Privacy Policy

Account data — name, email address, organisation name, and billing information provided during sign-up.

Document data — files you upload or receive via connected channels (email, WhatsApp, API). This includes invoices, purchase orders, contracts, and any other documents submitted for processing.

Extracted data — structured information our AI agents extract from your documents (vendor names, amounts, dates, line items).

Usage data — agent run logs, triage decisions, integration activity, and feature usage — used to improve the Service and generate your usage reports.

Technical data — IP addresses, browser type, error logs (via Sentry), and performance metrics.

• To operate and deliver the Service (document processing, agent runs, integrations).
• To send operational notifications — triage alerts, daily summaries, system status.
• To detect errors and improve reliability (error monitoring via Sentry).
• To generate your usage analytics and billing information.
• To comply with legal obligations.

We do not sell your data. We do not use your document content to train AI models that are shared with other organisations.

We share data with:

• Supabase — database and authentication infrastructure.
• Google (Gemini API) — AI model inference for document extraction and classification.
• Anthropic (Claude API) — AI model inference for complex reasoning tasks.
• SendGrid (Twilio) — transactional email delivery.
• Sentry — error monitoring and performance tracking.
• Your connected integrations — data is pushed to tools you explicitly connect (Notion, HubSpot, Odoo, etc.).

All sub-processors are bound by data processing agreements and operate under industry-standard security practices.

We retain your data for as long as your account is active. Upon termination:

• You have 30 days to export your data.
• After 30 days, your data is permanently deleted from our systems.
• Backups are purged within 90 days of account closure.

We implement industry-standard security measures including encryption at rest and in transit (TLS 1.3), row-level security on all database tables, service-role key separation (API keys never returned to browsers), and automated error monitoring.

Despite these measures, no system is completely secure. We encourage you to use strong passwords and report any suspected vulnerabilities to security@eclips.tech.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Data portability (receive your data in a machine-readable format).

To exercise any of these rights, email privacy@eclips.tech. We will respond within 30 days.

We use only essential cookies required for authentication and session management (Supabase session cookies). We do not use tracking or advertising cookies.

We will notify you of material changes to this policy via email at least 14 days before they take effect. The latest version is always available at this URL.

Questions? Email privacy@eclips.tech.