Privacy Policy

We may collect:

• Account information such as name, email address, and company details.
• Payment information processed securely through Stripe. We do not store full payment card details.
• Product URLs, campaign inputs, and content submitted to our platform.
• Usage, device, and analytics information to improve our services.
• Data from advertising and storage accounts you choose to connect, such as Google Ads, Meta, Google Drive, and Shopify. For Google accounts, see the Google User Data section below.

We use information to:

• Provide and operate the Enla platform.
• Process payments and subscriptions.
• Improve platform performance and AI outputs.
• Communicate service updates and support responses.
• Prevent fraud, abuse, and unauthorized access.

We use trusted third-party providers including:

• Stripe for payment processing.
• Cloud hosting, database, and infrastructure providers.
• Third-party AI providers for generating campaign copy and images.
• Email delivery, analytics, and monitoring tools.

These providers process data on our behalf according to their own privacy policies.

What we access. When you sign in with Google we access your name, email address, and Google account identifier. When you connect a Google Ads account we access, through the Google Ads API, the Google Ads accounts your Google login can reach, your campaigns, and the ads already running in the account you select. We also store the access tokens Google issues so we can make these requests on your behalf.

How we use it. Only to provide the features you asked for: choosing which Google Ads account to publish into, showing what is already running there, and creating the campaign and ads you configure. Everything we create is created paused, so nothing serves or spends until you enable it yourself in Google Ads. We make no changes you have not requested.

Who we share, transfer, or disclose it to. We do not sell, rent, or trade Google user data, and we never share it for advertising purposes. It is disclosed only:

• To the infrastructure providers that host Enla and act solely on our instructions: Supabase (database and storage), Vercel (application hosting), and Upstash (short-lived caching). They may not use it for their own purposes.
• To an external AI assistant, if you connect one to Enla yourself. It can then see your connected Google Ads account names and launch campaigns you approve. You can disconnect it at any time in Settings.
• Where required by law, or to investigate fraud, abuse, or security threats.
• To an acquirer in a merger or sale of assets, with notice to you before your data becomes subject to a different privacy policy.

We do not send Google user data to any third-party AI or machine-learning provider.

How we protect it. Google access tokens are encrypted before storage, so they are never held in readable form. All other connection data is protected by encryption at rest and by access controls that restrict every record to the account that owns it. Data in transit is protected with TLS.

How long we keep it, and how to delete it. We keep your Google connection data while the connection is active. Open Settings → Connectors and choose Disconnect on Google Ads to delete the stored tokens and connection record immediately. To withdraw Enla's access on the Google side as well, remove it at myaccount.google.com/permissions. To delete your account and all connected platform data, email support@enla.ai from the address on your account, or see our Data Deletion Instructions.

Limited Use. Enla's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for serving advertisements, sell it or transfer it to data brokers, use it to assess credit-worthiness, or use it to develop, improve, or train generalized or non-personalized AI or machine-learning models. Humans review it only with your consent, to resolve a support request you raised, or where required for security or legal reasons.

We implement reasonable technical and organizational safeguards to protect user information. However, no internet transmission or storage system can be guaranteed completely secure.

We retain information only as long as necessary to provide services, comply with legal obligations, and resolve disputes. Connected platform data, including Google Ads connection data, is retained while the connection is active and is deleted when you disconnect the platform or delete your account. Billing records are retained for as long as tax and accounting law requires.

Depending on your location, you may have rights to access, correct, delete, or export your personal information.

For privacy-related inquiries, contact: support@enla.ai