Privacy Policy

Who we are

AATTRL ("we", "us") operates the Enaivu website and application. Contact details are on the contact page.

What this policy covers

This policy explains what personal data we collect when you visit the website or use the application, why we collect it, how long we keep it, and the choices you have.

Data we collect on the website

• Contact form submissions. Your name, email address, company (optional), the reason for contacting us and your message. We use this to respond to you and to keep a record of the conversation.
• Website analytics. We use privacy-respecting, cookieless analytics to understand which pages are visited and which actions are taken (for example, clicking a call-to-action). This data is aggregated and does not identify you.
• Server logs. Standard request logs (IP address, user agent, requested URL, timestamp) are retained for a short period for security and troubleshooting.

We do not use advertising trackers on the website.

Data we process in the application

When you create a workspace, we process:

• Account data: your name, email address and authentication details.
• Workspace data: the customers, projects, tasks, documents, quotations and invoices you and your team enter. This is your data; we process it only to provide the service.
• Usage and diagnostic data: events needed to operate, secure and improve the service, such as sign-ins, errors and feature usage.

AI features

AI features in the application work from the records in your workspace. Requests and the relevant records are sent to our AI model provider to generate a response. We will name the provider on the security page and keep it current. Workspace data is not used to train models.

Payments

Subscription payments are processed by a third-party payment provider. We do not store card numbers. The provider's handling of your payment data is governed by its own privacy policy.

Legal bases

Where the GDPR or similar laws apply, we rely on: performance of a contract (providing the service), legitimate interests (securing and improving the service, responding to inquiries), consent (where we ask for it, such as marketing emails), and legal obligations.

Sharing

We share personal data only with service providers that help us run the service (hosting, email delivery, payments, AI model inference, error monitoring), under contracts that restrict their use of the data, and where required by law.

Retention

Contact form submissions are retained for as long as needed to handle the inquiry and for a reasonable period afterwards. Workspace data is retained while your workspace is active and deleted after a grace period following termination, unless we are required to keep it longer.

Your rights

Depending on where you live, you may have rights to access, correct, delete, export or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, contact us.

International transfers

Our service providers may process data outside your country. Where required, we use appropriate safeguards for those transfers.

Changes

We will update this policy when our practices change and show the date of the latest change at the top of this page.