Privacy Policy
1. Overview
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website or use the Service.
Important note on roles:
-
For website and sales/marketing activities, we typically act as a data controller.
For Customer Content inside the platform, we typically act as a processor/service provider on behalf of the Customer, under the Customer’s instructions (and under a DPA if applicable). This controller/processor distinction is standard in enterprise AI platforms.
2. Personal Information We Collect
We may collect:
-
Identity & Contact Data: name, email, phone, job title, company
-
Account Data: login credentials (hashed), preferences, admin role
-
Technical Data: IP address, browser/device info, cookies, identifiers
-
Usage Data: interactions, feature usage, logs, session metadata
-
Content Data: prompts, files, and data submitted to the Service (as directed by Customer)
-
Communications: support requests, emails, call notes
3. How We Collect Information
-
Directly from you (forms, demo requests, support)
-
Automatically (cookies, analytics, logs)
-
From your employer/Customer (account provisioning)
-
From integrations you enable (connectors, APIs)
4. How We Use Information
We use personal information to:
-
provide, secure, and maintain the Service
-
authenticate users and administer accounts
-
provide support and respond to requests
-
improve product performance and usability
-
send service notices and (where permitted) marketing communications
-
comply with legal obligations and enforce terms
5. Legal Bases (where applicable)
Where required (e.g., GDPR), we rely on:
-
performance of a contract
-
legitimate interests (service improvement, security)
-
consent (marketing cookies/communications, where required)
-
legal obligations
6. Sharing and Disclosure
We may share information with:
-
Service providers (hosting, analytics, support tooling) under contract
-
Model providers / inference partners when you use LLM-powered features (as configured)
-
Business transfers (merger/acquisition)
-
Legal disclosures when required
We do not sell personal information.
7. Data Retention
We retain personal information only as long as needed for the purposes above, including security, legal, and contractual requirements. Retention windows are typically defined by internal policy and applicable law
8. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is 100% secure, but we work to safeguard data and restrict access.
9. International Transfers
If personal information is transferred internationally, we use appropriate safeguards (e.g., standard contractual clauses) where required.
10. Your Privacy Rights
Depending on your location, you may have rights to:
-
access, correct, or delete personal information
-
restrict or object to processing
-
data portability
-
withdraw consent (where applicable)
-
lodge a complaint with a regulator
To exercise rights: [hello@alchemistudio.ai]
11. Cookies and Tracking
We use cookies and similar technologies for core site functionality, analytics, and (where applicable) marketing. You can control cookies through browser settings and any cookie banner/preferences tool we provide.
12. Children’s Privacy
The Service is not intended for children under [13/16]. We do not knowingly collect children’s data.
13. Changes
We may update this Privacy Policy. If changes are material, we will provide additional notice.
