EFTA Investigation Platform

Privacy Policy

Last updated: January 2025

1. Introduction

This Privacy Policy describes how Cyclops Digital LLC ("we," "us," or "our") collects, uses, and protects information when you use the EFTA Investigation Platform ("Platform"). We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

Account Information

When your account is created, we collect your email address and authentication credentials. Accounts are created by administrators — there is no self-registration.

Usage Data

We automatically collect information about your use of the Platform, including: pages visited, search queries, documents viewed, features used, timestamps of activity, and IP addresses. This data is used for security monitoring and platform improvement.

Research Activity

Interactions with the AI research assistant (Detective) are logged, including queries, conversations, and suggested actions. This data is stored to maintain conversation history and improve research capabilities.

3. How We Use Your Information

  • Authenticating your identity and managing access
  • Providing and improving Platform functionality
  • Maintaining security and detecting unauthorized access
  • Preserving research session history
  • Generating anonymized usage analytics

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data may be shared only in the following circumstances:

  • Service providers: We use Supabase for database and authentication services, and Cloudflare for document storage and delivery. These providers process data on our behalf under their respective privacy policies.
  • AI processing: Research assistant queries are processed through Anthropic's Claude API. Query content is sent to Anthropic for processing and is subject to Anthropic's data usage policies.
  • Legal requirements: We may disclose information if required by law, subpoena, or government request.

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase (database and authentication) and Cloudflare R2 (document storage). We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), row-level security policies, and access logging.

6. Cookies and Session Data

The Platform uses essential cookies for authentication session management only. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Your session cookie is necessary for the Platform to function and expires when you log out or after a period of inactivity.

7. Data Retention

Account information is retained for the duration of your account. Usage logs and research activity are retained for security and research continuity purposes. Upon account deletion, your personal data will be removed, though anonymized usage data may be retained.

8. Your Rights

You have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Request a copy of your data in a portable format

To exercise these rights, contact Cyclops Digital LLC.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or requests, contact Cyclops Digital LLC.