Privacy Policy

[Business name] ("we") collects and handles personal information in line with the Privacy Act 2020 and its information privacy principles. This policy explains what we collect, why, and your rights.

What we collect

• Your name, email address and, if you use them, your Google or Facebook account identifier.
• The questions you ask and the answers produced, saved in your history.
• Usage records: when you asked a question, which answer mode you used and its processing cost, to apply plan limits and run the service. Our owners and administrators can see these records together with the questions saved in your history, to run the service, look into problems and costs, and prevent misuse; each time they do is logged. They cannot see a conversation you have deleted.
• Payment records (amount and date). Card details are handled by Stripe, our payment provider, and never reach us.
• Sign-in records: time, IP address and pages used, for security. They do not include your questions.
• Support requests you send us, with the question and answer you choose to attach.

We collect this information from you directly, or from Google or Facebook if you choose to sign in with them.

How we use it

To provide the service, keep your account secure, send account emails (confirmation, password reset, trial and renewal reminders), answer support requests and meet legal obligations. We do not sell personal information and do not use your questions to train AI models.

Who receives it

Our service providers, who handle it only to provide the service for us: our hosting provider; Anthropic, the AI model provider, which receives your questions to produce answers; Stripe, for payments; our email provider; and Google or Facebook if you sign in with them. Some of these providers are outside New Zealand (Anthropic, for example, is in the United States), so your information may be stored or processed overseas. We choose providers that are required to protect it.

Your rights

You can ask to see the personal information we hold about you and ask us to correct it (information privacy principles 6 and 7). You can delete individual conversations from History, or your whole account from the Account page, at any time. For any other request, choose "Privacy request" on the Help page or email help@amicova.com; we reply within 5 business days. If you have a concern, please contact us first; you can also complain to the Privacy Commissioner (www.privacy.org.nz).

Security

Passwords are stored only as secure hashes, connections use HTTPS, and your saved research is never shown to other users (owners and administrators can see it only as described above). If a privacy breach causes or is likely to cause serious harm, we will tell you and the Privacy Commissioner as the Privacy Act requires.

Retention

We keep your data, including saved conversations, while your account exists; you can delete conversations at any time. Deleting your account deletes your account details and saved research, except records the law requires us to keep (such as payment and tax records). You are signed out automatically after 12 hours without activity, so an unattended computer does not stay signed in.

Contact

For privacy questions or requests, write to our privacy officer at [contact email].