What leaves your computer, and what doesn't

What stays on your computer

Everything about you. Your resumes, your answers, the record Farah (Agent, Career development) writes, every job Eklavya finds, every document it prepares, every reason you gave for saying no. All of it is in one folder on your computer that you can open, and none of it is sent to us. There is no account with us. Below is the short list of what does leave your computer, and why.

What leaves your computer

• The licence check. When you install, when the dashboard starts, and at most once a day after that, your copy asks our licence server whether it still holds the seat. The request carries a licence id, an installation id (a random identifier made at install) and the version number. Each time Eklavya checks its licence, it also tells our licence server whether your copy has been changed from the one we supplied: yes or no. It never sends what was changed, or any of your files. We keep the latest answer with your licence. That's all it carries. There's no name, no file and no job listing. The licence record holds which installation has the seat, when it last checked in, and how many times the seat has moved in the last thirty days. We do not store your IP address in the licence record.
• The purchase. You buy from Polyglyph Analytica Ltd, at our store. It sends you to Stripe's checkout to pay. Stripe (Stripe Payments UK Ltd, with Stripe, Inc.) process the payment for us. Stripe uses your name, email address, billing address and card details to take the payment, to work out the tax (from your billing address, and, for price previews in the US and Canada or where your country isn't known, your IP address) and to check for fraud. Stripe's privacy policy covers what it holds. We use Stripe to send our invoices and take payments, by card or by bank transfer. Stripe keeps your name, email address, billing address and VAT number, and the invoices and payments, for us. For each invoice, we keep only Stripe's reference numbers, whether it is paid, and what it pays for. Your choice about news from us is kept by us, not by Stripe. You can ask Stripe about its own records of your payments. Stripe may process your data in the United States. That transfer is covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, and Stripe is certified under the EU-US, UK Extension and Swiss-US Data Privacy Frameworks. We keep the Checkout Session id and Stripe customer id Stripe gives us, your email address, and which version of the checkout wording you agreed to and when. We hold them in the licence record for three reasons: to send the Your Eklavya email with your download and refund links, to send the link again if you ask for it on the recovery page, and to answer a refund or a support question.
• Release announcements and other news. Only if you ticked the box. The box to hear from us is ours, on our own page before checkout, and starts unticked. Ticking it means you agree to hear from Polyglyph Analytica about any of its products and apps, not only Eklavya. Each email carries an unsubscribe link, and the profile screen in the dashboard has the same switch. Using either, or writing to us, stops marketing email from all of our products and apps. Unsubscribing changes nothing about your licence.
• Our customer list. Polyglyph Analytica keeps one customer list across all its apps, on our own servers. It holds who our customers are and what each chose about marketing.
• The phone link. Reaching your dashboard from a phone goes through a relay we run, because a phone usually cannot reach a computer directly. The relay carries encrypted frames between the two. It can't read them, because the pairing key is only on your phone and your computer. The relay holds a link code tied to your licence, and when it was last used.
• The padlock certificate. The machine holding the seat fetches the certificate for the dashboard's local name. Nothing is sent to get it beyond the licence check above.
• The searches you set up, to the places you chose. These go from your computer straight to each service. None of them go to us. Your name, your record and the words of your offerings are never sent.
  • UK Find a Tender and Contracts Finder are asked for every notice published in a date window. Nothing else is sent.
  • TED, the EU's tenders service, is sent the date window. If your offerings have CPV codes, it is sent those. If you chose countries, it is sent those.
  • SAM.gov, for US federal contracts, is sent the date window and the SAM.gov key you gave it. If your offerings have a NAICS code, it is sent one.
  • Companies House is sent the number of each company you watch, with the Companies House key you gave it.
  • A feed or a web page you asked it to watch is fetched at the address you gave. A page is fetched only where the site's robots.txt allows it.
  • The job sites you approved are searched by the Claude app on your computer, under your own Claude account. A search is built only from facts you marked public and the listing's own words.
  Each key goes only to its own service. Every request names Eklavya and links to this page. Each one is written down in find/requests.jsonl in your Eklavya folder, so you can see exactly what was sent. Alert emails you drop in, or that it collects from your mailbox, are read on your computer, and nothing is fetched for them.
• Your own mail server, if you add a mailbox. Eklavya signs in to it with the password or token you gave it, over an encrypted connection, and downloads your new mail. It sends no mail. The password or token stays on your computer and is never sent to us.
• The live prompter, if you use it. It hears a call in the app, on your computer, or on your paired phone beside it, and turns speech into text there. No audio leaves the device that heard it, and none of it reaches us. The first time you ask for it, this computer downloads the speech model from Hugging Face at a fixed version and checks every file against the fingerprint the app carries before keeping it. It holds no one's speech. It is kept in Eklavya's folder on this computer, and your browser keeps a copy. A paired phone downloads its smaller speech model from Eklavya's website the first time it listens, and checks every file in the same way; the phone's browser keeps a copy. Like any download, our website sees that the phone asked for the file. Nothing from the call is sent with it. The model that tells your voice apart ships inside the app, and the voice sample it compares against stays on your computer until you delete it. When the paired phone listens, only the words travel to your computer, over the same encrypted phone link as above. For the prompts, the question, the call's last few lines (each checked for anything you have not cleared to say) and the facts you have cleared go to your own AI (your Claude, or the provider key you gave the app), under that provider's terms. The call's words stay in the prompter's window and are dropped when you stop listening, unless you choose to save notes into your folder. Nothing that was said is logged. Before each call you confirm that you have told the other people on it that an assistant is listening, unless you turn that off; the law on telling people differs by place.
• Notifications, if you turn them on. A push notification goes from your computer to your browser's push service, which is run by the company that makes your browser, such as Google, Apple or Mozilla. It passes it on to the dashboard, or the paired phone, you turned notifications on for. Each one is encrypted for that device, so the push service can't read it.
• Notification emails, if you choose email for a topic. Your computer asks our licence server to send one short email to the address on your licence. It says only which product, which topic and how many things are waiting, such as "Something needs you in Eklavya (opportunities)". It never has the details, such as a job title or a company. You see those when you open Eklavya. For these emails we keep a count of how many we sent for your licence each day, so we can stop at ten. If you use the link in one to stop a topic, we keep that choice. We keep nothing else about them.
• Email delivery. Our email is sent through ZeptoMail, a Zoho service. It handles the address and the message in order to deliver it.

This website

Google Analytics, only with your consent. When you first arrive, a notice asks whether we may use Google Analytics to see which pages help. Nothing from Google is loaded until you press Allow analytics. If you press Essential only, or nothing at all, no analytics runs. Your choice is kept in your browser, and Cookie settings in the footer reopens it at any time; saying no after a yes stops it from then on. Apart from analytics and the currency you choose (below), the site keeps two things in your own browser. One is whether you chose light or dark. The other is your answer to the cookie notice. Neither is sent anywhere.

If you allow it, Google Analytics records which of our pages you visit, roughly where from, and what kind of device and browser you use. It also records the steps you take towards buying:

• seeing the prices;
• completing a purchase;
• starting a trial or a demo.

This is recorded without your name or email. It sets cookies on this site to tell one visit from the next. IP addresses are not stored by Google Analytics 4. Google keeps what it records for at most fourteen months. Advertising features are off.

The price in your currency. The pricing page asks our licence server for the price, so that the number you see is the number on the bill. The server asks our store. The prices come from our own price list. The store asks Stripe Tax what tax it will add. Our licence server tells the store which country your request comes from, and the store tells Stripe. If you're in the US or Canada, or the country isn't known, your IP address is passed on instead, so Stripe can work out where you are. We don't store your IP address for this.

To show prices in your currency, our sites use the country your connection comes from, which our hosting provider, Cloudflare, tells us. We don't store it. On a page that shows prices, you can change the currency at its foot, and your browser remembers your choice.

Nothing else. There's no other tracking. There are no advertising cookies and no social media buttons. The site is static pages served by Cloudflare, which sees each request the way any host does.

Our store

You buy at our store. Polyglyph Analytica runs it, as it runs this site.

The store has its own cookie notice. If you press "Allow analytics" there, Google Analytics records which store pages you visit, the links you follow from them, and when you open the checkout. It's recorded without your name or email. We use it to learn which pages help people buy. Nothing is used for advertising. Your answer on this site doesn't carry over to the store. If you don't say yes there, no analytics runs on the store.

When you pay, Stripe tells the store about the payment. The store keeps a copy of what Stripe sends: what you bought, the amounts and the tax, your name, email address and billing address, and any tax number you gave. For a refund, it can also include the card's type, its last four digits and its expiry date. It never includes the full card number. The store uses it to tell Eklavya's licence server about your purchase, and later about a renewal or a refund. It keeps it with our purchase records.

If you ask the store for your price as a returning customer, it keeps your email address and when it last sent you the link, so it sends at most one every 15 minutes. If you open the price link, your browser keeps a cookie on the store's site for 30 days. It lets the store show your price as a returning customer. It's sent only to the store.

If you ask for an invoice, the store keeps what you typed with our sales records, to send the invoice and, once it's paid, what it pays for.

How long we keep it

• The licence record for as long as the licence exists, which is indefinitely, because the licence does not expire. After a refund the record stays, marked refunded, so that the refunded copy stops and the same purchase cannot be refunded twice.
• Your email address for as long as the licence record does, and on Polyglyph Analytica's customer list, as a yes to its news, until you unsubscribe. An unsubscribed address stays on the list marked as such, so that a payment that goes through later can't put you back on it without you knowing.
• The relay link code for as long as the licence.
• Payment records. Stripe keeps payment records, and we keep invoices, for as long as tax law requires.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to erase it. Write to hello@polyglyphanalytica.com from the address you bought with, or with the receipt we emailed you. We answer within a month.

Erasing everything has a cost. The licence record is the licence: without it your copy cannot be checked, moved or recovered, so erasing it ends the licence. We say so before we do it, and we do it when you confirm. Erasing your email address alone, and turning off news from Polyglyph Analytica, does not touch the licence.

When you ask us to erase your details and confirm it, we erase them from the records of every Polyglyph Analytica product you've used. We keep an invoice for as long as tax law says we must, and nothing else about you with it.

If you are in the UK or the EU you can also complain to your data protection authority. We would rather hear from you first.

Changes

If this policy changes, the date at the top changes with it. A change that would send more about you than this page says would be told to you by email before it took effect.