Privacy policy

What we collect

• Your email address, to sign you in and to show who changed or approved a model.
• Workspace members: the addresses you invite.
• Your content: process models, notes, AI interview conversations, sign-off requests, comments and approvals, including the names and addresses of the people you ask to sign off.
• Messages and registrations: what you send through the contact and registration forms (such as your name, email, organisation and message), to reply and to set up your account.
• AI usage: how much of the AI allowance you (or, in the shared demo, your browser) have used.
• Feedback: bug reports and feature requests you send from the app, with the page and model you were on and your browser type. Your workspace and the Twiggy team can see them.
• Technical data: basic server logs (such as time, address and errors) kept by our hosting provider to run and secure the service, and a record of each sign-in, demo visit and sign-off link opened (time, IP address and browser type), to keep accounts secure.

We don't use analytics, tracking or advertising, and we don't sell personal data.

How we use it

Only to provide the service: signing you in, storing and showing your models to your workspace, sending sign-in and sign-off emails, running the AI features you use, and keeping the service secure.

Who processes it for us

• Hosting and database: our cloud hosting and database providers store and serve the application and its data.
• AI: when you use AI features, the relevant model text and conversation are sent to Anthropic to generate the response.
• Email: sign-in and sign-off emails are sent through Resend.
• Payments: when you pay for a plan, Stripe handles your card details; we never see or store them, and keep only your plan and a Stripe customer reference.

These providers process data on our behalf and only to provide their service. Some may process it outside your country, with appropriate safeguards.

How long we keep it

Your content is kept until you delete it, except that free trial workspaces left unused for a long time may be removed: we will email you before that happens. Deleting a model deletes its interviews and sign-offs. You can delete a whole workspace, or your account, yourself from Plan, billing and your data in the app: it is removed at once, and from backups as they cycle out. Sign-in links expire after 15 minutes, and sessions after 30 days.

Security

Connections are encrypted, sign-in uses signed, expiring links instead of passwords, and the session cookie can't be read by page scripts.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to how it is used. Export and deletion are in the app (Plan, billing and your data); for anything else, contact us and we will respond within the time the law requires. You can also complain to your data protection authority.

Cookies

See the cookie policy.