Privacy Policy

Altyst is a multi-tenant real-estate customer relationship management, sales operations, website, and analytics platform operated by Sollible Business Solutions Private Limited ("Sollible", "Altyst", "we", or "us"). This policy applies when you visit Altyst, use an Altyst account, submit an enquiry through an Altyst-powered form, or use a connected service such as Meta Lead Ads.

A real-estate developer, builder, agency, or other organization using Altyst is a Business Customer. Its own privacy notice may also apply to information it collects.

For leads, contacts, customer records, enquiries, and related sales information, the Business Customer generally decides why and how the data is used. It acts as the data fiduciary or controller, and Sollible processes the data on its behalf as a processor or service provider.

Sollible acts as the data fiduciary or controller for Altyst account administration, authentication, security, service operation, support, billing, product analytics, and legal compliance.

• Account data: name, business contact details, organization, role, access scope, authentication data, preferences, and configuration history.
• Lead and customer data: contact details, location, property interests, budget, enquiry answers, consent and attribution, lead stage, assignments, notes, tasks, appointments, and communication history supplied by or for a Business Customer.
• Technical data: IP address, approximate location, browser, device, language, session and consent identifiers, usage events, and diagnostic, performance, security, and error logs.
• Business data: support communications, subscription details, invoices, and transaction references where applicable.

When an authorized Business Customer connects a Facebook Page or Meta Lead Ads form, Altyst may receive the information a person submitted in that form, including name, phone number, email address, and form responses. Altyst may also receive Meta lead, Page, form, advertisement, ad-set, campaign, business-user, or system-user identifiers; the access tokens and permission status needed for the connection; and webhook event, timestamp, delivery, and technical log data.

Altyst retrieves data only from Pages, forms, and business assets an authorized Business Customer has connected. We use it to receive, deduplicate, attribute, and route the enquiry to the correct authorized customer, brand, and project workspace so the Business Customer can respond. We do not retrieve unrelated Facebook profile information, retrieve leads from unconnected Pages, sell Meta lead data, or use it to contact a person for an unrelated purpose.

• provide, secure, operate, and support Altyst;
• authenticate users and enforce tenant, brand, project, and role access;
• receive, route, deduplicate, attribute, and manage authorized enquiries;
• support CRM, inventory, website, analytics, and sales workflows;
• communicate about accounts, support, security, and service changes;
• prevent fraud, misuse, unauthorized access, and security incidents;
• create aggregated or de-identified service analytics; and
• comply with law, valid legal process, and contractual obligations.

Depending on the context and applicable law, processing is based on consent, a request or contract, compliance with law, legitimate interests in operating and securing Altyst, or a Business Customer’s documented instructions. We do not sell or rent personal data.

Data is available to authorized users of the Business Customer and project to which it belongs. We may also disclose limited data to vetted service providers that host, store, secure, transmit, monitor, or support Altyst. Current infrastructure providers include Vercel Inc. for application hosting and Databricks, Inc. and its Neon service for managed PostgreSQL services.

When a customer enables an integration, we exchange only the data needed to operate it with that provider. We may also disclose data to comply with valid legal process, protect people or the service, enforce agreements, or complete a business transaction subject to appropriate safeguards. Service providers may not use Business Customer data for unrelated advertising.

We retain data only for as long as reasonably necessary to provide and secure Altyst, follow a Business Customer’s instructions, and meet legal, accounting, security, and dispute-resolution obligations. Meta credentials are retained only while required for an authorized connection. Protected backups expire through their ordinary lifecycle; applicable deletion instructions are reapplied if a backup is restored.

We use reasonable administrative, technical, and organizational safeguards, including access controls, tenant and project boundaries, secure transport, credential controls, monitoring, logging, and backups. No internet service is completely secure. Sollible is based in India, and service providers may process data in other countries under applicable contractual and legal safeguards.

Depending on applicable law, you may request access, correction, completion, withdrawal of consent, restriction, objection, deletion, or grievance handling. Email hello@sollible.com with the subject "Altyst Privacy Request". We may verify your identity and, when a Business Customer controls the record, refer the request to that customer and assist it with responding.

For step-by-step instructions, see the Altyst Data Deletion Instructions. Do not send passwords, access tokens, or unnecessary identity documents by email.

Altyst uses essential cookies and similar technologies for security, authentication, session continuity, preferences, and consent records. Optional analytics technologies are used only where permitted by the applicable consent choice. Optional AI-assisted features may send limited, authorized data to an approved provider to produce a requested result; users must review AI output before relying on it.

Altyst is a business service and is not directed to children. Business Customers must not knowingly use Altyst to collect children’s data in violation of applicable law.

We may update this policy when Altyst, our practices, or applicable law changes. The updated page will show its effective date, with additional notice where required.