Who we are
Alcy AI operates Alcy at shopalcy.com. This policy explains how we handle information when you use our apparel research service. Contact us at hello@shopalcy.com with privacy questions or requests.
Information we collect
- Account: identity and profile information supplied through WorkOS sign-in, your account identifier, and session information.
- Waitlist: the email address you give when you join the waitlist, which we use to review your request and invite you.
- Research: the product URL and any size, color, or target price you submit, together with conversation messages, preferences, saved searches and findings, source evidence, results, and run diagnostics.
- Chrome extension: the extension can read only the page you open it on, and only when you explicitly start a conversation there. It then sends the page URL and a limited snapshot of product details such as its name, description, displayed price, selected size, availability text, and image links. The snapshot includes its source and capture time. If Chrome does not allow the page to be read, Alcy sends the URL without a page snapshot. If product details are unavailable, Alcy may send a URL-only observation with its source, capture time, and a same-site canonical link when present. Opening the extension, changing tabs, and signing in do not capture page content.
- Technical information: hosting services may process your IP address and request/security logs.
- Usage analytics: PostHog processes page categories, clicks, accepted product operations, performance measurements, and browser errors. Session replay records visible text, images, form values, and interactions for internal debugging. Recordings can include account and research details shown on the page. Password fields, hidden/file inputs, and embedded pages are excluded. Console, network header, and network body recording are disabled. Analytics events use a pseudonymous account identifier.
- Messages: information you include when you contact us.
- Vendor inquiries: your name, email address, and store domain, which we save to review and respond to partnership inquiries.
Please submit public product links. Do not include passwords, payment details, private account links, or sensitive personal information.
How we use information
We use research inputs to investigate products and present findings; run records to understand errors, usage, and service quality; and technical information to operate and protect the site.
We may select completed product research to create anonymous public examples of Alcy’s work. These examples may show product and retailer links, images, prices, availability observations, seller assessments, recommendation reasons, and links Alcy de-prioritized. They do not show your account identity, conversation, freeform messages, private identifiers, or the product URL you originally submitted.
Vendor inquiry forms use Cloudflare Turnstile to help prevent automated abuse. Cloudflare processes browser and device information for this check. We do not save the challenge token with your inquiry.
Browser storage
Alcy saves your glass or opaque display preference in your browser’s local storage under alcy.material. You can remove it using your browser’s site-data settings. We use an encrypted, HTTP-only session cookie for WorkOS sign-in and tab-local session storage for product-link drafts and sign-in continuation. Clearing browser data can sign you out or remove an unsent draft. PostHog uses local storage for analytics identity and session state and to remember your analytics choice. We do not use advertising cookies. Operational research telemetry is described above.
The Chrome extension keeps its active conversation identifier in browser session storage, which clears when Chrome closes. Session storage also holds pending request keys and a persona selection seed; extension local storage records whether this browser has visited before. It does not copy the website session cookie or save an access token in extension storage. Conversations and submitted page snapshots remain with the saved research records on ShopAlcy after the browser closes and are retained under the research-record policy above.
Retention and security
Research records and support messages are kept as needed to operate, investigate, and improve the service or meet legal obligations. Provider retention is governed by the applicable provider arrangements.
PostHog session recordings are retained for 30 days.
We restrict access to stored information and use security measures appropriate to the service. No storage or transmission method is completely secure.
Your choices and requests
To request access, correction, or deletion of your information, email hello@shopalcy.com from the address you used. Depending on where you live, you may have additional rights to access, delete, correct, receive a copy of, or object to certain uses of your information, and to contact your local privacy regulator. We may need to verify your request.
You can turn off usage analytics and session replay in this browser below. We also respect Do Not Track and Global Privacy Control signals. Your choice does not affect sign-in or research. Clearing browser storage removes a saved analytics choice.
Analytics are disabled in this browser.
The service is intended for adults. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.
Changes to this policy
We will update this page when our practices change and revise the date above. Material changes will be communicated as appropriate before new uses of information take effect.