STRANGE MATERIALS

Privacy Policy

Last updated: 6 July 2026

What we collect

• Details you give us: your name, email, company, phone, and the description of your business and the problem you want help with.
• Your conversation with our AI assistant (text and, if you use voice mode, your spoken audio), and any files or documents you choose to upload.
• If your email address belongs to a business domain, a copy of the public pages of that website, fetched so the assistant arrives prepared (see "Your public website" below).
• If you invite a colleague into a project as a guest, their name and email address, which you provide.
• A consent record (the wording you agreed to, the time, and your IP address) as evidence of your consent.
• Basic first-party visit counts (page viewed plus an anonymised, hashed form of the IP address) — cookie-free and not linked across other sites.

Why we use it (lawful basis)

We process this on the basis of your consent (the box you ticked) and our legitimate interest in responding to your enquiry, preparing a proposal, and keeping the service secure. We use it to understand your problem, give you an AI-assisted first assessment, prepare quotes and invoices, and stay in touch about your enquiry — including, after a signed-off scope, checking how results compare with what was modelled. We also review conversations internally — with AI assistance — to find and fix problems and improve the service; that analysis stays in our back office and follows the same erasure and retention rules as the conversation itself.

AI processing

Your messages and uploads are processed by a third-party AI model (Anthropic Claude) to generate your assessment and draft documents. If you use voice mode, your microphone audio is transcribed and replies are turned into synthetic speech by ElevenLabs — voice data is only processed when you choose voice mode. A human reviews anything commercial before it is sent to you, and no decision with legal or similarly significant effects about you is made solely by automated means. We do not use your data to train AI models. How and where we use AI, in full: AI Transparency Statement.

Your public website

Where your email domain indicates a business website, we fetch a copy of its public pages so the assistant can prepare — the same reading anyone visiting your site could do. Basis: legitimate interest. If you'd rather we didn't hold that copy, email us and we delete it.

Project guests

If you invite a colleague into a project, we use their name and email to send the invitation (which names you as the inviter) and to give them read-only access to that single project. You're responsible for having the right to share their details; they can ask us to remove them at any time, and you can revoke their access in the workspace.

When we process for you

Documents and data you provide can contain other people's personal data — your customers, your staff. For that data you are the controller and we are your processor, and our Default Data Processing Agreement applies automatically unless we have agreed a replacement with you in writing.

Who we share it with

We do not sell your data. We use a small number of processors to run the service: our hosting provider (Contabo GmbH — servers in the EU), our network security and delivery provider (Cloudflare), our email provider (Resend), the AI provider (Anthropic), the voice provider when you use voice mode (ElevenLabs), and — only if you make a card payment — our payment provider (Stripe). Each handles your data under its own agreement and only as needed to provide the service.

International transfers

Some of these providers (Anthropic, ElevenLabs, Resend, Cloudflare, Stripe) are US companies, so limited data may be transferred outside the EEA. Where that happens it is protected by appropriate safeguards — the EU–US Data Privacy Framework where the provider is certified, and/or the European Commission's Standard Contractual Clauses.

Cookies

Strictly necessary cookies only — a session cookie to keep you signed in and Cloudflare's security cookies. No advertising or tracking cookies. Details: Cookies.

How long we keep it

• Enquiries that go nowhere are anonymised after 12 months.
• Invoices and related financial records are kept for 6 years, as required by Irish Revenue.
• Consent records are kept as evidence even after other data is erased.

Your rights

You have the right to access, correct, erase, export or restrict your data, to object to processing (including the website copy described above), and to withdraw consent at any time. To exercise any of these, email [email protected] and we'll action it. You can also complain to the Irish Data Protection Commission (dataprotection.ie).

Security

The site runs over HTTPS, access to your data is restricted and protected by two-factor authentication, uploads are stored privately and screened, and AI inputs pass through prompt-injection defences. No system is perfectly secure, but we take reasonable measures to protect your information.

← Back  ·  Terms  ·  AI Transparency  ·  Cookies  ·  Default DPA