Privacy Policy

Elia Research ("Elia Research," "we," "us," or "our") builds and operates websites, AI-powered products, APIs, and related online services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Services.

By using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Policy, please discontinue use of the Services.

Table of contents

1. Scope
2. Information We Collect
3. How We Use Information
4. How We Share Information
5. Cookies and Tracking Technologies
6. Data Retention
7. Data Security
8. International Data Transfers
9. Your Choices and Rights
10. Children's Privacy
11. Third-Party Services and Links
12. Changes to This Policy
13. Contact Us

1. Scope

This Privacy Policy applies to information processed by Elia Research in connection with your access to and use of the Services. Individual products may provide additional privacy notices when their data practices differ from or supplement this Policy.

This Policy does not govern information collected independently by third parties that we do not control, including external websites, applications, or services linked from the Services.

2. Information We Collect

We collect information in the following ways.

2.1 Information You Provide Directly

• Account information: Your name, email address, authentication method, and other registration or account details. We support email verification codes and Google sign-in; we do not offer password-based authentication at this time.
• Product inputs and content: Prompts, files, text, instructions, selections, feedback, and other material you submit when using a product. The exact information depends on the product and the task you ask it to perform.
• Communications: Information you provide when you request support, report a problem, respond to a survey, or otherwise contact us.
• Transaction information: If a paid product is offered, records associated with the purchase, subscription, entitlement, invoice, refund, or customer-support request. Payment card details are handled by the applicable payment provider rather than stored directly by Elia Research.

Please do not submit sensitive personal information, confidential business material, or third-party data unless it is necessary for the product you are using and you have the right to provide it.

2.2 Information Collected Automatically

• Device and usage data: IP address, browser and operating-system details, device type, language, referring page, pages viewed, timestamps, interactions, and technical identifiers.
• Analytics and product behavior: Page views, clicks, navigation paths, feature usage, authentication stages, performance measurements, web vitals, errors, console diagnostics, and similar events used to understand and improve the Services.
• Session recordings: We may record visual replays of interactions with the Services to diagnose problems and understand usability. Form inputs are masked, and we configure analytics not to record authorization headers, cookies, or network request and response bodies.
• Authentication and security records: Session cookies, verification status, login timestamps, provider identifiers, fraud-prevention signals, and logs needed to keep accounts and infrastructure secure.
• Cookies and local storage: Identifiers and preferences used to maintain sessions, remember settings, associate anonymous activity with a later account, and measure engagement.

2.3 Information from Other Sources

We may receive account information from an authentication provider you choose, such as Google. We may also receive transaction status from payment providers, delivery status from email providers, and operational or security information from our infrastructure providers.

3. How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Services.
• Create and manage accounts, authenticate users, and preserve access across products.
• Process the inputs you submit and generate the product output or action you request.
• Personalize product experiences and remember preferences.
• Deliver verification codes, transactional notices, service messages, and support responses.
• Measure adoption, product behavior, conversion, performance, and reliability.
• Debug errors, investigate incidents, prevent fraud or abuse, and protect users and infrastructure.
• Develop new products and evaluate whether existing products solve real user needs.
• Administer purchases, subscriptions, entitlements, refunds, accounting, and tax obligations when paid products are offered.
• Enforce our Terms of Service and other applicable product rules.
• Comply with legal obligations, defend legal claims, and respond to lawful requests.

We may aggregate or de-identify information so it can no longer reasonably identify you and use that information for research, analytics, and product improvement.

4. How We Share Information

We disclose information only as reasonably necessary in the following circumstances:

• Service providers: Vendors that support authentication, databases, hosting, security, email delivery, analytics, monitoring, AI processing, storage, customer support, or other operations. Current infrastructure includes Better Auth, Convex, Cloudflare, Google, and PostHog. A product may use additional providers disclosed in its own notice or interface.
• AI and processing providers: When a product requires an external model or processing service, we may send the information necessary to fulfill your request to that provider. Provider handling is subject to the applicable agreement and configuration.
• Payment providers: Providers may process payment details, billing, taxes, invoicing, refunds, and related compliance for paid products.
• Legal compliance and safety: We may disclose information when reasonably necessary to comply with law, regulation, legal process, or governmental request; enforce agreements; investigate misuse; or protect the rights, property, and safety of Elia Research, users, or the public.
• Business transfers: Information may be transferred in connection with a merger, acquisition, financing, restructuring, bankruptcy, or sale of all or part of the business, subject to applicable law and continuing privacy obligations.
• With your direction or consent: We may share information for another purpose disclosed when you ask us to do so or provide consent.

We do not sell personal information for monetary consideration.

5. Cookies and Tracking Technologies

We and our providers use cookies, SDKs, local storage, pixels, and similar technologies to operate the Services, keep sessions secure, remember preferences, associate activity with an account, measure engagement, capture errors, and improve product design.

Some cookies are necessary for authentication and core functionality. Analytics technologies may collect activity before you sign in and connect that activity to your account after you authenticate. You can configure your browser to block or delete cookies, but parts of the Services may stop working correctly. Where applicable law requires notice or consent for non-essential technologies, we will provide the appropriate controls.

6. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, fulfill the purposes described in this Policy, comply with legal and accounting obligations, resolve disputes, and enforce agreements.

Retention periods vary by data type and product. For example, account and entitlement records may be retained while an account remains active; operational logs and analytics may be retained for shorter periods; and transaction or enforcement records may be retained after account closure when required for security, fraud prevention, tax, legal, or record-keeping purposes.

When information is no longer required, we will delete, anonymize, or securely isolate it, subject to backup cycles and legal obligations.

7. Data Security

We use technical and organizational safeguards designed to protect information, including encrypted transport, access controls, secret management, environment isolation, monitoring, and review of infrastructure and code.

No system is completely secure. You are responsible for protecting access to your email account and devices because they may be used to authenticate to the Services. Please notify us promptly if you suspect unauthorized access or another security issue.

8. International Data Transfers

Elia Research and its providers may process information in the United Kingdom, United States, European Economic Area, and other jurisdictions. These locations may have data-protection laws different from those where you live.

Where required, we take steps intended to provide appropriate safeguards for cross-border processing, such as contractual protections and the use of providers that maintain recognized transfer mechanisms.

9. Your Choices and Rights

Depending on your location and applicable law, you may have rights concerning your personal information, including:

• Account controls: Access or update available account information through the applicable product or by contacting us.
• Communications: Unsubscribe from promotional messages using the instructions provided. We may still send authentication, transaction, security, and other service-related messages.
• Cookies: Control cookies and local storage through your browser, subject to the effect on core functionality.
• Access and portability: Request confirmation of processing and a copy of certain personal information.
• Correction: Ask us to correct inaccurate or incomplete information.
• Deletion: Ask us to delete your account or personal information, subject to lawful retention exceptions.
• Restriction or objection: Ask us to restrict or object to certain processing where applicable.
• Withdraw consent: Withdraw consent for processing based on consent, without affecting earlier lawful processing.
• Complaint: Contact the relevant data-protection authority if you believe your rights have been infringed.

We may need to verify your identity before completing a request. We may also decline or limit requests where permitted by law, including when a request would adversely affect another person's rights, compromise security, or conflict with a legal obligation.

10. Children's Privacy

The Services are intended for people aged 18 and older. We do not knowingly collect personal information from children under 18. If we learn that a child has provided personal information, we will take reasonable steps to delete it. Please contact us if you believe this has occurred.

11. Third-Party Services and Links

The Services may contain links to or integrations with third-party websites, applications, models, or features that Elia Research does not control. This Privacy Policy does not govern those third parties' independent practices. Review their policies before providing information directly to them.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in products, technology, providers, legal requirements, or business practices. When changes are material, we will provide notice by updating the date above, posting a notice within the Services, or using another reasonable communication method.

Your continued use of the Services after the effective date of an updated Policy means that the updated Policy will apply to your subsequent use.

13. Contact Us

For questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at contact@eliaresearch.com.

We will respond in accordance with applicable data-protection law.