Privacy Policy

Last updated: 22 June 2026

This Privacy Policy explains how TecheSight Ltd ("we", "us"), the operator of AMOYE, collects and uses personal data. We are the data controller for personal data processed through the Service. We comply with the UK GDPR and applicable data-protection laws.

1. Data we collect

We collect: account data (name, email, organisation, role, password hash); content you create or upload (research ideas, documents, outputs and generated artefacts — "Your Content"); usage data (features used, AI generations, in aggregate); and coarse, privacy-preserving analytics (approximate country only, derived from network headers — we do not store IP addresses for analytics). We do not knowingly collect special-category data; please do not upload it unless necessary and lawful.

2. How we use data

We use personal data to: provide and secure the Service; generate the AI-assisted drafts you request; maintain your account, projects and outputs; provide support; understand aggregate usage to improve the product; and meet legal obligations. Our lawful bases are performance of our contract with you, legitimate interests (running and improving a secure service), consent (where required), and legal obligation.

3. AI processing

To produce drafts, the relevant inputs you provide are sent to our AI provider, Anthropic, which processes them to return a response. We instruct providers not to train foundation models on your content. Your Content is used to serve your request and is not sold.

4. Payments

Payments are handled by our Merchant of Record, Paddle. When you purchase a subscription, Paddle collects and processes your billing and payment information under its own privacy policy; we receive transaction records (not full card details).

5. Sub-processors

We use trusted providers to run the Service, including: Vercel (application hosting), Neon (database), Anthropic (AI), Paddle (payments), and an email-delivery provider for transactional messages. Each processes data on our behalf under appropriate agreements.

6. Sharing and transfers

We do not sell personal data. We share it only with the sub-processors above, where required by law, or with your institution for institutional accounts (aggregate/administrative data only — private project content is not exposed). Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, then delete or anonymise it within a reasonable period, unless a longer period is required by law. You can delete content within the Service, and request account deletion at any time.

8. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing, and to data portability. You may withdraw consent where processing is based on consent. To exercise these rights, contact us below. You may also complain to the UK Information Commissioner's Office (ICO) or your local regulator.

9. Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls and tenant isolation. No system is perfectly secure; please keep your credentials safe.

10. Contact

TecheSight Ltd, data-protection enquiries: support@amoye.org.