This notice explains how Polyglyph Analytica Ltd collects, uses and protects personal data when you visit this website or contact us through it. It also sets out your rights and how to exercise them. Please read it alongside any engagement letter we agree with you, which will govern personal data we handle in the course of that engagement.
It also covers paying us: for one of our apps, for a bundle from our store at buy.polyglyphanalytica.com, or for our models service. Each app’s own privacy page says what that app does with your data.
Last updated 16 October 2026.
1. Who we are, and how to reach us
Polyglyph Analytica Ltd is the controller of the personal data this policy describes. We are the controller of the personal data described in this notice, which means we decide why and how it is processed.
| Registered name | Polyglyph Analytica Ltd |
| Registered in | England and Wales |
| Company number | 17495579 |
| Data protection contact | Sejuti Roy |
| Email | [email protected] |
Please address any question about this notice, and any request to exercise your rights, to [email protected].
2. The personal data we collect
Information you give us
When you send an enquiry you give us your name, your organisation if you choose to name one, your email address, the nature of your enquiry and whatever you write in the description field. Please tell us only what we need in order to reply. Do not send us special category data, such as information about health, ethnicity or beliefs, and do not send us details of criminal offences.
Information we collect automatically
If you allow analytics cookies we collect information about your visit: the pages you view, an approximate location derived from your internet address, the page that referred you, and your device, browser and operating system. If you decline, we collect none of it.
With your permission, Google Analytics also records the links you follow from our pages to other websites, including our product websites, and that you sent an enquiry through the contact form. It does not record what you wrote in the form, your name or your email address. Our websites at polyglyphanalytica.com, polyaly.com and 3sry.com share one Google Analytics account, so a visit that moves between them, on sites where you have allowed analytics, is counted as one visit. Nothing is used for advertising.
If you buy from us
You pay on Stripe’s checkout page. There you give your name, email address, billing address and card details, and, if you buy for a business, its tax number. We keep the Checkout Session id and Stripe customer id Stripe gives us, your email address, and which version of the checkout wording you agreed to and when. We never see or keep your card details.
We use Stripe to send our invoices and take payments, by card or by bank transfer. Stripe keeps your name, email address, billing address and VAT number, and the invoices and payments, for us. For each invoice, we keep only Stripe’s reference numbers, whether it is paid, and what it pays for. Your choice about news from us is kept by us, not by Stripe. You can ask Stripe about its own records of your payments.
If you buy a bundle, we keep what it covers, and we email you each app’s download link. If you ask our store to email you your price, we use your email address to send it.
If you subscribe to our models service, your app sends it the app’s licence id and an installation id, to show it is licensed. Your prompts pass through our service on their way to the model provider. OpenRouter carries them from our service to that provider. Our service keeps no prompt and no reply, and it never logs them. For billing and the monthly allowance, it keeps a count for each request: which installation asked, for which task, which model answered, the number of tokens used and the cost. Every request asks the provider to keep nothing (zero data retention) and refuses data collection.
If you ask for an invoice, the store keeps what you typed with our sales records, to send the invoice and, once it’s paid, what it pays for.
Information needed to operate the site
Our hosting provider processes your internet address and request headers in order to serve pages and to protect the site against abuse.
3. Why we use your personal data, and our lawful basis
| Purpose | Data used | Lawful basis |
|---|
| Replying to your enquiry | Enquiry data | Our legitimate interests in answering someone who has approached us. We have weighed your interests against ours and consider a reply to be what you expect. |
| Considering and agreeing an engagement | Enquiry data | Steps taken at your request before entering a contract, and our legitimate interests in developing our business. |
| Understanding how the site is used, and improving it | Analytics data | Your consent, which you may withdraw at any time. |
| Operating and securing the site | Technical data | Our legitimate interests in keeping the site available and protecting it against misuse. |
| Selling you an app, a bundle or the models service, taking the payment, and providing what you bought | Purchase data | Performance of a contract with you, and compliance with a legal obligation for tax records. |
| Keeping required records, and establishing or defending legal claims | Any of the above | Compliance with a legal obligation, and our legitimate interests in protecting our position. |
We make no automated decisions that produce legal effects for you or similarly significant effects, and we do not profile you. We do not sell personal data, and we will not add you to a marketing list because you sent us an enquiry.
Marketing email
We send marketing email only to people who have said yes to it, for example on our own page before the checkout for one of our apps. Saying yes means you agree to hear from Polyglyph Analytica Ltd about any of our products and apps, not only the one where you said yes. Our lawful basis for sending it is your consent. You can withdraw it at any time, with the unsubscribe link in any of our marketing emails or by writing to us at [email protected]. Withdrawing stops marketing email from all of our products and apps.
The box to hear from us is ours, on our own page before checkout, and starts unticked.
Polyglyph Analytica Ltd keeps one customer list across all its apps, on our own servers. It holds who our customers are and what each chose about marketing.
4. Cookies and similar technologies
A cookie is a small file a site stores in your browser. We set no analytics cookie until you allow it. You can change your choice at any time through the cookie settings link in the footer of every page. If you withdraw consent we stop collecting analytics data and remove the analytics cookies from your browser.
| Cookie | Purpose | Duration | Consent |
|---|
| pa-analytics-consent | Remembers your cookie choice. Held in your browser and never sent to us. | Until you clear it | Not required |
| _ga and _ga_* | Google Analytics. Distinguishes visitors and sessions so we can count how the site is used. | Up to two years | Required |
The site’s typefaces are served from this site. Loading them sends nothing to Google and sets no cookie.
To show prices in your currency, our sites use the country your connection comes from, which our hosting provider, Cloudflare, tells us. We don’t store it. On a page that shows prices, you can change the currency at its foot, and your browser remembers your choice.
5. Who we share your personal data with
Each supplier below acts on our instructions under a written contract that requires it to keep your data secure and to use it only for the purposes we specify.
| Recipient | What they do | Where the data is held |
|---|
| Zoho Corporation | Delivers enquiry emails to us, and our emails to buyers, through its ZeptoMail service. | European Union |
| Google | Hosts this site and serves its pages. | United Kingdom, European Union and United States |
| Google | Measures how the site is used, where you have allowed it. | United States |
| Stripe | Processes payments for us. See below. | Including the United States (see section 6) |
| Cloudflare | Runs our bundle store and our models service, and holds their records. | Including the United States |
| OpenRouter | Only if you subscribe to our models service: carries your prompts from our service to the model provider. | United States |
| Professional advisers | Lawyers, accountants, auditors and insurers who advise us. | United Kingdom |
| Regulators, courts and law enforcement | Where we are required to disclose, or where disclosure is necessary to establish or defend legal claims. | As required |
Stripe (Stripe Payments UK Ltd, with Stripe, Inc.) process the payment for us. Stripe uses your name, email address, billing address and card details to take the payment, to work out the tax (from your billing address, and, for price previews in the US and Canada, your IP address) and to check for fraud. Stripe’s privacy policy covers what it holds.
6. Sending data outside the United Kingdom
Enquiry data is held in the European Union. The United Kingdom has determined that the European Economic Area offers an adequate level of protection, so that transfer needs no further safeguard.
Some of the services above are operated from the United States, so your personal data may be transferred there. Where the recipient is certified under the UK Extension to the EU-US Data Privacy Framework we rely on that certification. Otherwise we rely on the International Data Transfer Addendum to the European Commission’s standard contractual clauses, together with any further measures the transfer calls for. You may ask us for a copy of the safeguard that applies to a particular transfer.
Stripe may process your data in the United States. That transfer is covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, and Stripe is certified under the EU-US, UK Extension and Swiss-US Data Privacy Frameworks.
7. How long we keep your personal data
We keep enquiry correspondence for as long as we need it to answer you and to deal with whatever follows from it. After that we keep it for the period our records must be retained, which is six years from the end of the calendar year in which our dealings end. That period reflects the limitation period for contract claims in England and Wales, and the record-keeping periods set by company and tax legislation.
Analytics data is held by Google for the retention period set in our account, and is deleted after it.
If you buy from us, Stripe keeps payment records, and we keep invoices, for as long as tax law requires. Your marketing consent is kept until you withdraw it.
You may ask us to delete your personal data at any time and we will do so, unless we are required to keep it for the reasons above. Where we cannot delete it at once, we restrict it so that it is held only for the purpose that requires it, and we delete it when that purpose ends. Section 9 explains how to ask.
8. How we protect your personal data
The site is served over an encrypted connection. Enquiry data travels to our email provider over an encrypted channel and is held in access-controlled systems. Access is limited to the people who need it for their work. We keep the site’s dependencies current and review its configuration.
No transmission over the internet is completely secure. If you need to send us something confidential, ask us first and we will arrange a secure route.
9. Your rights
Under United Kingdom data protection law you have the right to:
- be told how your personal data is used, which is the purpose of this notice;
- ask for a copy of the personal data we hold about you;
- have inaccurate personal data corrected, and incomplete data completed;
- ask us to delete your personal data;
- ask us to restrict how we use it while a question about it is resolved;
- receive personal data you gave us in a portable form, or have it sent to another controller, where we rely on your consent or on a contract and process it by automated means;
- object to processing we base on our legitimate interests, and to object at any time to direct marketing, which we must then stop; and
- withdraw consent at any time where we rely on it, without affecting anything we did before you withdrew it.
To exercise any of these, email [email protected]. We will respond within one month, and will tell you if we need longer because the request is complex. We may ask you to confirm your identity first. There is no charge. If a request is clearly unfounded or excessive we may charge a reasonable fee or decline it, and we will explain why.
10. Complaints
We would rather hear from you first, at [email protected], so that we can put matters right. You also have the right to complain to the Information Commissioner’s Office, the United Kingdom supervisory authority for data protection, at ico.org.uk, by telephone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
11. Other sites
This site links to our own operating businesses and to external references such as patent registers. Those sites are governed by their own privacy notices, and this one does not apply to them.
12. Children
The site addresses businesses and professional audiences. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, tell us and we will delete it.
13. Changes to this notice
We keep this notice under review. When we change it we update the date shown at the top, and where a change is significant we draw attention to it on the site. Please look at it from time to time.
