How we handle your data
A plain-language guide · Tiếng Việt
You upload real business numbers to Superlytix. This page explains, step by step, what happens to them: where they are stored, who and what can see them, what the AI receives, how long we keep them and how you delete them. The binding texts are our Privacy Policy and Data Processing Agreement; this page explains them.
The short version
- Your files are used only to build your report. We don't sell them, share them, use them for advertising or train AI on them.
- The AI never sees your rows. It sees column names and short summaries, and you can switch even the summaries off.
- On the Free plan, nothing goes to the AI at all: everything runs on our built-in rules.
- Only your account can open your projects (plus team members you invite on Enterprise).
- Projects are deleted automatically at the end of your plan's keep period, or immediately when you delete them.
1. When you upload a file
| What happens | Details |
|---|---|
| The file travels to us | Over an encrypted HTTPS connection |
| Where it is stored | On our server at Railway, Singapore region, in a folder that belongs to your project, on encrypted disks |
| What we do with it | Read the columns, check the data, build the model and compute the preview and your downloads |
| Who can open the project | Only your account. On Enterprise, the team members you invite share your projects |
| Superlytix staff | Don't open your files, unless you ask us to for support, it's needed to investigate a security incident, or the law requires it |
2. What Specialized Super Intelligence sees (paid plans)
Some steps use Superlytix Specialized Super Intelligence, built on Anthropic's Claude AI and reached through Anthropic's business API: describing tables and columns, the AI plan, checking and adjusting metrics, suggesting visuals and writing the PDF summary.
What it receives:
- column names, types and counts (how many values, how many blanks, how many different values);
- short summaries: ranges and averages for number columns, and the values of short lists such as regions, channels or statuses;
- your business description, table descriptions, questions and requested metrics;
- for the PDF summary: the report's key figures and the findings computed from them (totals, changes and shares).
What it never receives: your rows. A spreadsheet with 50,000 orders reaches the AI as a few lines like "Sales Amount: number, 50,000 values, from 2 to 130, average 41".
Personal data: columns that look like names, phone numbers, emails, addresses, tax or ID numbers are sent as counts and a pattern only (for example "text, 400 different values, looks like a phone number"), never their values.
Your switch: on the Describe step, turn off Send value summaries to Specialized Super Intelligence and it only gets names, types and counts.
Training: under Anthropic's commercial terms, data sent through the API is not used to train their models. The AI runs in the United States.
In research: we're testing MEWA, a local AI model built by our founder, for steps that could run without sending anything to an outside provider. MEWA does not process your data today; if that changes, this page and our Privacy Policy will say so first.
3. Your downloads
| Download | What it contains | Where it lives |
|---|---|---|
| Power BI project | The model, the report and a copy of your uploaded files (in its Data folder) | On your computer once downloaded |
| Excel report | The numbers and charts of the report, as a snapshot | On your computer once downloaded |
| PDF report | Key figures, findings and charts, as a snapshot | On your computer once downloaded |
The download files on our server are deleted together with the project.
4. How long we keep it
| Data | Kept for |
|---|---|
| Projects and uploaded files, Free plan | 3 days after the last change |
| Single Use | 14 days |
| Plus | 30 days |
| Pro | 90 days |
| Enterprise | Until you delete them |
| Daily backups (encrypted, Cloudflare R2) | 14 days, then deleted |
| Your account | Until you delete it |
Deleting a project or your account removes the files from our server immediately; copies in the encrypted backups expire within 14 days.
5. Who else is involved
| Company | What for | Where | What they get |
|---|---|---|---|
| Railway | Hosting the app and your projects | Singapore | Your projects and account (stored) |
| Cloudflare | The website and encrypted backups | Global network; backups in R2 | Encrypted backup copies |
| Anthropic | The AI (paid plans with AI on) | United States | Column summaries and texts as described in section 2, never rows |
| Paddle | Payments, invoices and tax (Merchant of Record) | United Kingdom | Name, email, country, what you bought. We never see your card |
| Resend | Account emails (confirm email, password reset, invitations) | Your email address and the message | |
| Formspree | The waitlist form on the website | Your email address, if you join the waitlist |
6. Security
- HTTPS on every connection; encrypted disks and encrypted backups.
- Passwords stored only as salted PBKDF2 hashes; we can't read them.
- Sign-in sessions use secure, HTTP-only cookies.
- Each account sees only its own projects.
- If a breach affects your personal data, we notify the authority within 72 hours and tell you without undue delay.
7. What you can do, any time
- Switch off value summaries for the AI: Describe step.
- Delete a project: Home, the project's Delete button. It's gone from our server at once.
- Download all your data: Account → Download my data.
- Delete your account and everything in it: Account → Delete my account.
- Ask us anything about your data: [email protected].
8. Reviews on our website
If you leave feedback and tick "May we show…", we may show your sentence, your star rating and the name you chose on superlytix.ai, word for word. We never show your files or numbers, and the review is removed if you ask or delete your account.