Privacy Policy
Version 2026-10-02 · Effective [DATE] · Draft for legal review
Superlytix.ai turns the spreadsheets you upload into Power BI reports. This policy explains what personal data we handle, why, where it goes and what you can do about it. It is written to meet Vietnam's Law on Personal Data Protection and Decree 356.
1. Who we are
Superlytix.ai is run by [COMPANY], [ADDRESS], tax code [TAX CODE]. The person responsible for personal data protection is [DPO], reachable at [EMAIL].
2. Two kinds of data, two roles
| Data | Examples | Our role |
|---|---|---|
| Your account | Name, email, password (stored only as a salted hash), plan, consent records, sign-in times | Controller: we decide how it is used |
| Your uploaded files | Sales exports, customer lists, staff names inside your spreadsheets | Processor: we process it only to build your report, on your instructions |
For uploaded files, you (or your company) are the controller. You confirm you have the right to upload the data and, where needed, the consent of the people in it. Business customers can sign our Data Processing Agreement.
3. What we use your data for
- Account data: to create and secure your account, keep your projects, apply your plan and limits, and contact you about the service. Legal basis: your consent and the contract with you.
- Uploaded files: to read the columns, check the data, build the model and preview, and generate the Power BI project you download. Nothing else.
- We do not sell personal data, do not use it for advertising, and do not train AI models on your files.
4. What the AI sees
Some steps (the plan, Check, Adjust logic) use Anthropic's Claude through its business API. The AI receives:
- column names, types and counts;
- summaries of columns: ranges and averages for numbers, the values of short lists such as regions or statuses;
- your descriptions, questions and requested metrics.
The AI never receives your rows. Columns that look like personal data (names, phone numbers, emails, addresses, tax or ID numbers) are sent as counts and patterns only, never their values. You can switch off value summaries entirely on the Describe step. Under Anthropic's commercial terms, API data is not used to train its models [lawyer: confirm against Anthropic's current terms and retention period].
5. Where your data is stored
Your files and projects are stored on [HOSTING], with encrypted disks and HTTPS on every connection. AI requests are processed by Anthropic in the United States; this transfer is covered by our cross-border transfer impact assessment.
6. How long we keep it
| Data | Kept for |
|---|---|
| Projects and uploaded files, Free plan | 3 days after the last change |
| Single Use | 14 days |
| Pro | 90 days |
| Enterprise | Until you delete them |
| Your account | Until you delete it |
| Downloaded Power BI files | Only on your computer: we do not keep a copy longer than the project |
Deleting a project or your account removes the files immediately from our servers; backups expire within [30] days.
7. Your rights
You can, at any time and free of charge:
- see and download your data: Account → Download my data;
- correct your name or email;
- delete a project, or your whole account: Account → Delete my account;
- withdraw consent, which means deleting your account;
- object or complain by writing to [EMAIL]; we answer within [72 hours / the period required by law]. You can also complain to the Ministry of Public Security, the data protection authority in Vietnam.
8. Security
Passwords are stored as salted PBKDF2 hashes. Sessions use secure, HTTP-only cookies. Each account sees only its own projects. If a breach affects your personal data, we notify the authority within 72 hours and tell affected users without undue delay.
9. Cookies
We use one necessary cookie to keep you signed in. We use no advertising or tracking cookies.
10. Children
Superlytix.ai is a business tool and is not intended for anyone under 18.
11. Changes
We will tell you by email and in the app before any material change to this policy.