Privacy Policy

Alchemiq Ltd. ("Alchemiq," "we," "our," or "us") operates an AI-powered news intelligence and editorial workflow platform designed for publishers and media organizations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our website at alchemiq.ai, use our platform at app.alchemiqai.com, or interact with any of our services.

By accessing or using our services, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with our practices, please do not use our services.

We collect information through several channels depending on how you interact with our platform. The categories below describe the types of data we may collect and process.

• Information you provide directly (contact forms, account registration, communications)
• Information generated through your use of the platform (editorial workflows, content creation)
• Information collected automatically (usage analytics, device data, logs)
• Information from third-party integrations you connect to the platform

When you create an account on the Alchemiq platform, we collect and process the following information through our authentication provider:

• Full name and email address
• Organization name and role
• Authentication credentials (passwords are hashed and not stored in plaintext)
• Session tokens and login activity
• Role-based access control (RBAC) permissions and group memberships

We use Frontegg as our authentication and identity management provider. Frontegg processes your authentication data in accordance with their own privacy practices. We maintain control over your account data and access policies within our platform.

As a news intelligence platform, we process editorial content and workflow data including:

• News articles and story clusters ingested from public sources for trend detection
• Claims extracted from published news articles
• AI-generated news briefs, summaries, and translations created within the platform
• Editorial decisions, annotations, and review feedback
• Content publishing workflows and CMS integration data
• Social media post drafts and publishing metadata
• Publisher bucket configurations and content assignments

Editorial workflow data is associated with your organization's account and is used to provide and improve the services you have contracted for.

Alchemiq uses artificial intelligence to power core platform features including news ingestion, clustering, claims extraction, content generation, and translation. To deliver these capabilities, we may route prompts and content through multiple AI providers including:

• Google Gemini
• OpenAI
• Anthropic (Claude)

When content is processed through these AI providers, portions of editorial data, text inputs, or instructions may be transmitted to their APIs. Each provider has their own data processing policies. We select providers based on capability, performance, and data handling standards, and we use enterprise-grade API agreements where available.

We do not sell or license your editorial content to AI providers for their own training purposes. However, you should be aware that provider data retention and processing practices are governed by their respective terms, and we encourage you to review them.

Certain features of the Alchemiq platform generate publicly accessible content:

• Public story pages — When stories are published through the platform, they may be accessible at public URLs. Content on these pages is visible to anyone with the link and may be indexed by search engines.
• Suggestion review pages — Editorial suggestion pages shared for review may be accessible to recipients via unique links.
• Published content via CMS integrations — Content published to connected CMS platforms is governed by those platforms' own privacy and access settings.

You are responsible for understanding which content is shared publicly through the platform and ensuring appropriate editorial review before publication.

We collect analytics and usage data to understand how our services are used and to improve platform performance:

• Pages visited and features used within the platform
• Content interaction metrics (views, clicks, engagement)
• Performance and error telemetry
• Device type, browser, operating system, and screen resolution
• IP address and approximate geographic location
• Referring URLs and navigation paths
• Timestamps and session duration

On our marketing website (alchemiq.ai), we use Google Analytics (GA4) to collect aggregated usage statistics. Within the platform (app.alchemiqai.com), we collect usage telemetry to monitor service health and optimize product features.

We use cookies and similar technologies for the following purposes:

• Essential cookies — Required for authentication, session management, and security. These cannot be disabled without losing access to the platform.
• Analytics cookies — Used to understand site usage patterns and improve our services (e.g., Google Analytics).
• Preference cookies — Store your interface preferences and settings.

We do not use advertising cookies or sell tracking data to third parties.

We use the following categories of third-party services to operate and deliver our platform:

• Cloud infrastructure — Google Cloud Platform, for hosting, compute, and storage
• Database services — MongoDB Atlas for data persistence, Redis for caching
• Authentication — Frontegg for identity management and SSO
• AI providers — Google Gemini, OpenAI, Anthropic for content processing
• Media storage — Cloudinary for image and media asset management
• CMS integrations — Various publisher CMS platforms as configured by clients
• Social platforms — Meta (Facebook, Instagram) for social publishing features
• Analytics — Google Analytics for website analytics
• Email — SMTP services for transactional communications

Each subprocessor is selected based on their security posture and data handling capabilities. We maintain data processing agreements with subprocessors where required by applicable law.

We process your information for the following purposes:

• Providing and operating the Alchemiq platform and its features
• Processing editorial content through AI pipelines as part of service delivery
• Managing your account and authenticating access
• Publishing content to connected CMS and social platforms at your direction
• Monitoring platform performance, uptime, and error resolution
• Improving and developing new platform features
• Communicating with you about your account, service updates, or support requests
• Ensuring platform security and preventing fraud or abuse
• Complying with legal obligations
• Responding to inquiries submitted through our website contact form

Where applicable (including under GDPR), we rely on the following legal bases for processing personal data:

• Contract performance — Processing necessary to deliver the services you or your organization have contracted for.
• Legitimate interests — Processing for platform security, fraud prevention, service improvement, and business operations, balanced against your rights.
• Consent — Where you have explicitly opted in, such as for marketing communications.
• Legal obligation — Where processing is required to comply with applicable law or regulation.

We retain your information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law:

• Account data — Retained for the duration of your active account and for a reasonable period after closure to handle any follow-up inquiries or legal obligations.
• Editorial content — Retained in accordance with your organization's service agreement. Published content that has been distributed to external platforms is subject to those platforms' retention policies.
• Analytics data — Aggregated usage data is retained for up to 26 months. Identifiable usage logs are retained for up to 12 months.
• Contact form submissions — Retained for up to 24 months or until the inquiry is resolved.
• Infrastructure logs — Retained for up to 90 days for security and debugging purposes.

We implement reasonable technical and organizational security measures to protect your information, including:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest
• Role-based access control (RBAC) within the platform
• Regular security monitoring and vulnerability assessments
• Secure authentication with hashed credentials and session management
• Access logging and audit trails
• Infrastructure-level security through our cloud hosting providers

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we commit to promptly addressing any security incidents that may affect your data.

Alchemiq operates globally, and your data may be processed in countries other than where you reside. Our infrastructure, subprocessors, and AI providers may process data in the United States, European Union, Israel, and other jurisdictions.

Where data is transferred outside your jurisdiction, we rely on appropriate transfer mechanisms including Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful bases to ensure your data receives appropriate protection.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data (subject to legal retention requirements)
• Restriction — Request limited processing of your data in certain circumstances
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interests
• Withdrawal of consent — Withdraw consent where processing is consent-based

To exercise any of these rights, please contact us at support@alchemiq.ai. We will respond within the timeframes required by applicable law (typically 30 days).

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to lodge a complaint with your local data protection authority
• The right to not be subject to automated decision-making with legal or similarly significant effects, where applicable
• The right to be informed about international data transfers and the safeguards in place

For platform clients, Alchemiq typically acts as a data processor on behalf of your organization (the data controller). In such cases, data subject requests should be directed to your employer or the organization that has contracted with Alchemiq. For direct interactions with our marketing website, Alchemiq acts as the data controller.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by us
• The right to opt out of the sale or sharing of personal information
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information

We do not sell personal information as defined under the CCPA. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA.

You may request deletion of your personal data by contacting us at support@alchemiq.ai. Upon receiving a verified deletion request, we will:

• Delete or anonymize your account data from our active systems
• Instruct relevant subprocessors to delete your data
• Remove your data from backups within our standard backup rotation cycle

Please note that we may retain certain information where required by law, to resolve disputes, enforce agreements, or where deletion is technically impracticable. Content that has been published to external platforms via CMS integrations may need to be removed separately through those platforms.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify platform users via email or in-platform notification for significant changes
• Provide a reasonable period before changes take effect

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: