1. Who this Policy applies to
Hemicule operates this Website and provides custom AI employees that are built around a customer's workflows and deployed on infrastructure controlled by that customer.
This Policy applies to visitors to this Website and to people who communicate with us about our services. It does not replace a customer agreement, data processing agreement, or confidentiality agreement that governs a particular engagement.
When a customer operates an AI employee in its own environment, the customer determines what business and personal information that system may process. Our responsibilities for that processing are governed by the applicable customer agreement and our instructions from the customer, not by this Website policy alone.
2. Information we collect
Information you choose to provide. When you contact us through an agreed business channel, we may receive your name, business email address, company, role, and the information you provide about your workflows, requirements, or project. If you share sample documents or data with us for an audit or proof of concept, we handle them according to the arrangements agreed for that engagement.
Technical and usage information. Like most websites, our hosting and security infrastructure may automatically record information such as your IP address, browser and device type, requested pages, referring page, timestamps, and diagnostic or security events.
Information from others. We may receive business contact details from a colleague, partner, or other person who asks us to discuss a potential project with you. We use that information only for relevant business communication or as otherwise permitted by law.
3. How we use information
We may use personal information to:
- operate, secure, maintain, and improve the Website;
- respond to inquiries and communicate about workflow audits, proofs of concept, proposals, and customer engagements;
- understand business requirements and prepare relevant examples or recommendations;
- manage supplier, partner, and customer relationships;
- protect our systems, investigate misuse, and prevent fraud or security incidents;
- comply with legal obligations and establish, exercise, or defend legal claims; and
- keep appropriate business and financial records.
We do not sell personal information collected through this Website.
4. Legal bases for processing
Where the data protection laws of the UK, EEA, or a similar jurisdiction apply, our legal basis depends on the context. We may rely on:
- Steps at your request before entering a contract or performance of a contract, when responding to a project request or providing agreed services.
- Legitimate interests in operating and securing our Website, developing relevant business relationships, and improving our services, where those interests are not overridden by your rights.
- Compliance with a legal obligation, including recordkeeping and lawful requests.
- Consent, where we specifically ask for it. You may withdraw consent at any time, without affecting processing that has already taken place.
5. When we share information
We may share limited personal information with service providers that help us operate our business, such as website hosting, infrastructure, communications, security, and professional advisers. They receive information only as appropriate for their role and are subject to applicable contractual or legal obligations.
The Website self-hosts its font files on our own infrastructure instead of loading them from a third-party font provider, so viewing a page does not send your browser to an external font service.
We may also disclose information where required by law, to protect rights and security, or in connection with a merger, financing, reorganization, or transfer of business assets, subject to appropriate confidentiality safeguards.
We do not provide customer document repositories or live business data to advertisers.
6. Cookies and similar technologies
WordPress and our hosting or security providers may use cookies or similar technologies that are necessary to deliver the Website, maintain security, remember administrative sessions, or prevent abuse. The homepage sample file picker does not itself set a tracking cookie.
If we introduce non-essential analytics or marketing technologies, we will provide any notice and choice required by applicable law and update this Policy as appropriate.
7. Retention and international processing
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to an inquiry, managing an engagement, maintaining security, resolving disputes, and meeting legal or accounting requirements. Retention periods vary with the type of information and our relationship with you. We then delete, anonymize, or securely isolate the information as appropriate.
Our service providers may process information in countries other than the country where you live or work. Where required, we use appropriate safeguards for international transfers, such as contractual protections, and take reasonable steps to protect the information involved.
Self-hosted deployment describes where a customer AI employee runs; it does not mean that every Website request or business communication is processed only in your own infrastructure.
8. Security
We use reasonable administrative, technical, and organizational measures designed to protect information appropriate to its nature and the processing involved. Customer AI employees are designed to run in environments controlled by the customer, and access, retention, and security arrangements for a particular deployment are agreed with that customer.
No website, network, or storage system can be guaranteed to be completely secure. You should avoid sending confidential, regulated, or especially sensitive information through an unapproved channel.
9. Your privacy rights
Depending on where you live and the circumstances of the processing, you may have the right to request access to, correction of, or deletion of personal information; object to or restrict certain processing; request a portable copy; or withdraw consent. You may also have the right to complain to your local data protection authority.
To make a request, contact Hemicule through the email or other business contact channel used for your inquiry, proposal, or customer engagement. We may need to verify your identity and authority before acting. We will respond within the period required by applicable law.
10. Children and updates to this Policy
This Website and our services are intended for business users and are not directed to children. We do not knowingly collect personal information from children through this Website.
We may update this Policy when our Website, providers, or practices change. The revised version will be posted on this page with a new “Last updated” date. Material changes may also be communicated by other reasonable means where required.