Privacy Policy
Last updated: January 1, 2024
Our Privacy Commitment
At Enclose.AI, we are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and safeguard your data when you use our payment processing services.
Information We Collect
Account Information
Name, email, password, company details
Payment Data
Transaction history, amounts, customer details
Usage Data
API calls, feature usage, performance metrics
Security Data
IP addresses, device information, authentication logs
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our payment processing services
- Process transactions and send related information
- Send technical notices, updates, security alerts, and support messages
- Respond to comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions
- Comply with legal obligations and enforce our terms
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: With Stripe for payment processing, AWS for hosting, and other service providers who assist in our operations
- Legal Requirements: When required by law, subpoena, or other legal process
- Protection of Rights: To protect the rights, property, and safety of Enclose.AI, our users, or others
- Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition
- With Your Consent: With your explicit consent for any other purpose
Data Security
We implement robust security measures to protect your information:
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- PCI DSS Level 1 compliance for payment data
- Regular security audits and penetration testing
- Strict access controls and authentication requirements
- 24/7 monitoring and incident response procedures
Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- Account Data: Retained while your account is active and for 30 days after closure
- Transaction Records: Retained for 7 years for legal and tax compliance
- Communication Records: Retained for 2 years for customer service purposes
- Security Logs: Retained for 1 year for security analysis
Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal requirements
- Portability: Request your data in a structured, machine-readable format
- Opt-out: Opt out of marketing communications at any time
- Restriction: Request restriction of processing in certain circumstances
Cookies and Tracking
We use cookies and similar tracking technologies to:
- Maintain your session and authentication state
- Remember your preferences and settings
- Analyze usage patterns and improve our services
- Provide security and prevent fraud
You can control cookies through your browser settings. Note that disabling cookies may limit functionality.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission.
Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.
California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know about personal information collected, used, and disclosed
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
GDPR Rights (European Users)
If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation:
- Right to be informed about data processing
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision-making
Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide additional notice via email.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Data Protection Officer
Enclose.AI
Email: privacy@enclose.ai
Address: 548 Market St #75925
San Francisco, CA 94104
United States
For EU residents:
EU Representative: Privacy Europe GmbH
Email: eu-privacy@enclose.ai