Legal

Privacy Policy

Effective May 1, 2025

1. Overview

Enla ("enla", "we", "us", or "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and the choices you have. It applies to enla.ai and all related services.

2. Information We Collect

Account information

When you sign up we collect your name, email address, and authentication credentials. If you sign in via Google OAuth, we receive the profile data you authorize.

Usage data

We log product URLs you submit, generation runs, credit usage, and feature interactions in order to operate and improve the service.

Billing data

Payments are processed by Stripe. We receive a customer ID, subscription status, and last-4 card digits. We do not store full card numbers.

Third-party connections

If you connect a Meta ad account, we receive read-only campaign data (names, metrics) solely to generate optimization context. We do not write to your ad account.

Automatically collected data

We collect standard server logs including IP address, browser type, referring URL, and pages visited. We use cookies and local storage for authentication and user preferences (theme, session).

3. How We Use Your Information

To operate, maintain, and improve Enla.
To process payments and manage your subscription.
To personalize your experience and remember your preferences.
To send transactional emails (receipts, password resets, alerts).
To detect and prevent fraud, abuse, and security incidents.
To send product updates or marketing communications — you can opt out at any time.

We do not sell your personal data to third parties. We do not use your submitted product URLs or generated outputs to train AI models without your explicit consent.

4. Data Sharing

We share data only with:

Service providers — Supabase (database and auth), Stripe (payments), Anthropic / OpenAI (AI inference), Vercel (hosting), and analytics providers operating under data processing agreements.
Legal requirements — when required by law, court order, or to protect our rights and users.
Business transfers — in connection with a merger or acquisition, with notice provided to you.

5. Data Retention

We retain your account data for as long as your account is active. Generation history and outputs are retained for 12 months by default. You may request deletion at any time. Billing records are retained as required by law.

6. Security

We use industry-standard measures including encryption in transit (TLS), encrypted storage, and access controls to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use strictly necessary cookies for authentication and session management, and preference cookies to store your theme setting. We do not use third-party advertising cookies. You can configure your browser to block cookies, but doing so may affect service functionality.

8. Your Rights

Depending on your location you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten").
Restrict or object to certain processing.
Data portability — receive your data in a machine-readable format.
Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at privacy@enla.ai. We will respond within 30 days.

9. Children

Enla is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it promptly.

10. International Transfers

Your data may be processed in countries outside your own, including the United States. We ensure appropriate safeguards are in place (such as standard contractual clauses) for any such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notice before material changes take effect. The "Effective" date at the top reflects the latest revision.

12. Contact

Questions or requests regarding your privacy? Email us at privacy@enla.ai.