Scope and who we are
This Privacy Policy explains how Elephany AI (“Elephany”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you visit our website, join our waitlist, use our dashboard or creator tools, interact with an Elephany-powered reader experience, or communicate with us.
Elephany is the controller of personal information collected directly through our website and business operations. When we process reader information through an Elephany experience on a creator’s website, the creator may also be a controller; their privacy notice applies to their own collection and use.
Information we collect
Information you provide
- contact details, such as your email address;
- the recipe or website URL you submit to our waitlist;
- account, profile, billing and organisation information if you use a creator account;
- creator content, settings and materials you connect to the Services; and
- messages, feedback and support communications.
Information collected automatically
- device, browser, operating-system and language information;
- IP address and approximate location derived from it;
- pages viewed, referring pages, interactions, timestamps and diagnostic events; and
- cookie or similar-technology identifiers, subject to your choices and applicable law.
Information from creators and partners
A creator may provide content and technical information needed to make an Elephany experience available on their website. Service providers may also give us security, delivery, analytics or payment information related to the Services they perform for us.
How we use information
We use personal information to:
- provide, personalise, maintain and secure the Services;
- review waitlist submissions and communicate about access or onboarding;
- generate and deliver answers based on creator content;
- understand usage, diagnose issues and improve product performance;
- support users, manage accounts, process payments and send service notices;
- send product or marketing updates where permitted, with an opt-out;
- prevent fraud, misuse and security incidents; and
- comply with law, enforce agreements and protect rights.
We do not use the recipe URL or email address submitted in our waitlist form to train general-purpose AI models.
Legal bases
Where data-protection law requires a legal basis, we rely on one or more of the following: performance of a contract or steps you request before a contract; our legitimate interests in operating, improving and securing the Services; your consent, including for optional analytics cookies where required; and compliance with legal obligations.
When we rely on legitimate interests, we consider the impact on your rights. You may object to certain processing as described below. You may withdraw consent at any time without affecting earlier lawful processing.
Google Analytics and cookies
We plan to use Google Analytics 4 (“Google Analytics”) to understand how visitors find and use our website. When enabled, Google Analytics may collect first-party cookie identifiers, device and browser information, IP-derived general location, pages viewed, referral source and interaction events. Google states that Google Analytics does not log or store individual IP addresses.
We will configure analytics so form-field contents, email addresses and other direct identifiers are not sent to Google Analytics. User- and event-level analytics data will be configured for retention for up to 14 months, unless a shorter period is appropriate. We do not enable Google advertising features or use analytics data for personalised ads unless this Policy and our consent choices are updated first.
Where required by law, analytics cookies will be used only after you consent. You can decline or withdraw consent through the cookie controls made available on the site, and you can block or delete cookies in your browser. Google also provides a Google Analytics opt-out browser add-on.
Learn more about how Google handles Analytics data in Google’s Analytics privacy and security information.
International transfers
Elephany and our providers may process information in India, the United States and other countries where privacy laws may differ from those in your location. Where required, we use recognised transfer safeguards, such as contractual protections, and take steps intended to ensure an appropriate level of protection.
Data retention
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy. We consider the nature and sensitivity of the information, the relationship with you, security and operational needs, and legal, accounting or reporting obligations.
Waitlist information is retained while we evaluate and offer access and for a reasonable follow-up period, unless you ask us to delete it sooner. Creator-account information is generally retained while the account is active and for a limited period afterwards for backup, dispute and legal purposes. Aggregated or de-identified information may be retained where it can no longer reasonably identify you.
Security
We use administrative, technical and organisational measures designed to protect personal information, including access controls and secure transmission where appropriate. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and notify us if you suspect unauthorised access.
Your privacy rights
Depending on where you live, you may have the right to request access, correction, deletion or a copy of personal information; restrict or object to certain processing; withdraw consent; and appeal or complain to a data-protection authority. You may also opt out of marketing at any time using the link in the message.
To make a request, email contact@elephany.ai. We may need to verify your identity and authority. You may use an authorised agent where applicable, and we will not discriminate against you for exercising a privacy right.
Children's privacy
Our business Services and waitlist are not directed to children under 16, and we do not knowingly collect personal information directly from children under 16. If you believe a child has provided information to us, contact us so we can take appropriate action.
Changes and contact
We may update this Policy as our Services or legal obligations change. We will post the revised version and update the date above. We will give additional notice where a change materially affects your privacy rights.
Privacy questions and requests may be sent to contact@elephany.ai.