Privacy you can actually read.

This Privacy Policy explains how Entilio ("Entilio," "we," "us," or "our") collects, uses, shares, and protects information in connection with the Entilio application and this website (the "Service"). By using the Service you agree to this Policy.

1. Who we are

Entilio, based in Scottsdale, Arizona, USA, is the controller of the personal information described here. For any privacy question or request, contact us at privacy@entilio.com.

2. Information we collect

Information you provide.

• Account information — such as your name and email address when you create an Entilio account.
• Email account credentials — the logins for the mail accounts you connect, so the app can reach them on your behalf. These are stored encrypted and are only decrypted in memory to make a connection.
• Payment information — handled by our payment processor (Stripe). We don't receive or store your full card details; we receive limited billing status (for example, whether your subscription is active).
• Support communications — anything you send us when you contact support.

Content and relationship data.

• Your email is fetched directly from your provider and cached locally on your device. Email bodies, attachments, and drafts are not sent to or stored on our servers.
• A limited "relationship layer" syncs to your Entilio account so it follows you between devices: your entities (the people and companies you email), merges, tags, to-dos, flags, app settings, and an action log — a short note of each email you act on (its subject, sender, the action you took, and the target folder). Emails you never act on create no such record.

On-device usage signals. As you triage mail, Entilio records how you handle each sender (moves, archives, deletes, and the like) to power its suggestion engine. These behavioral signals are recorded and used locally, on your device. The resulting action log that syncs is limited to what's described above.

Diagnostics and analytics. We may collect anonymized crash reports and aggregate product-usage analytics from the app to fix problems and improve the experience. This information is de-identified and not used to build a profile of you.

This website. Our marketing website sets no tracking cookies and runs no analytics.

3. How we use information

• To provide, maintain, and secure the Service, including connecting to your mail accounts and syncing your relationship layer across devices;
• To power features you rely on, such as suggestions based on your own actions;
• To process payments and manage your subscription;
• To provide support and respond to your requests;
• To fix bugs and improve the Service using anonymized diagnostics and analytics;
• To protect against fraud, abuse, and security risks, and to comply with legal obligations.

4. Legal bases (EU/UK users)

Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of a contract (to provide the Service you sign up for); legitimate interests (to secure and improve the Service, using minimal, often anonymized data); consent (where required, which you can withdraw); and legal obligation (for example, keeping billing records).

5. How we share information

We do not sell your personal information. We share it only as follows:

• Service providers (sub-processors) who help us operate the Service — for example, Stripe for payment processing and a cloud infrastructure provider that hosts our sync backend. They may process data only on our instructions.
• Your email providers, because the app connects directly to them to send and retrieve your mail at your direction.
• Legal and safety — when required by law or to protect the rights, safety, or property of you, us, or others.
• Business transfers — if we're involved in a merger, acquisition, or sale of assets, with notice to you where required.

6. International transfers

We're based in the United States and our providers may process data there. Where we transfer personal data from the EU/UK, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

7. Data retention

We keep your account and relationship-layer data for as long as your account exists, so the Service works across your devices. You can ask us to delete it at any time (see your rights below). We may prune data from dormant or inactive accounts at our discretion, and we may retain limited information where the law requires it (for example, billing records). Email content isn't retained by us because it never reaches our servers.

8. Security

We protect your information with measures including encrypted storage of mail credentials, direct connections to your provider (no relay reading your mail), and sandboxed rendering of message content. See our Security page for details. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

9. Your rights

EU/UK (GDPR). You have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. You may also lodge a complaint with your local data-protection authority.

California (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to request deletion or correction, and to be free from discrimination for exercising your rights. We do not sell or "share" your personal information as those terms are defined under California law.

To exercise any right, email privacy@entilio.com. We'll verify and respond within the timeframes required by applicable law.

10. Children

Entilio is intended for adults (18+). We don't knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.

11. Third-party services

The Service connects to third parties you choose (your email providers) and that we use (our payment processor). Their handling of your information is governed by their own privacy policies, not this one.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we'll update the "last updated" date and, where appropriate, notify you in the app or by other means. Your continued use of the Service after changes take effect means you accept the updated Policy.

13. Contact

Questions or requests? Email privacy@entilio.com, or reach general support at support@entilio.com.