ctrl+K) search state during your browsing session.
• Strictly Necessary Cookies: Security cookies utilized by Cloudflare to distinguish between legitimate users and malicious automated scrapers.

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory legal mandates:

• Approved Directory Listings: Maintained indefinitely in the solar directory until requested for removal by the verified app owner.
• Financial & Invoice Records: Retained for a minimum of 7 years to comply with federal and international accounting, tax, and auditing requirements.
• Aggregated Telemetry Logs: Raw IP logs and server request diagnostics are purged or anonymized within 30 days.

To request immediate removal of your application listing or associated metadata, contact our privacy desk at privacy@akralabs.in. Removals are processed within 48 business hours.

We deploy defense-in-depth security standards to protect your data from unauthorized access, alteration, or disclosure:

• End-to-End Encryption in Transit: All HTTP traffic is strictly forced over Transport Layer Security (TLS 1.3) with HSTS preloading enabled.
• Cryptographic Salting: Upvote fraud signatures and temporary tokens are salted and hashed using modern cryptographic algorithms.
• Zero Payment Storage: Credit card and financial details never traverse our application servers; checkout tokens are securely tokenized directly with Razorpay.
• Least Privilege Access: Production environments and administrative dashboards are gated behind multi-factor authentication (MFA) and IP allowlists.

Regardless of your geographic jurisdiction, AkraLabs extends comprehensive data subject rights to all our users:

• Right of Access: You may request a copy of the personal data we hold concerning you.
• Right to Rectification: You may request correction of inaccurate, outdated, or incomplete project details.
• Right to Erasure ("Right to be Forgotten"): You may request permanent deletion of your account and submitted application records.
• Right to Data Portability: Receive your submitted product data in a structured, machine-readable JSON format.
• California Privacy Rights (CCPA / CPRA): We do not sell your personal information. You have the right to non-discrimination for exercising your CCPA rights.

To exercise any of these rights, email us at privacy@akralabs.in with the subject line "Privacy Rights Request". We do not charge fees and fulfill verified requests within 30 days.

AkraLabs is designed for software developers, founders, tech professionals, and digital enthusiasts. Our services are not directed toward children under the age of 13 (or 16 in certain European member states). We do not knowingly collect personal information from minors. If you believe a minor has submitted personal data without guardian consent, please contact us immediately for expeditious deletion.

Our servers, cloud infrastructure, and administrative teams are located primarily in the United States and European Union. When personal data is transferred across international borders, we ensure adequate protections are implemented in compliance with applicable laws, including Standard Contractual Clauses (SCCs) approved by the European Commission.

If you have any questions, suggestions, or concerns regarding this Privacy Policy or our security practices, our legal team is at your disposal:

AkraLabs Inc. · Legal & Data Protection Division · 100 Cosmic Way, Suite 400 · Wilmington, DE 19801, USA.