Privacy Documentation

AmaZix Reporting — Privacy Notice

AmaZix Reporting — Privacy Notice for Community Members

Last updated: 4 September 2026

This notice explains how AmaZix Reporting, AmaZix's community analytics tool, processes personal data when it operates in an online community. It is provided to community members whose messages and membership activity it may process, and is written to meet our transparency obligations under Articles 13–14 of the EU General Data Protection Regulation (GDPR).

01

Who is responsible for your data

AmaZix Reporting is deployed on behalf of the project or organisation that operates the community you are in (“the Community Operator”). The Community Operator is the data controller; AmaZix acts as data processor, processing personal data (if any) only on the Community Operator's instructions. AmaZix is AmaZix Limited, Room 1601, 16th Floor, Wing On Centre, 111 Connaught Road Central, Hong Kong 999077 (UBI 68655312), contactable at amazix@amazix.com.

02

What it processes

AmaZix Reporting is read-only: it never posts messages, sends direct messages, or otherwise writes to the platform. It processes:

  • the content of messages posted in channels it has been given access to, together with the message identifier, timestamp, and any reply reference;
  • your username / user ID on the platform, and your roles within the community;
  • records of members joining or leaving the community.

It does not collect your real name, email address, postal address, or any demographic information; the only identifier it holds is your username / user ID on the platform. It does not process your online/offline status, activities, reactions, or voice activity, and it does not enumerate the full member list.

03

Why (purposes and legal basis)

The data is used to produce community analytics and reporting for the Community Operator, specifically:

  • •
    Engagement and content analysis — identifying recurring themes, sentiment, feature requests, technical discussion, and questions that received no reply, so the Community Operator can improve how it supports its community;
  • •
    Community growth reporting — using records of members joining and leaving to report net growth, churn, and retention over time.

Reporting is directed at understanding the community as a whole rather than profiling individuals. Where a report surfaces specific feedback about the Community Operator's product or service, that feedback may be attributed to the username of the member who gave it, so the Community Operator can address it or follow up.

The legal basis is the legitimate interests of the Community Operator in understanding and improving its community (Article 6(1)(f) GDPR). Your message content is not used to train or fine-tune any AI model.

04

Third-party processing

To generate analysis and reports, message content and associated usernames are sent to third-party AI providers, and generated summaries are sent to a third-party presentation service. These providers act as sub-processors under GDPR and process the data under contractual terms that exclude it from being used to train their models.

05

Retention

Because the reporting is longitudinal — clients commission analysis covering periods of twelve months and longer, including growth and retention comparisons across time — data is retained for 24 months, after which it is deleted. Data is also deleted or returned at the end of our service relationship with the Community Operator, in accordance with our agreement with them.

06

International transfers

Where personal data is transferred across borders (for example to an AI or reporting sub-processor), it is covered by an appropriate GDPR transfer mechanism such as Standard Contractual Clauses.

07

Who can see the reports

Access to dashboards and reports is restricted to authorised AmaZix personnel and administrators of the specific community concerned. Reports are not published or shared with other clients or third parties.

08

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. Because the Community Operator is normally the controller, please direct requests to them; AmaZix will assist them in responding. You may also contact us at amazix@amazix.com. You also have the right to lodge a complaint with a data protection supervisory authority.

09

Security

We protect this data with encryption at rest, access controls, and secure infrastructure.

10

Changes

We may update this notice; the current version is always available at https://amazix.ai/reporting-privacy.