Privacy Policy

Last updated: January 1, 2024

Our Privacy Commitment

At Enclose.AI, we are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and safeguard your data when you use our payment processing services.

Information We Collect

Account Information

Name, email, password, company details

Payment Data

Transaction history, amounts, customer details

Usage Data

API calls, feature usage, performance metrics

Security Data

IP addresses, device information, authentication logs

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our payment processing services
  • Process transactions and send related information
  • Send technical notices, updates, security alerts, and support messages
  • Respond to comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions
  • Comply with legal obligations and enforce our terms

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • Service Providers: With Stripe for payment processing, AWS for hosting, and other service providers who assist in our operations
  • Legal Requirements: When required by law, subpoena, or other legal process
  • Protection of Rights: To protect the rights, property, and safety of Enclose.AI, our users, or others
  • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition
  • With Your Consent: With your explicit consent for any other purpose

Data Security

We implement robust security measures to protect your information:

  • AES-256 encryption for data at rest
  • TLS 1.3 encryption for data in transit
  • PCI DSS Level 1 compliance for payment data
  • Regular security audits and penetration testing
  • Strict access controls and authentication requirements
  • 24/7 monitoring and incident response procedures

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

  • Account Data: Retained while your account is active and for 30 days after closure
  • Transaction Records: Retained for 7 years for legal and tax compliance
  • Communication Records: Retained for 2 years for customer service purposes
  • Security Logs: Retained for 1 year for security analysis

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information, subject to legal requirements
  • Portability: Request your data in a structured, machine-readable format
  • Opt-out: Opt out of marketing communications at any time
  • Restriction: Request restriction of processing in certain circumstances

Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Maintain your session and authentication state
  • Remember your preferences and settings
  • Analyze usage patterns and improve our services
  • Provide security and prevent fraud

You can control cookies through your browser settings. Note that disabling cookies may limit functionality.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know about personal information collected, used, and disclosed
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising privacy rights

GDPR Rights (European Users)

If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation:

  • Right to be informed about data processing
  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Rights related to automated decision-making

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide additional notice via email.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Data Protection Officer
Enclose.AI
Email: privacy@enclose.ai
Address: 548 Market St #75925
San Francisco, CA 94104
United States

For EU residents:
EU Representative: Privacy Europe GmbH
Email: eu-privacy@enclose.ai