Data Usage & AI Policy
Last updated
Your data is used only to deliver the work you hired us for. Access is limited to the people on your project, account access is removed when the work ends, and nothing you share is used to train AI models. We use AI tools to work faster, but people review everything, and you can ask us not to use AI on your project.
1. What this policy covers
Our Privacy Policy covers personal data collected through this website. This policy covers the data you give us while we work together: briefs, files, customer lists, analytics and ad accounts, source code, and logins to your systems. It also explains how we use AI tools.
If your contract, Statement of Work (SOW) or NDA says something different, that document takes precedence.
2. How we use your data
- Only to deliver the services in your proposal or SOW
- Never sold, rented or shared with other clients
- Never used for our own marketing without your written permission, including in our portfolio if you ask us to keep the work confidential
- Never used to train AI models, by us or by the AI providers we use
3. Who can see it
- Only the people working on your project, and only what they need for their part of it
- Everyone on our team is bound by confidentiality obligations
- Talent placed with you works under the same confidentiality terms
- Service providers (listed in section 7) process data only to provide their service to us
4. Access to your accounts and systems
- We ask for our own user accounts with the lowest level of access that does the job, rather than your password
- Where a shared login can’t be avoided, it is kept in a password manager, never in email, chat or documents
- We use two-factor authentication wherever the service supports it
- At the end of an engagement we hand everything back and ask you to remove our access; we remove any access we control ourselves
- Ad accounts, analytics, domains, hosting and code repositories are set up in your name wherever possible, so you always own them
5. Files you send us
- Files attached to our website forms are stored privately in Cloudflare R2 and deleted automatically: after 90 days, or 12 months for CVs
- Project files are kept in access-controlled workspaces for the length of the engagement
- When a project ends, we delete working copies of your files within 90 days unless you ask us to keep them, or the law requires us to keep records (for example invoices, for 5 years)
- You can ask us to delete your files at any time, and we’ll confirm when it’s done
6. How we use AI
Amionyx is an AI-based agency, so here is exactly what that means for your data.
- Where we use AI: research, first drafts of copy and content, code suggestions, testing, data analysis and design exploration
- People stay in charge: a person reviews, edits and approves every piece of AI-assisted work before it reaches you or goes live
- Your data and AI: we use business versions of AI tools that don’t train on what we enter, and we don’t enter personal data or confidential business information into consumer AI tools
- Your choice: if you’d rather we didn’t use AI tools on your project, or on particular data, tell us and we’ll agree how to work without them
- Your rights in the output: AI-assisted work we create for you is covered by the same intellectual property terms as the rest of your deliverables (see our Terms of Service)
- Honesty about AI content: where a platform or law requires AI-generated content to be labelled, we label it
7. Service providers
These are the providers that may process data on our behalf. Project-specific tools (for example GitHub, Figma or a client’s own systems) are agreed at the start of each project.
| Provider | Used for | Where data may be processed |
|---|---|---|
| Microsoft 365 | Email, documents and files | India, the EU, the US |
| Cloudflare | Website hosting and file storage | Global network |
| Google (Analytics) | Website analytics | The US and elsewhere |
| Meta (Pixel and WhatsApp) | Ad measurement and messaging | The US and elsewhere |
8. Security incidents
If we become aware of a breach affecting your data, we’ll tell you without undue delay, explain what happened and what we’re doing about it, and help you meet any obligation you have to notify regulators or your own customers.
9. Questions and requests
Email hello@amionyx.com to ask what data we hold for your project, to have it returned or deleted, or to agree a data processing agreement (DPA) for your contract. We reply within 5 working days.