Privacy Policy

1. Information we collect

• Account data: name, email, password hash, profile information.
• Workspace content: business profile inputs, articles, prompts, simulation runs, feedback, edits, and any content you generate.
• Usage data: pages viewed, features used, request metadata, device and browser information.
• Acceptance records: the versions of our legal documents you have accepted, the timestamp, your IP address, and your user agent — see our Terms.
• Cookies: see our Cookie Policy.

2. How we use it

• Operate, maintain, and improve the Service.
• Authenticate you and secure your account.
• Generate AI outputs you request, using third-party AI model providers.
• Tune our generation engine to your stated preferences (workspace-scoped learning).
• Communicate service updates, billing, and legal notices.
• Comply with legal obligations and prevent abuse.

3. Workspace-scoped learning

EntityOS analyses your edits, accepted/rejected outputs, and feedback within your workspace to improve future outputs for you. We do not use your workspace content to train shared foundation models, and we do not share it with other customers, unless you explicitly opt in to broader model improvement in your workspace settings.

4. Sharing

We share personal data only with:

• Service providers that host infrastructure, send email, process payments, or provide AI inference, under contract and with appropriate safeguards.
• Authorities when required by law, valid legal process, or to protect rights, property, or safety.
• Successors in a corporate transaction (merger, acquisition, asset sale), subject to this Policy.

We do not sell personal information.

5. International transfers

We primarily process data in the United Kingdom and European Economic Area. Where required, we use appropriate safeguards such as Standard Contractual Clauses or the UK International Data Transfer Agreement.

6. Retention

We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated content at any time, subject to legal retention requirements.

7. Security

We use industry-standard technical and organisational measures (encryption in transit, scoped database access controls, audit logging) to protect your data. No system is perfectly secure.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. Contact privacy@entityos.app to exercise these rights.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We will publish a new version of this Policy when it changes, and may require re-acceptance.

11. Contact

Privacy enquiries: privacy@entityos.app.