Privacy
What we collect, and why.
Last updated: 26 May 2026.
The short version
alchemy is anonymous by design. Your real name, organisation name, personal email, website, photo, and credentials are stored privately and are only shared with another member at the meeting itself. They never appear in browse, match previews, calendar invites, or AI prompts.
What we collect
- Account: email address + hashed password (via Supabase Auth).
- Visible profile: mission, sector, organisation type, stage, partnership types sought, what you offer, what you need, geographic reach, region. This is what other members see beside your alias.
- Hidden profile: full name, organisation name, personal email, website, profile photo URL, years in operation, credentials. These never appear in the directory.
- Google Calendar tokens (read-only free/busy + event-create scopes). Encrypted at rest. We never read event titles or attendee lists.
- Match records (who requested whom, accept/decline status), AI match scores + rationale, and meeting metadata (start time, Meet link).
- Flags submitted by you or against you.
How AI is used
We use Anthropic's Claude API to score partnership compatibility and draft the intro email's rationale paragraph. Only your visible profile fields are passed to Claude — never your real name, email, organisation, website, or photo. AI calls are logged with token counts (not content) for cost monitoring.
How we use your data
- Show your visible profile to other authenticated members.
- Score matches between you and candidate profiles.
- Find a 30-minute overlap on both calendars and create a Google Meet event when a match is mutually accepted.
- Send transactional email (account confirmation, intro emails) via Resend.
- Enforce platform safety (flagging, auto-suspension).
Who we share with
We do not sell your data. Sub-processors:
- Supabase (Postgres + Auth hosting, US/EU)
- Vercel (web hosting)
- Anthropic (AI scoring + email rationale)
- Resend (transactional email)
- Google (Calendar integration, only with your consent)
Your rights
Write to hello@theupherroom.com to access, correct, or delete your data. We will respond within 14 days.
Beta caveat
alchemy is in active beta. This policy may change as the product matures. We will email registered members when material changes are made, with at least 14 days' notice before any expanded use of data.