Privacy Policy

Who we areCopy Anchor Link

ELEGANTINSIGHTS LTD ("we", "us") runs ElegantInsights. We are registered in England and Wales (company number 16278146), and our registered office is Larch House, Parklands Business Park, Denmead, Hampshire, PO7 6XP.

We are the controller of the personal data in this policy. For anything about your data, email support@elegantinsights.co.uk.

What we collectCopy Anchor Link

Your account

• Your name, email address, company name and password. Passwords are stored as a secure hash by our sign-in provider, never in plain text.
• Your two-factor authentication set-up.
• A profile picture, if you add one.

What you put into ElegantInsights

• Your chats: the messages you send, the replies, and chat titles.
• Files you attach to a message. We send the file to our AI provider with that message but do not store it. We keep only its name, size and type.
• Your AI settings, such as custom instructions, language and time zone.
• Reports you submit to the community repository. Your name and company are shown with them unless you choose to hide them when you submit.

Your HaloPSA connection

• Your HaloPSA address, connection ID and access tokens. The tokens are stored encrypted.
• When you run a report, we send its SQL to your HaloPSA. The results go to your browser; we do not store them.

Billing

• Paddle takes your payment (see below). We store your Paddle customer and subscription IDs, your subscription status and dates, and the billing notifications Paddle sends us.
• Business details you enter for invoices (company name and number, tax ID and billing contacts) are passed to Paddle.
• How many tokens each message used, and what it cost us.

Technical data

• Error reports. When something breaks, we record the error, the page, your browser type and your user ID, but not your name or email.
• Error recordings. When you are signed in and something goes wrong, we keep a recording of the minute before the error and the rest of that visit, with your text and typing hidden, so we can fix the fault.
• Analytics, only if you accept them. See the Cookie Policy.
• Our hosting and database providers keep standard server logs, which include IP addresses.

When you contact us: whatever you send us.

How we use it, and our legal basisCopy Anchor Link

We do not sell your data and we do not use it for advertising.

AI and automated checksCopy Anchor Link

• Your messages, attachments and AI settings are sent to Anthropic (Claude) to write replies and chat titles.
• We do not train AI models on your data. Under its commercial terms, Anthropic does not train its models on data sent through its API.
• Every reply is also screened automatically by an AI model for misuse, such as attempts to extract our instructions or get round the assistant's rules. The check never blocks a chat and makes no decision about you. If a chat is flagged, an administrator may read it to decide whether the flag was right.

Who can see your dataCopy Anchor Link

Our team. A small number of administrators can see account details and chats, to give support, review safety flags and fix problems.

Other users. Reports you publish to the community repository can be seen by other subscribers, and by anyone with a share link we create for a report. Your name and company are shown unless you hid them.

Paddle. Paddle.com is our reseller and Merchant of Record. It handles the payment details you give at checkout as a controller in its own right, under Paddle's privacy notice.

Our providers, who act only on our instructions:

When data leaves the UK, we rely on the safeguards UK law allows, such as UK adequacy regulations or the UK International Data Transfer Addendum in our providers' data processing terms.

We may also share data if the law requires it, or with a buyer if our business is sold, in which case we will tell you first.

How long we keep itCopy Anchor Link

• Account and chats: while your account is open.
• Deleting a chat removes its messages and title. A record that the chat existed, with the names of any attached files, stays until your account is closed.
• Closing your account signs you out and blocks sign-in straight away, and deletes your HaloPSA connection. Within 30 days we either delete your account, or, where we have to keep billing and usage records, remove your name, email, chats, settings, safety flags and community reports and keep only anonymised figures.
• Billing records: as long as UK tax law requires, usually six years.
• Error reports and error recordings: for a limited period, after which Sentry deletes them automatically.

Your rightsCopy Anchor Link

Under UK data protection law you can ask us to:

• give you a copy of your data;
• correct it;
• delete it;
• restrict how we use it, or object to our use of it based on legitimate interests;
• give you the data you provided in a portable format.

You can withdraw consent to analytics at any time with Cookie settings in the site footer or on the Cookie Policy.

Email support@elegantinsights.co.uk. We reply within one month and may need to confirm who you are first.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you are in the EU, you have the same rights under the EU GDPR and can complain to your local data protection authority.

ChildrenCopy Anchor Link

ElegantInsights is for businesses and is not meant for anyone under 18.

Changes to this policyCopy Anchor Link

When we change this policy we update the date at the top. If a change is significant, we will email you or show a notice in the app first.