Privacy Policy

Who we are

Eishly is operated by GEM JC LLC, a limited liability company registered in Wyoming, United States (Cheyenne; EIN 32-0865553). Our Information Officer is Ethan. See the contact page for how to reach us.

Your quote is never stored

The text of the quote you paste, or the file you upload, is held only in memory for as long as it takes to generate your report, then discarded. We never write it to our database or our logs. Only the report generated from it is kept (see below). A quote can contain personal information, such as your name or address, or the supplier's. The report can repeat short parts of the quote, such as a line item it is pointing out.

To generate a real report, the quote text is sent to our AI provider, Anthropic, for that one purpose. When real analysis is not switched on, Eishly produces a clearly labelled demo report and sends nothing to Anthropic.

What we process, what we keep, and for how long

• Your quote: processed to generate the report and never stored.
• Your report (summary, flags, questions) and its status: stored, linked to an anonymous session id, and expires 30 days after it was last changed.
• The anonymous session id: a cookie set in your browser the first time you visit, so you can see your own past reports on /history. It lasts 30 days and identifies only your browser, not you.
• An email address, only if you choose to add one on /history, and your marketing-email choice if you make one: stored with your session and expire 30 days after they were last changed.
• Negotiation and outcome notes, only if you log them (for example the totals you type in): stored with your session and expire 30 days after they were last changed.
• Share links, only if you create one: a read-only copy of that report is stored and expires 30 days after the link was created, after which the link stops working.
• Your IP address: used to limit how many checks one connection can run, so the service stays available and free. It is kept only as the key of a usage counter, which expires at the end of its time window (at most 24 hours).

Expired data can no longer be read, and a daily clean-up deletes it from the database. Stored data is held in a database run for us by Supabase. Anthropic and Supabase may process data outside South Africa.

Sharing

We do not sell your information. If you choose to create a "Share report" link for a report, that link is an unauthenticated, unguessable web address. Anyone who has it (not just you) can view a read-only copy of that report, so only share it with people you intend to.

Marketing emails

On /history you can optionally tick a box to say "email me tips + other Optimised AI tools I might find useful." It is unticked unless you tick it, and you can turn it off again at any time from the same page. We store only your choice, when you made it, and which version of this wording you saw. Nothing is actually emailed yet, and this consent is never used to share your details with another product. If that changes in future, this policy will be updated first.

Price-benchmark research (opt-in)

Some reports may offer an unticked checkbox inviting you to contribute one anonymised data point toward a future South African price-benchmark database: a trade (e.g. "Plumbing"), a line-item category picked from a fixed list (e.g. "Callout fee"), a suburb or area you type in yourself (it asks for this, not your street address), and a Rand amount. It does not ask for your name, the supplier's name or a phone number. A contribution is never linked to your session id, your report, or the quote text you submitted, so there is nothing that connects it back to you, and it is kept without an expiry date as anonymous research data. To say no, simply don't tick the box. It is off by default, and on most deployments the option isn't shown at all.

Your rights under POPIA

You have the right to ask what information we hold about you, to have it corrected, and to object to or request deletion of its processing. Contact our Information Officer through the contact page. Because Eishly has no accounts, what we hold is tied to your browser's session cookie: clearing your cookies stops anyone reaching it, and it is deleted on the schedule above.

Security

We use reasonable technical measures to protect information in transit and while it's being processed, though no method of transmission or storage is completely secure.

Changes to this policy

We may update this policy as Eishly changes. Check back here for the latest version.