Alchemize (“we”, “our”, “us”) is committed to protecting your personal data. This policy explains what we collect, why we collect it, and your rights. We are registered in England and Wales and act as data controller for the purposes of UK GDPR and the Data Protection Act 2018.
1. Who we are
NeuroForged Ltd, trading as Alchemize. Registered address: [Registered Address]. ICO registration number: [ICO Number]. Contact: privacy@alchemizeiq.com.
2. What data we collect
When you book a demo or contact us
- Name and email address
- Company or agency name
- Any information you provide in free-text fields
When you use our platform (as an agency customer)
- Account credentials (email, hashed password)
- Usage data: pages visited, features used, timestamps
- Conversation logs generated by your deployed chatbot assistants
- Lead data your chatbot collects on your behalf (you are controller for this data; we act as processor)
Automatically collected data
- IP address and approximate location (country/region level)
- Browser type and device type
- Pages visited and referrer URL
- Session duration
We use Plausible Analytics — a privacy-first, cookieless analytics tool. Plausible does not set any cookies and does not collect personally identifiable information. No consent banner is required for analytics under GDPR when using Plausible in its default configuration.
3. Legal basis for processing
- Contract performance — to provide the Alchemize service to you
- Legitimate interests — to improve our product, detect abuse, and send relevant communications (you can opt out at any time)
- Consent — where we ask for it explicitly (e.g., marketing emails)
- Legal obligation — where required by law
4. How we use your data
- Providing, maintaining, and improving the Alchemize platform
- Sending transactional emails (booking confirmations, invoices, service notices)
- Responding to support enquiries
- Fraud prevention and security monitoring
- Aggregate analytics to understand usage patterns (no individual profiling)
- Sending product updates or offers where you have consented or where legitimate interest applies
5. Who we share data with
We do not sell your data. We share it only with:
- Infrastructure providers — Hetzner (EU hosting), Cloudflare (CDN/DNS)
- Email delivery — Resend (transactional email)
- Calendar booking — Calendly (when you book a demo)
- Error monitoring — Sentry (anonymised crash reports)
- Analytics — Plausible (cookie-free, EU-hosted)
All processors are bound by data processing agreements and operate under GDPR-equivalent safeguards.
6. Data retention
- Account data: retained for the duration of your subscription + 12 months after cancellation
- Conversation logs: retained for 90 days by default; configurable per workspace
- Marketing enquiry data: retained for 24 months or until you request deletion
- Billing records: retained for 7 years (legal obligation)
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion (“right to be forgotten”) where no legal basis for retention exists
- Restriction — limit how we process your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Object — opt out of processing based on legitimate interests or direct marketing
- Withdraw consent — at any time where consent is the basis
To exercise any right, email privacy@alchemizeiq.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO: ico.org.uk.
8. Cookies
This website uses no tracking cookies. We use Plausible Analytics which is cookieless by design. We may set a single functional cookie (cookie_consent) to remember your preference on our cookie notice — this does not track you across sites.
9. Security
We use industry-standard measures including TLS encryption in transit, bcrypt password hashing, role-based access controls, and regular security reviews. No system is perfectly secure; in the event of a breach affecting your rights we will notify you within 72 hours as required by law.
10. Children
Alchemize is a B2B product intended for businesses and their employees. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data to us, contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy from time to time. Significant changes will be notified by email to active customers. The “last updated” date at the top of this page reflects the most recent revision.
12. Contact
For any privacy-related questions: privacy@alchemizeiq.com