Privacy Policy

Effective date: March 30, 2026

Your privacy is important to us. This Privacy Policy explains how Encelade ("we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our platform and services.

1. Information We Collect

Information you provide

Account information: name, email address, and profile picture when you create an account.
Content: presentations, images, text, and other materials you create or upload to the Service.
Communications: messages you send to us, feedback, and support requests.
Payment information: billing details processed through our third-party payment provider. We do not store full payment card numbers.

Information collected automatically

Usage data: pages visited, features used, time spent, clicks, and interactions within the Service.
Device information: browser type, operating system, device identifiers, and screen resolution.
Log data: IP address, access times, and referring URLs.
Cookies and similar technologies: see our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service.
Process transactions and send related information.
Send you technical notices, updates, security alerts, and administrative messages.
Respond to your comments, questions, and support requests.
Monitor and analyze trends, usage, and activities to improve the user experience.
Detect, investigate, and prevent fraudulent transactions or unauthorized access.
Generate AI-powered content (presentations, text, layouts) using third-party AI services. When you use our generation features, your input (such as prompts, text, and uploaded materials) may be sent to third-party AI providers for processing. We select providers that maintain appropriate data handling and security practices. AI providers process your data solely to generate the requested output and do not use it to train their models. See our Terms of Service for more details on AI-generated content.

3. Legal Basis for Processing

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following bases:

Contract performance: processing necessary to provide the Service you signed up for, including account management, content generation, and payment processing.
Legitimate interests: processing for purposes such as improving the Service, ensuring security, preventing fraud, and conducting analytics — where these interests are not overridden by your data protection rights.
Consent: where you have given explicit consent, such as for optional analytics cookies or marketing communications. You may withdraw consent at any time.
Legal obligation: processing necessary to comply with applicable laws and regulations.

4. Sharing Your Information

We do not sell your personal information. We may share information in the following circumstances:

Service providers: with third-party vendors who perform services on our behalf (hosting, analytics, payment processing).
Legal requirements: when required by law, regulation, or legal process.
Protection of rights: to protect the rights, property, or safety of Encelade, our users, or the public.
Business transfers: in connection with a merger, acquisition, or sale of assets.
With your consent: when you direct us to share your information with third parties.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods by data category:

Account information: retained while your account is active, deleted within 30 days of account deletion.
Presentation content: retained while your account is active, deleted within 30 days of account deletion.
Server and access logs: retained for up to 90 days for security and debugging purposes.
Payment and billing records: retained for up to 10 years as required by applicable tax and accounting regulations.
Analytics data: aggregated and anonymized within 24 months of collection.
Support communications: retained for up to 3 years after your last interaction for quality and training purposes.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where longer retention is required by law or described above.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: request a copy of the personal information we hold about you.
Correction: request correction of inaccurate or incomplete information.
Deletion: request deletion of your personal information.
Portability: request a portable copy of your data in a structured, machine-readable format.
Objection: object to processing of your information in certain circumstances.

To exercise any of these rights, contact us at privacy@encelade.app.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act and the California Privacy Rights Act ("CCPA/CPRA") provide you with additional rights regarding your personal information:

Right to know: you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
Right to delete: you may request that we delete personal information we have collected from you, subject to certain exceptions.
Right to correct: you may request that we correct inaccurate personal information we maintain about you.
Right to opt out of sale or sharing: we do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, contact us at privacy@encelade.app. We will verify your identity before processing your request and respond within 45 days as required by law.

9. International Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. We ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date. We encourage you to review this page periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at privacy@encelade.app.