Website Privacy and Cookies Notice

Plain-English note: this notice covers this website only. If you use the Liminal app, the App Privacy Notice explains how we handle your data there - the app involves much more data (like identity verification) than this website does.

1. Summary

• Browsing this website requires no account and no personal details.
• If you use the contact form, we collect what you submit so we can reply.
• If you apply for a job, we collect your application materials to run the recruitment process.
• If you ask Nim, our AI assistant, a question on this site, what you type is sent to our AI provider to generate a reply.
• We use analytics tools like PostHog to understand how the website is used, only with your consent.
• We do not sell personal data and we do not use it for third-party advertising.

2. The Data We Collect and Why

What we collect depends entirely on what you do on the site.

• Contact form: your name, email address, and the contents of your message. We use this to respond to you and keep a record of the correspondence. Lawful basis: legitimate interests (responding to enquiries).
• Careers applications: your name, contact details, CV, and anything else you include in an application. We use this to assess your application and run our recruitment process. Lawful basis: steps prior to entering a contract (Art. 6(1)(b)) and legitimate interests.
• Nim chat: the inquiries you submit to Nim, and the responses provided. No account is required, and we do not collect your identity. To produce a reply, your current and previous messages in a session are shared with Anthropic, or such other provider of the underlying AI model as we may select from time to time. Lawful basis: legitimate interests (operating the assistant and preventing abuse).
• Analytics data: pages visited, referral source, approximate location (from IP), device and browser type, and interaction events. We use this to understand how the website performs and improve it. Lawful basis: consent (via the cookie banner). See Section 3.
• Technical logs: IP addresses and request logs processed by our hosting infrastructure for security, abuse prevention, and keeping the site running. Lawful basis: legitimate interests.

If you download the app from a link on this website, Apple and Google process your data under their own privacy policies. Once you use the app, the App Privacy Notice applies.

3. Cookies and Similar Technologies

This section doubles as our Cookie Policy.

Essential cookies: strictly necessary for the website to function and to remember your cookie choices. These don't require consent and can't be switched off.

Analytics cookies (PostHog): measure how visitors use the website so we can improve it. These are set only if you consent via the cookie banner when you first visit. You can withdraw consent at any time by emailing us, and the website works fully without them.

Important note on Nim (Anthropic): as detailed in Section 2, we store conversation logs on our own infrastructure rather than using browser-based trackers. Consequently, these records are not cookies and are not affected by your consent choices here. This processing occurs solely because you engage with the assistant. If you prefer that no such records be created, please refrain from using Nim; the remainder of this website remains fully accessible without it.

We do not use advertising or cross-site tracking cookies.

4. Who We Share Data With

A small set of service providers, acting on our instructions.

• Hosting: Vercel, which hosts the website and processes technical logs.
• Analytics: PostHog, which processes analytics events on our behalf.
• LLM/AI: Anthropic, the service powering our assistant, Nim. They process your inquiries to produce responses but do not utilize this data for training their underlying models.
• Email and support: Google Workspace, which we use to receive and respond to messages.

We may also disclose personal data to our professional advisers, to a buyer or successor in a merger, acquisition, or asset sale (in which case this notice continues to apply), and to authorities where required by law. We do not sell personal data.

5. International Transfers

Some of the providers above operate infrastructure outside the UK, including in the EEA and the United States. Where personal data is transferred outside the UK, we rely on safeguards recognised under UK GDPR: adequacy regulations where they apply, or the UK International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

Anthropic, which processes Nim chat messages, is based in the United States; PostHog stores our analytics data in the European Union.

6. Retention

• Contact form messages: 2 years from our last exchange, then deleted.
• Careers applications: 3 months after the recruitment process ends (or longer with your consent, to consider you for future roles).
• Nim chat records: Anthropic holds conversation logs for a maximum of 30 days to monitor for service abuse before permanent removal. Associated analytics entries are stored for 13 months, consistent with our standard web analytics retention policy.
• Usage monitoring: to manage rate limits, we retain daily message tallies linked to your hashed IP address for a period of 12 months.
• Analytics data: 13 months, then deleted or aggregated.
• Technical logs: up to 90 days.

7. Your Rights

Under UK GDPR you have the right to access, correct, delete, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time (including for analytics cookies). Email support@liminal.cash to exercise any right; we verify your identity and respond within one month. You can complain to the UK Information Commissioner's Office at ico.org.uk - though we'd welcome the chance to resolve your concern first.

8. Children

This website and the Liminal app are intended for adults aged 18+. We do not knowingly collect children's data through this website.

9. Changes and Contact

We update this notice when our processing changes and publish the updated version on this page with a new effective date.