Privacy Policy.

The company may collect:

• Identity & Contact Data: name, email, phone, job title, company
• Account Data: login credentials (hashed), preferences, admin role
• Technical Data: IP address, browser/device info, cookies, identifiers
• Usage Data: interactions, feature usage, logs, session metadata
• Content Data: prompts, files, and data submitted to the Service (as directed by Customer)
• Communications: support requests, emails, call notes

• Directly from you (forms, demo requests, support)
• Automatically (cookies, analytics, logs)
• From your employer/Customer (account provisioning)
• From integrations you enable (connectors, APIs)

The company uses personal information to:

• provide, secure, and maintain the Service
• authenticate users and administer accounts
• provide support and respond to requests
• improve product performance and usability
• send service notices and (where permitted) marketing communications
• comply with legal obligations and enforce terms

Where required (e.g., GDPR), the company relies on:

• performance of a contract
• legitimate interests (service improvement, security)
• consent (analytics and marketing cookies, and marketing communications, where required)
• legal obligations

The company may share information with:

• Service providers (hosting, analytics, support tooling) under contract
• Google (Google Analytics) and LinkedIn (LinkedIn Insight Tag), only if you allow analytics or marketing cookies (see Cookies and Tracking)
• Model providers / inference partners when you use LLM-powered features (as configured)
• Business transfers (merger/acquisition)
• Legal disclosures when required

The company does not sell personal information.

The company retains personal information only as long as needed for the purposes listed above, including security, legal, and contractual requirements. Retention windows are typically defined by internal policy and applicable law.

The company uses reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is 100% secure, but the company works to safeguard data and restrict access.

If personal information is transferred internationally, the company uses appropriate safeguards (e.g., standard contractual clauses) where required.

If you allow analytics or marketing cookies, Google and LinkedIn may process website data outside your country, including in the United States.

Depending on your location, you may have rights to:

• access, correct, or delete personal information
• restrict or object to processing
• data portability
• withdraw consent (where applicable)
• lodge a complaint with a regulator

To exercise rights: hello@alchemistudio.ai

The website uses cookies and similar technologies only with your permission, except those needed for the site to work. On your first visit, a banner lets you choose: Necessary only, Accept all, or Customise. You can change your choice at any time from "Cookie settings" in the website footer.

• Necessary (always on): a first-party cookie (alchemi_consent) that remembers your cookie choice for 180 days, and Cloudflare Turnstile, a security check that protects the contact form from spam.
• Analytics (only with your consent): Google Analytics, provided by Google. It sets cookies (_ga and _ga_<ID>) to count visits and pages viewed so the company can improve the website.
• Marketing (only with your consent): LinkedIn Insight Tag, provided by LinkedIn. It sets cookies to measure the results of the company's LinkedIn ads, to show ads on LinkedIn to people who visited the website, and to provide aggregated reports about visitors (such as job titles and industries).

If you choose Necessary only, or make no choice, Google Analytics and the LinkedIn Insight Tag do not load. If you withdraw consent, they stop loading and the Google Analytics cookies on this website's domain are deleted. Cookies that LinkedIn sets on its own domains can be removed through your browser settings.

For how these providers handle data, see Google's Privacy Policy (policies.google.com/privacy) and LinkedIn's Cookie Policy (linkedin.com/legal/cookie-policy).

The Service is not intended for children under 13/16. The company does not knowingly collect children's data.