Privacy Policy

1. Who is responsible

Alethic AI is the controller of the personal data described here. Questions, requests and complaints go to [email protected].

2. What we collect

Account data. Your name, email address and authentication details when you sign up, plus your account role and subscription status.

Conversation data. The messages you send to Alethic, the responses generated for you, any documents you upload, and the titles and timestamps of your saved conversations.

Billing data. Your subscription status, plan and renewal dates. We never see or store your card details — those go directly to Paddle, which processes the payment.

Technical data. IP address, browser and device information, and pages visited, collected in server logs and product analytics to keep the service secure and working.

3. Why we use it, and on what basis

• To provide the service — creating your account, running your conversations, storing your history, applying your trial or membership. Basis: performance of our contract with you.
• To take payment — processing subscriptions and renewals. Basis: performance of our contract, and legal obligation for tax and accounting records.
• To keep the service secure and reliable — abuse prevention, rate limiting, debugging, and understanding which features are used. Basis: our legitimate interest in a service that works and is not abused.
• To communicate with you — service notices, billing notifications, and replies to your enquiries. Basis: performance of our contract and our legitimate interest in supporting users.

We do not sell personal data, and we do not use your conversations to train our own or any third party’s AI models.

4. Who processes data for us

We use a small set of providers, each acting on our instructions and only for the purpose listed:

• Clerk — account creation, sign-in and session management.
• Paddle.com Market Ltd (Paddle) — payment processing, invoicing and tax. Paddle is the Merchant of Record and an independent controller for the payment transaction; see Paddle’s privacy policy.
• Anthropic and Voyage AI — processing the text of your conversations to generate responses and retrieve relevant material. Content sent to them is not used to train their models.
• Vercel — hosting and content delivery.
• Neon and Neo4j Aura — the databases holding your conversations and the knowledge base.
• PostHog — product analytics.

Some of these providers are based outside the European Economic Area. Where personal data is transferred internationally, it is covered by Standard Contractual Clauses or an equivalent safeguard.

5. How long we keep it

Account and conversation data is kept while your account is open. Delete a conversation and it is removed from your account immediately and purged from backups within 30 days. Close your account and we delete your account and conversation data within 30 days.

Billing and tax records are kept for as long as tax law requires, typically seven years. Server logs are kept for a short operational period and then discarded.

6. Your rights

Depending on where you live, you have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent where we rely on it.

Write to [email protected] and we will respond within 30 days. If you are in the EEA or UK and are not satisfied with our response, you may complain to your national data protection authority.

7. Cookies

We use cookies that are strictly necessary to run the service — keeping you signed in and protecting against fraudulent requests — together with analytics cookies that tell us which parts of the product are used. Blocking necessary cookies in your browser will prevent sign-in from working.

8. Security

Data is encrypted in transit with TLS and at rest by our infrastructure providers. Access to production systems is restricted to the people who need it. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as the law requires.

9. Children

Alethic is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes

We may update this policy. The “last updated” date above always reflects the current version, and we will give notice of material changes before they take effect. See also our Terms & Conditions and Refund & Cancellation Policy.