Privacy Policy

1. Our promise

• We never sell, rent, or trade your data — not to advertisers, data brokers, or anyone.
• Your content is yours. The documents, workspaces, and files you create or upload are not read by us, mined, or used to train any model. We disclose them to a third party only where you direct us to — for example, by connecting an external tool or integration (see Third parties).
• The only thing we may look at is de-identified, aggregated usage metrics (e.g. which features and tools are used most) so we can improve the product. This never includes the content of your work and is never tied back to you personally.

2. What we collect

• Account details — your email address, display name, and the identifier from the Google or GitHub account you sign in with.
• Your content — the workspaces, documents, diagrams, and files you create or upload. We store it to provide the service; we do not analyze it.
• Minimal technical data — a login session cookie, and de-identified, aggregated usage counts as described above.

3. How we use it

Your account details and content are used solely to operate the service for you. Aggregated, de-identified usage metrics are used only to understand which features matter and to improve the product. That is the entire list — there is no advertising, profiling, or resale.

4. Where your data lives

Your data resides only on our own servers and our encrypted backups. We do not replicate it to third-party analytics or marketing platforms.

5. Third parties

We disclose your data to third parties only in two situations: (a) to the limited set of service providers we rely on to operate the service, listed below; and (b) at your direction — that is, wherever you instruct the service to transmit your data to a third-party tool, integration, or provider that you choose to connect. In situation (b), you authorize and direct each such transmission, and once your data leaves elodus it is handled under that recipient's terms and privacy policy, not ours. We do not control, and are not responsible for, what a third party you elect to send your data to does with it — choose the ones you trust.

Service providers we rely on, kept to the minimum needed to run the service:

• Stripe — payment processing. Card details go directly to Stripe; we never see or store your full card number.
• Google / GitHub sign-in — to authenticate your account. We request only your basic profile and verified email address.

Integrations you direct us to connect, optional and active only at your instruction:

• GitHub repositories — only if you choose to connect a repository as AI context. This is a separate, opt-in authorization granting the repo scope; we store the resulting access token (encrypted at rest) to list, clone, and pull the repositories you connect. You can disconnect any time, and revoke access from your GitHub settings.
• Overleaf — only if you connect an Overleaf project as AI context. We store the Overleaf Git token you provide (encrypted at rest) to sync that project. You can disconnect any time.
• AI providers and other tools you connect — whenever you use an AI provider or other third-party tool with elodus, the data you send to it is transmitted at your direction and handled under that provider's terms and privacy policy, not ours.

6. Retention & deletion

We keep your data only while your account is active. You can delete your account and all associated data at any time, immediately and irreversibly, from your billing settings — this is your right to erasure. Data is also deleted when a paid plan expires (see the Terms). Backups roll off on a routine cycle after deletion.

7. Your rights

You can access or delete your data at any time. For anything not covered by the self-serve tools, contact us and we'll help.

8. Cookies

We use a single, first-party session cookie to keep you logged in. We do not use third-party advertising or cross-site tracking cookies.

9. Changes & contact

If we materially change this policy we'll ask you to review and agree again. Questions about your privacy: [email protected].