What leaves your computer, and what doesn't

What stays on your computer

Your ideas and your products. Each product's brief, scouting report, requirements, check ledger, designs, proposals, the questions put to you and your answers live in that product's own folder, and the list of your products, your seat, your paired phones and your settings live in a folder called .ekadant in your home directory. The dashboard is served by your own computer to your own browser. None of it is sent to us, and there is no account with us.

The licence file inside your download carries your licence id and the address you bought with, which is one more reason to keep the download to yourself.

Your own accounts, not ours

Building a product means talking to services, and Product development does it from your machine, signed in as you. None of this passes through Polyglyph Analytica, and we cannot see it.

• Claude. Every agent runs in your own Claude session, on your own plan. What Claude reads to do the work — your idea, your code, the pages it researches — goes to Anthropic the way anything in Claude Code does, under your Claude account and Anthropic's terms.
• GitHub. Your products live in your own repositories. Claude reaches them with git and the GitHub CLI on your computer, signed in as you: it creates repositories when you ask, pushes branches, and opens issues and pull requests there. If you back up to a vault, that is a private repository you choose.
• Scheduled runs. Runs that happen while you are away are GitHub Actions workflows in your own repository, using a Claude token you create and store as that repository's secret. The token is yours; it is never sent to us.
• The web. The analyst reads public pages — competitors' changelogs and pricing, reviews, forums, job postings — through Claude's own web tools, in your session.

What reaches us

• The licence check. At most once a day, and when you ask it to, your copy asks our licence server whether this computer still holds the seat. The request carries a licence id, an installation id (a random identifier made the first time Product development runs on a computer) and the version number. Each time Product development checks its licence, it also tells our licence server whether your copy has been changed from the one we supplied: yes or no. It never sends what was changed, or any of your files. We keep the latest answer with your licence. That is the whole of it: never what you are building, never a file or a path. The same two ids are sent when your copy fetches the key that unlocks its engine, fetches the padlock certificate for the dashboard, or asks for its phone link. The licence record holds which installation has the seat, when it last checked in, and how many times the seat has moved in the last thirty days. We do not store your IP address in the licence record.
• A trial. A copy downloaded without buying gets a licence id with no name or address on it. Our server records the installation id and the day the trial started, so that reinstalling does not start the fourteen days again.
• Updates. New versions are downloaded from our server through your own download link, when your licence is entitled to them.
• The purchase. Stripe (Stripe Payments UK Ltd, with Stripe, Inc.) process the payment for us. Stripe uses your name, email address, billing address and card details to take the payment, to work out the tax (from your billing address, and, for price previews in the US and Canada or where your country isn't known, your IP address) and to check for fraud. Stripe's privacy policy covers what it holds. We use Stripe to send our invoices and take payments, by card or by bank transfer. Stripe keeps your name, email address, billing address and VAT number, and the invoices and payments, for us. For each invoice, we keep only Stripe's reference numbers, whether it is paid, and what it pays for. Your choice about news from us is kept by us, not by Stripe. You can ask Stripe about its own records of your payments. Stripe may process your data in the United States. That transfer is covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, and Stripe is certified under the EU-US, UK Extension and Swiss-US Data Privacy Frameworks. We keep the Checkout Session id and Stripe customer id Stripe gives us, your email address, and which version of the checkout wording you agreed to and when. Your email address is in the licence record so that we can send the Your Product development email with your download and refund links, to send the link again if you ask on the recovery page, to send the six-digit code that confirms moving your seat, and to answer a refund or support question.
• Update notices. When a release changes something worth telling you about, everyone who holds a paid licence gets one short email saying what changed and whether it will reach their copy. It is about a copy you own, not marketing, so it does not depend on the marketing choice below. Trial copies are not sent it.
• Marketing, only if you said yes. The box to hear from us is ours, on our own page before checkout, and starts unticked. Ticking it means you agree to hear from Polyglyph Analytica about any of its products and apps, not only Product development. It is one preference across all our products: whichever you last told us, from any of them, is the one we follow. You can withdraw at any time from the link in any of our emails, or by writing to us. Your copy in the dashboard has the same switch. Unsubscribing, or writing to us, stops marketing email from all of our products and apps. Unsubscribing changes nothing about your licence.
• Our customer list. Polyglyph Analytica keeps one customer list across all its apps, on our own servers. It holds who our customers are and what each chose about marketing. Because one person may own several of our products, we keep one record per email address: when we first saw it, your Stripe customer id, which of our products you hold, and your marketing preference with when and where you set it.
• The phone link. Reaching your dashboard from a phone goes through a relay we run, because a phone usually cannot reach a computer directly. Your computer and your phone agree a key when you pair them, and you check it by comparing six digits both screens show. After that the relay carries what passes between them without being able to read it, and keeps none of it. We hold a link code tied to your licence, and when it was last used.
• Notifications. If you let a paired phone, or the dashboard you installed, receive notifications, your computer sends them through the push service that device's browser uses (Apple's, Google's or Mozilla's). They are encrypted to a key only that device holds, so that service carries them without reading them. They do not pass through us.
• Notification emails, if you choose email for a topic. Your computer asks our licence server to send one short email to the address on your licence. It says only which product, which topic and how many things are waiting, such as "Something needs you in Product development (approvals)". It never has the details, such as what you are building. You see those when you open Product development. For these emails we keep a count of how many we sent for your licence each day, so we can stop at ten. If you use the link in one to stop a topic, we keep that choice. We keep nothing else about them.
• Email delivery. Our email is sent through ZeptoMail, a Zoho service. It handles the address and the message in order to deliver it.

This website

Google Analytics, only with your consent. When you first arrive, a notice at the foot of the page asks whether we may use analytics cookies to learn which pages help. It offers Essential only and Allow analytics. Nothing from Google Analytics is loaded until you press Allow analytics; if you choose Essential only, or nothing at all, no analytics runs. Cookie settings, at the foot of the page, asks again at any time, and saying no after a yes stops it from then on.

If you allow it, Google Analytics records which of our pages you visit, roughly where from, and what kind of device and browser you use, and sets cookies on this site to tell one visit from the next. It also records the steps you take towards buying:

• seeing the prices;
• completing a purchase;
• starting a trial or a demo.

This is recorded without your name or email. Google Analytics 4 does not store IP addresses. The site tells Google that advertising storage and ad personalisation are refused; the analytics are not used for advertising.

What your browser keeps. Apart from analytics and the currency you choose (below), the site keeps two things in your own browser. One is whether you chose light or dark. The other is your answer to the cookie notice. Neither is sent anywhere.

The price in your currency. The home page and the getting-started page ask our licence server for the price, and the server asks our store. The prices come from our own price list. The store asks Stripe Tax what tax it will add. Our licence server tells the store which country your request comes from, and the store tells Stripe. If you're in the US or Canada, or the country isn't known, your IP address is passed on instead, so Stripe can work out where you are. We don't store your IP address for this. When you buy, you go to our own store. It sends you to Stripe's checkout to pay.

To show prices in your currency, our sites use the country your connection comes from, which our hosting provider, Cloudflare, tells us. We don't store it. On a page that shows prices, you can change the currency at its foot, and your browser remembers your choice.

Nothing else. No advertising cookies and no social buttons. The typefaces come from Google Fonts, so your browser fetches them from Google. The site and the licence server are served by Cloudflare, which sees each request the way any host does.

Our store

You buy at our store. Polyglyph Analytica runs it, as it runs this site.

The store has its own cookie notice. If you press "Allow analytics" there, Google Analytics records which store pages you visit, the links you follow from them, and when you open the checkout. It's recorded without your name or email. We use it to learn which pages help people buy. Nothing is used for advertising. Your answer on this site doesn't carry over to the store. If you don't say yes there, no analytics runs on the store.

When you pay, Stripe tells the store about the payment. The store keeps a copy of what Stripe sends: what you bought, the amounts and the tax, your name, email address and billing address, and any tax number you gave. For a refund, it can also include the card's type, its last four digits and its expiry date. It never includes the full card number. The store uses it to tell Product development's licence server about your purchase, and later about a renewal or a refund. It keeps it with our purchase records.

If you ask the store for your price as a returning customer, it keeps your email address and when it last sent you the link, so it sends at most one every 15 minutes. If you open the price link, your browser keeps a cookie on the store's site for 30 days. It lets the store show your price as a returning customer. It's sent only to the store.

If you ask for an invoice, the store keeps what you typed with our sales records, to send the invoice and, once it's paid, what it pays for.

How long we keep it

• The licence record for as long as the licence exists, which is indefinitely, because the licence does not expire. The check-in keeps only the latest one. After a refund the record stays, marked refunded, so that the refunded copy stops and the same purchase cannot be refunded twice.
• A trial's start date for as long as that installation might ask again.
• Your email address for as long as the licence record does. On the customer list, an address that has said no stays marked as such.
• The phone link code for as long as the licence.
• Payment records. Stripe keeps payment records, and we keep invoices, for as long as tax law requires.

Your rights

You can ask us what we hold about you, ask us to correct it or erase it, object to its use, or withdraw a consent. Write to hello@polyglyphanalytica.com from the address you bought with, or with the receipt we emailed you. We answer within a month.

Erasing everything has a cost. The licence record is the licence: without it your copy cannot be checked, moved or recovered, so erasing it ends the licence. We say so before we do it, and we do it when you confirm. Erasing your email address alone, and taking you off the customer list, leaves the licence working, though we can then no longer send you a lost link again, or a code to confirm moving your seat.

When you ask us to erase your details and confirm it, we erase them from the records of every Polyglyph Analytica product you've used. We keep an invoice for as long as tax law says we must, and nothing else about you with it.

If you are unhappy with how we handle it you can complain to the Information Commissioner's Office (ico.org.uk) or your own data protection authority. We would rather hear from you first.

Changes

If this policy changes, the date at the top changes with it. A change that would send more about you than this page says would be told to you by email before it took effect.