Privacy policy

This policy explains what information Incbury ("we", "us") collects when you use incbury.co.uk, Incbury Chat, Incbury Code and the Incbury API (together, the "Service"), how we use it, and the choices you have. The data controller is Foundry Systems Ltd, trading as Incbury, company number 16940612, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Questions go to hello@incbury.co.uk.

What we collect

• Account details: your name, email address, password hash, two-factor settings and, if you sign in with Google or Apple, the identifier and email they share with us.
• Content: the messages you send, the responses Atom generates, files and voice notes you attach, projects, titles and anything you choose to share.
• Usage information: message counts and token usage for plan limits, feature usage, device and browser type, approximate location from IP address, and diagnostic logs.
• Apps and devices: if you allow notifications in the mobile app, a push token so we can deliver them. If you use Incbury Code, a random install identifier, your operating system, the app version and usage events.
• Connected services: if you connect a service such as Google, Microsoft, GitHub or Slack, the access it grants and the data you ask Atom to read from or send to it.
• Team information: if you join or create a team workspace, the team name, your role and invitations you send or accept.
• Payment information: if you subscribe, Stripe handles your card details and billing address and calculates the tax that applies in your country. We receive only a token, the plan, the currency, your billing country, any tax ID you add, and the billing status.
• Messages you send us: if you use a contact, report or waitlist form on this website, the details you enter and the page you sent them from.

How we use it

• To provide the Service: generate responses, store your conversations and enforce plan limits.
• To keep accounts secure: authentication, two-factor codes and passkeys, alerts about sign-ins from new devices, a record of recent security activity you can review in settings, and fraud and abuse detection, including Google reCAPTCHA on sign-up, password reset and repeated failed sign-ins.
• To communicate: transactional emails such as verification, password reset and sign-in codes.
• To bill you correctly: charge the right currency, calculate and report sales taxes such as VAT, and keep the records tax authorities require.
• To improve Atom and the product: aggregated usage analysis and review of content you report to us.
• To meet legal obligations and enforce our terms.

We do not use your conversations to train Atom, and we never sell personal data. If you report a response, we may review that conversation and use it to improve how Atom behaves. If we ever want to train on other conversations, we will ask first and it will be opt-in.

Sponsored cards on the Free plan

On the Free plan, Atom may show a clearly labelled sponsored card below a reply. Cards are sold directly through Incbury Ads; we do not use third-party ad networks, ad trackers or advertising cookies. A card is chosen from the topic of the current conversation only, unless you turn on personalized ads in Settings, in which case we also use the topics of your recent chats. We never share your conversations, name, email address or other personal data with advertisers; they see only aggregated impression and click counts. We record which card was shown and whether it was clicked, hidden or reported, so we can charge advertisers and prevent abuse. We do not show cards on paid plans, to users who have not confirmed they are 18 or over, or in conversations about health, mental health, politics, religion, sexuality, financial difficulty or legal trouble. You can hide or report any card and see why it was shown.

Legal bases

We process personal data to perform our contract with you, to pursue our legitimate interests in running and securing the Service, with your consent where we ask for it, and to comply with law.

Where your data lives

Incbury is operated from the United Kingdom. The application, the database that stores your conversations and file storage run in DigitalOcean's London data center. Atom runs on GPU servers we operate in DigitalOcean's Toronto data center in Canada, which receive the messages needed to generate each response. Canada is covered by UK adequacy regulations; other transfers outside the UK and EEA rely on the UK International Data Transfer Addendum or EU Standard Contractual Clauses.

Sub-processors

We share personal data only with processors who help us run the Service, under contracts that restrict their use of it. The current list is below; we update it here before adding a new one.

We also share content inside a team workspace with that team's administrators, send data to services you connect when you ask Atom to use them, and disclose data where the law requires. Public share links are visible to anyone with the link until you revoke them.

Data processing agreement

If your organization needs a data processing agreement, request one and we will send our standard terms.

Retention and deletion

Conversations are kept until you delete them. You can export or permanently delete any conversation from Incbury Chat, and delete your account from account settings. Backups and logs are removed on a rolling schedule after deletion. We keep billing and tax records for as long as the law requires. Contact form messages are kept for up to two years so we can follow up.

Your rights

Depending on where you live you may have rights to access, correct, delete, restrict or port your personal data, and to object to certain processing. Most of these you can exercise directly in the product; for anything else, email us. You can also complain to the UK Information Commissioner's Office or your local supervisory authority.

Cookies and analytics

Incbury Chat uses strictly necessary cookies to keep you signed in. This website sets no cookies unless you choose a language or currency, in which case it remembers that choice. We count page views with a cookieless beacon that stores no identifier and honors your browser's Do Not Track setting. Details are in our cookie notice.

Children

The Service is not intended for anyone under 13, and we do not knowingly collect their data.

Changes

We will post any changes here and update the date above. Material changes will be announced in the product. See also our terms of use.