How we handle your data

In short and in plain words. This page only says what is true today. Where something is still to come, it says “before working with real data”.

Today we work with demo data only — we are preparing the pilot with our first clients.

Where your data is kept

The database, uploaded files and chat history are kept in the EU — with Supabase in Frankfurt, Germany.
The app reaches you through the Cloudflare network.
Today the AI (Claude by Anthropic) processes questions in the USA. Before working with real data — AI in the EU (Frankfurt).

Only people from your company whom we have invited — with a password and mandatory 2FA.
A chat conversation is visible only to the person who had it — not even their colleagues see it. Dashboards — the owner and the colleagues they shared them with. Agents and notifications — only their owner.
Our team does not see your conversations, dashboards or agents — the database rules do not show them even to the administrator.
Our administrator sees only what is needed for support: the users and their emails, the column descriptions, the list of uploaded files (names and sizes), the AI cost and error records. The administrator cannot open your uploaded files. Support access to them will come later — only at your request and recorded in the audit log.

Your question and the last few questions and answers from the same conversation.
A description of the tables: column names and their meaning — without the data rows.
When you upload a file — the column headers and up to 5 sample values per column, so it can suggest a description.
Shortened results of the queries the AI asks for — up to 100 rows and summaries. Never whole files or tables.
The queries are run by our code, read-only. The AI has no internet access.
Your data is not used to train AI — this is how Anthropic’s commercial terms work.
Agent checks run without AI. A short AI explanation in the email is optional and off by default.
Personal data (names, ID numbers, phones) is not yet masked before the AI — this comes before working with real data.

Conversations — 12 months after the last activity (or as agreed), then they are deleted automatically.
Agent notifications — 12 months (or as agreed, but no longer than conversations).
Uploaded files and the data from them — until you delete them or the contract ends.

By you: a file (with the tables loaded only from it) — in “Data → Files”; a conversation — from the history; a dashboard or an agent — by its owner.
When the contract ends, we delete everything of the company within 30 days (sooner if you ask): users, data, files, conversations, dashboards, agents, notifications and the cost and error records.
Only a record of who deleted the company and when remains — without data, names or emails.

Sign-in by invitation only, a password of at least 12 characters and mandatory 2FA (a code from a phone app).
Encryption in transit (HTTPS) and at rest (the database and files at Supabase).
Isolation between companies: each company’s data is in a separate part of the database with separate rights; every request is checked; an automatic test runs on every change.
The AI only reads: one read query, only your tables, with time and row limits.
Administrator actions are written to an audit log that cannot be changed.
No advertising cookies, no tracking and no third-party scripts.

Provider	What for	Country
Supabase	Database, sign-in and files	Germany (Frankfurt)
Cloudflare	Delivering the app and the website, protection	Global network (US company)
Anthropic	AI (Claude)	USA — before working with real data: EU
Brevo	Emails (invitations, notifications)	France

This page does not replace the Privacy Policy — it explains it. The full text: Privacy Policy