What happens to information on this site.

This website explains AI Alchemy’s services, work, Academy, and current areas of exploration. It previously sold the Alchemist Crew Starter Kit and still delivers downloads for existing purchases. It does not use advertising trackers, visitor accounts or tracking cookies. A necessary purchase cookie connects checkout to the browser that started it. Cloudflare Web Analytics helps us understand website traffic. Separate optional first-party event counts help us understand which pages lead to enquiries and where submission fails.

The website host and your browser may still process technical requests needed to deliver pages and assets. The details available to a host depend on its infrastructure and configuration.

Your brief stays in the page while you complete it. If online submission is available and you choose “Send brief”, the website stores your name, email address, organisation, problem and optional systems information in our PostgreSQL database, then sends the enquiry to AI Alchemy through Resend, our email delivery provider. We use these details to assess and respond to your enquiry.

On compatible browsers with an on-device AI model already available, you may choose “Check my brief” for optional clarity suggestions. This check processes only the problem and relevant-details fields on your device. It does not send these fields to an AI service, save the suggestions or decide whether you can submit the form.

If you choose “Open email draft”, your browser asks your email application to create a draft addressed to AI Alchemy. If you choose “Copy brief”, your browser copies the text so you can paste it somewhere you choose.

• The website does not save your draft to browser storage. Please do not include passwords, customer records or confidential documents.
• Your email application and provider handle the draft and any email you decide to send.
• Closing or refreshing the page clears the entered brief. Submitted messages and their delivery status remain in our website database and email systems; clearing the page does not delete them.

For Alchemist Crew Starter Kit purchases made while it was on sale, Stripe Checkout collected your email address and payment details and processes the payment. Card numbers are handled by Stripe, not this website. AI Alchemy’s server reads the transaction reference, purchase email, payment status, amount and currency, and refund or dispute status so it can confirm the purchase and provide the download.

Stripe also holds the purchased product and release information, the applicable terms version, and a protected reference connecting the checkout to its starting browser. This website does not maintain a separate customer account or purchase database. Stripe retains the payment record under its own policies and applicable requirements.

A necessary cookie called alchemy_crew_checkout lasts for one hour. It contains a signed random reference and expiry, not your name, email or payment details. It connects the return from Stripe to the browser that began the purchase. It is inaccessible to page scripts, is sent over HTTPS on the public site and is not used for advertising or visit tracking.

After payment, a download link in that browser lasts for 30 minutes. If purchase email delivery is enabled, we also use Resend to send the checkout email address a purchase-delivery message containing the transaction reference and a private download link valid for 30 days from purchase. This message is for delivery, not marketing. Keep the link private: anyone holding the email link can use it while it remains valid. Expiry of a link does not end your licence to use the copy you downloaded.

Each download request checks the payment with Stripe. Refunded or disputed payments do not receive downloads. Your browser, website host, Stripe and Resend process the technical information needed to deliver these services. For a missing delivery email or download problem, contact AI Alchemy with your order reference; do not send card details.

When online submission is available, Cloudflare Turnstile checks the browser before a brief can be sent. Cloudflare processes technical information needed for that check, such as the IP address and browser signals. Our server verifies a short-lived token before contacting the email provider.

The verification request from our server contains the token, not your name, email address or brief. This security check is separate from optional event measurement. You can use direct email or copy your brief if verification is unavailable.

To limit repeated submissions, our PostgreSQL database holds security counters linked to a protected representation of your IP address. These limits expire within 24 hours. The counters contain no name, email address or brief and are not used to track visits.

If you send an email, AI Alchemy and the relevant email providers process the message and its delivery information so the conversation can be read and answered. Please include only information you are comfortable sending by email.

Questions about an email you have sent can be directed to the contact address on this page.

When enabled on our production website, Cloudflare Web Analytics measures page views, traffic sources and page performance. It processes page paths, referrer paths and technical browser information to provide website statistics. It does not use analytics cookies, browser storage or persistent visitor fingerprints.

We honour Do Not Track and Global Privacy Control before loading the analytics script. Analytics does not load on checkout and download documents, and purchase links open a new page so existing analytics stops before checkout. The Cloudflare beacon removes query strings and fragments from reported page and referrer URLs. We do not send contact form contents or custom events to Cloudflare Web Analytics. Hosting and Cloudflare security logs are separate from these analytics controls.

When event measurement is enabled, the website records a fixed page category and actions such as opening contact, starting a brief, using an email or copy option, and whether the email provider accepted or failed a submission. These are event counts, not a record of individual visitor journeys.

Event payloads contain no names, email addresses, brief text, full URLs, query strings, IP addresses, cookies or visitor identifiers. The website honours Do Not Track and Global Privacy Control signals for this optional measurement. A host may separately retain normal request logs, including technical connection information.

Temporary server-memory limits also protect event collection from excessive requests. These are separate from the private submission-limit store and are not included in event payloads or used to connect visits.

Server security logs record request categories, processing time, outcomes and submission-limit failures. They may include a daily protected representation of a client IP address, a broad traffic-source category and any recognised crawler name claimed by the browser. A claimed name does not verify who operates the request. These records help us detect abuse and investigate service problems.

Our application security records exclude names, email addresses, brief text, raw IP addresses, full URLs, query strings, raw browser headers and provider response contents. The protected client reference can connect security events within one day and changes daily. Operational monitoring is separate from the optional website event counts and their Do Not Track and Global Privacy Control settings.

Application records are held in restricted, rotated server logs. Cloudflare and the hosting provider may separately process connection information under their own policies. Log rotation and configured retention rules govern how long those records are kept.

Website, payment and email providers may process enquiry, purchase and delivery information outside Australia. The contact form and email are separate from the systems we build for clients; please do not send project data through them.

Bespoke systems are built in the client’s own Microsoft, AWS or Google tenant. Project data stays inside that cloud boundary and is never used to train a model.

Contact AI Alchemy to ask about information you have sent, request a correction or deletion, or raise a privacy concern. We will review the request and explain any information we need to retain. Please use email for your initial enquiry and include only the detail needed to identify the conversation.

This website may link to other websites or services. Those services set their own privacy practices, and their policies apply when you visit them.

This page describes the public website as of 17 September 2026.

For questions about this page or information you have sent to AI Alchemy, use the contact details below.