Privacy policy

Last updated: 6 November 2026

This Privacy Policy explains how Holistics Software Pte Ltd and its affiliates ("Holistics", "we", "us" or "our") collect, use, share, and protect personal information in connection with anfra. It covers:

• the anfra websites, such as anfra.ai and these docs ("Sites")
• anfra Cloud, the hosted anfra service, and its web app, APIs, MCP server, and connectors ("anfra Cloud")
• the open-source anfra software, such as the anfra command-line tool, anfra serve, the SDK, and the skills ("anfra Core"), to the extent it sends anything to us
• our support, sales, marketing, and events for anfra.

"Personal information" means any information about an identified or identifiable person. Words such as "Customer" and "Customer Data" have the meanings given in our Terms of service.

Our roleCopy Anchor Link

• Controller. We decide how and why we use personal information about our Site visitors, account holders, Users, prospects, and contacts. This Policy describes that use.
• Processor. When our customers connect their data warehouses or publish project content to anfra Cloud, that Customer Data may include personal information about other people, such as the customer's own customers or employees. We process it only on the customer's behalf and under its instructions. The customer is responsible for its own privacy notices and for having a lawful basis for that processing. If your information is in a customer's data, please contact that customer first.

anfra Core runs on your machineCopy Anchor Link

When you run anfra Core yourself, your project, your warehouse credentials, and your data stay on the machines you control, unless you choose to publish them to anfra Cloud or connect them to another service.

anfra Core may contact Holistics or third-party services, for example to check for updates, to download releases, or, where enabled, to send usage or diagnostic information. Any personal information it sends to us is covered by this Policy. Third-party services, such as GitHub, handle your information under their own privacy statements.

Information we collectCopy Anchor Link

Information you give usCopy Anchor Link

• Account information: your name, email address, organization name, and role when you sign up for anfra Cloud or are invited to an organization. If you sign in with Google or GitHub, we receive basic profile information from that provider, such as your name, email address, and profile picture. We do not receive your password for those providers.
• Contact information: your name, work email, company, job title, and country when you join a waitlist, request a demo, sign up for updates, or contact us.
• Billing information: for paid plans, billing contact and company details. Card details are collected and processed by our payment processor. We do not store full card numbers.
• Support and communications: what you send us in support requests, emails, chat, community forums, surveys, and shared channels such as Slack Connect, including any files or screenshots you attach. We may record and transcribe calls and meetings with customers and prospects, with notice, to help our teams follow up and improve anfra.

Information collected automaticallyCopy Anchor Link

• Site usage: when you visit the Sites, we and our analytics providers, such as Google Analytics, use cookies and similar technologies to collect information such as pages viewed, links clicked, referring page, browser and device type, approximate location derived from IP address, and time of visit.
• Service usage and logs: when you use anfra Cloud, we collect information about how it is used and how it performs. This includes sign-in events, IP address, browser and device details, actions taken, features used, query and job records (such as which dataset and query ran, when, by whom, how long it took, and whether it failed), API and MCP requests, and error reports. We use this to run, secure, and improve the Service, and to keep audit logs for your organization.
• Email engagement: when you receive our emails, we may learn whether you opened them or clicked a link.

Information from third partiesCopy Anchor Link

• Sign-in providers such as Google and GitHub, as described above.
• Business contact and marketing sources, such as event organizers, partners, public professional profiles, and advertising platforms, which may tell us that you engaged with our ads or content.

Customer Data in anfra CloudCopy Anchor Link

anfra is built so that your data stays in your warehouse:

• Warehouse data. anfra Cloud queries your warehouse when you, your Users, or your AI Assistants run a query, and returns the results. We do not copy or store your warehouse. Query results may be held for a limited time where a feature needs it, for example to complete a long-running query or to produce an export you asked for.
• Credentials. We store the credentials you provide for your data sources in encrypted form, and use them only to run your queries.
• Project content. We store the models, datasets, apps, configuration, and repository history you publish, so the Service can compile and serve them.

We use Customer Data only to provide, secure, and support the Service for that customer. We do not sell Customer Data, use it for advertising, or use it to train AI or machine-learning models.

AI Assistants you connectCopy Anchor Link

anfra does not include its own AI model. If you connect an AI Assistant, such as Claude, ChatGPT, Codex, or Cursor, to anfra through the skills, the MCP server, or a connector, that assistant can read the models, metadata, and query results that your access allows. The AI provider receives this information under your own agreement with it, and its privacy policy applies. Holistics does not control how AI providers handle that information. Review their terms and settings before you connect an assistant to data that includes personal information.

How we use personal informationCopy Anchor Link

We use personal information to:

• provide, operate, and maintain the Sites and anfra Cloud, including creating accounts, signing you in, and running your organization's queries and apps
• secure the Service, detect and prevent fraud, abuse, and security incidents, and enforce our Terms
• respond to requests and provide support
• send service messages, such as sign-in codes, invitations, security alerts, billing notices, and changes to our terms
• understand how anfra is used, fix problems, and develop and improve our products
• send product updates, newsletters, event invitations, and other marketing, where the law allows, which you can opt out of at any time
• measure and improve our marketing and advertising
• comply with legal obligations, resolve disputes, and protect our rights and the rights of others.

We may use AI tools from service providers to help summarize and analyze our own communications with you, such as support tickets and call notes. We do not allow those providers to train their models on that information. This does not apply to Customer Data, which we handle only as described above.

Legal basesCopy Anchor Link

Where laws such as the GDPR or UK GDPR apply, we rely on these legal bases:

• Contract: to provide the Service you signed up for.
• Legitimate interests: to secure, support, understand, and improve anfra, and to market it to business contacts, where those interests are not overridden by your rights.
• Consent: for non-essential cookies and certain marketing, where the law requires consent. You can withdraw consent at any time.
• Legal obligation: to meet tax, accounting, and other legal requirements.

How we share personal informationCopy Anchor Link

We do not sell personal information. We share it only as follows:

• Service providers that help us run anfra and our business, under contracts that limit their use of the information to providing services to us. These include providers of cloud hosting and storage, email delivery, sign-in, analytics, customer support, CRM, payment processing, collaboration and meeting tools, and AI tools for analyzing our own communications.
• Your organization. If you use anfra Cloud as a member of an organization, the organization's administrators can see your account details and activity in that organization, such as audit logs.
• Affiliates of Holistics, for the purposes in this Policy.
• Legal and safety reasons, where we believe in good faith that disclosure is required by law, court order, or a public authority, or is needed to protect the rights, property, or safety of anyone.
• Business transfers, such as a merger, acquisition, or sale of assets, subject to this Policy.
• With your direction or consent, for example when you connect an AI Assistant or another third-party service.

CookiesCopy Anchor Link

We use cookies and similar technologies on the Sites and in anfra Cloud:

• Essential cookies keep you signed in, keep the Service secure, and remember your settings. The Service does not work without them.
• Analytics and marketing cookies help us understand how the Sites are used and measure our campaigns.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google's browser add-on. Where the law requires, we ask for your consent before we set non-essential cookies. Some browsers send "Do Not Track" signals. Because there is no common standard for them, we do not respond to them.

International transfersCopy Anchor Link

Your personal information may be stored in Singapore, the United States, where our employees reside, or transferred to other countries where the companies we hire to help us run our business are located. Those countries may not have the same data protection laws as the country in which you first provided the information. When we transfer your personal information, we will protect it as described in this Policy.

anfra Cloud runs on third-party cloud infrastructure. Where the Service lets an organization pick a region, we keep that organization's project content, credentials, and account records in that region.

SecurityCopy Anchor Link

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. Examples include encryption in transit, encryption of stored credentials, access controls, and logging. No system is completely secure, and we cannot guarantee the security of your information.

RetentionCopy Anchor Link

We keep personal information only as long as we need it for the purposes in this Policy, or as the law requires. For example:

• We keep account information while your account is active.
• After an anfra Cloud account or subscription ends, we may keep its Customer Data for up to 180 days so it can be returned or exported, and then delete it, as described in our Terms.
• We keep some records, such as billing and legal records, for as long as the law requires.

Backups are deleted on their normal cycle. When we no longer need personal information, we delete it or make it anonymous.

Your rights and choicesCopy Anchor Link

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it
• correct information that is wrong or incomplete
• delete your information
• object to or restrict certain uses, including direct marketing
• receive your information in a portable format
• withdraw consent where we rely on it
• not be treated differently for using these rights.

To use any of these rights, email [email protected]. We will verify your identity before we act on a request, and respond within the time the law requires. You can update some account details yourself in anfra Cloud. You can unsubscribe from marketing emails at any time with the link in each email. We will still send service messages while you have an account.

If you are in the European Economic Area or the United Kingdom and you are not satisfied with our response, you can complain to your local data protection authority.

ChildrenCopy Anchor Link

anfra is a business product. It is not directed to anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact [email protected] and we will delete it.

Changes to this PolicyCopy Anchor Link

We may update this Policy as anfra and the law change. We will post the updated Policy on this page and change the "Last updated" date. If a change is material, we will tell account holders by email or in the product before it takes effect.

Contact usCopy Anchor Link

If you have questions or requests about this Policy or your personal information, contact:

Holistics Software Pte Ltd
14 Robinson Road, Far East Finance Building, #08-01A, Singapore 048545
Email: [email protected]