Legal · Privacy
Privacy Policy
Last updated 3 June 2026 · Plain-language summary first, full clauses below.
1. The short version
We collect the minimum needed to run EnjinnX: account info, your brand brief inputs, the prompts you send to the engine, and standard usage telemetry. We do not sell your data. We do not use your generated themes to train third-party models. Your outputs are yours.
2. Information we collect
- Account data: email address, display name, billing details if you subscribe.
- Brief inputs: the 25-field brand DNA matrix you enter in Theme Maker, including brand name, USP, target demographic, and reference URLs.
- Engine inputs: HTML snippets you paste into HTML → Liquid, and screenshots you upload into Screenshot → Liquid (processed in-memory, not persisted).
- Telemetry:API request counts, error logs, browser/IP metadata used purely for reliability and abuse prevention.
3. How we use it
- To run the AI engine and return your themes.
- To improve reliability — error logs help us diagnose breakages.
- To prevent abuse — rate limits and fraud detection.
- To communicate about your account (security notices, billing).
We do not use your brief inputs or generated outputs to train Anthropic, OpenAI, or any other model. Your generated theme code is your IP.
4. Sub-processors
EnjinnX runs on a small, vetted stack. The processors with access to your data:
- Anthropic — your prompts are sent to Claude (Sonnet / Opus) for generation. Anthropic does not retain or train on API content by default.
- Vercel — hosts the EnjinnX application and serverless functions.
- Stripe — processes billing if you subscribe. We do not store your card details.
5. Data retention
Account data: retained while your account is active, then deleted within 90 days of closure. Engine input/output history: retained for 30 days for diagnostics, then purged. Screenshots uploaded to Screenshot → Liquid are processed in-memory and not stored.
6. Cookies
We use first-party cookies for authentication and to remember your session. We do not run advertising or cross-site tracking cookies. You can clear cookies at any time — you'll be logged out as a result.
7. Your rights (GDPR / UK GDPR / CCPA)
If you're in the UK, EU, or California, you have the right to:
- Request a copy of the data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and data.
- Object to or restrict processing.
- Lodge a complaint with your local supervisory authority.
To exercise any of these rights, email us at hello@enjinnx.com.
8. Security
Data in transit is encrypted (TLS 1.2+). API keys are stored in environment variables, never in client bundles. We treat any incident affecting your data with priority and will notify you within 72 hours of confirmed exposure.
9. Changes to this policy
Material changes to this policy will be notified via email and posted here. The "Last updated" date at the top reflects the most recent revision.
10. Contact
Privacy questions, data requests, or concerns: hello@enjinnx.com.
See also our Terms of Service and Refund Policy.