1. Introduction
Enny AI ("we," "us," or "our") operates the website enny.ai and provides AI agent services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. This policy also covers PostIT: Social Autopilot, Enny AI's mobile app, described in its own section below.
2. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, and timezone when you sign up for our agent services.
- Communication Data: Messages you send to your AI agent via Telegram or other messaging platforms.
- Connected Services: When you authorize third-party services (Gmail, Google Calendar, Notion), we store OAuth tokens to access those services on your behalf. We do not store your passwords.
- Usage Data: Aggregated, anonymized analytics about how you interact with your agent (e.g., message frequency, feature usage). We do not log verbatim conversation content in analytics.
- Contact Information: Name and email if you submit a contact form or lead magnet on our website.
3. How We Use Your Information
- To provide, operate, and improve our AI agent services
- To read, send, and manage email on your behalf when you connect Gmail
- To read and create calendar events when you connect Google Calendar
- To send you reminders, notifications, and agent responses via Telegram
- To respond to your inquiries and provide customer support
- To monitor service health and improve agent capabilities
4. Third-Party Services
Our AI agents integrate with third-party services at your direction. When you connect a service, we access only the data necessary to perform the tasks you request. Currently supported integrations include:
- Google Gmail: Read, send, and manage email (gmail.modify, gmail.send scopes)
- Google Calendar: Read and create calendar events (calendar scope)
- Notion: Read and write to your Notion workspace
- Telegram: Send and receive messages via your dedicated bot
- Supabase: Hosting and database
- OpenAI: Transcription, writing posts and review replies, and reading a business's website, on Enny AI's behalf
- LinkedIn, Meta (Facebook and Instagram) and Google Business Profile: The platforms a PostIT user chooses to connect, which receive the posts the user approves and report back how those posts performed; Google Business Profile also supplies the customer reviews the user replies to
You can revoke access to any connected service at any time through that service's settings (e.g., Google Account → Security → Third-party apps).
5. PostIT: Social Autopilot (mobile app)
PostIT is a phone app by Enny AI that writes social media posts for your business and publishes the ones you approve. This section explains what the app collects, why, and what happens to it.
You create an account with an email address and a password, or with Google or Apple sign-in where the app offers it. We keep your email address to sign you in and to send you the six-digit codes that confirm your address or reset your password. Your account holds everything described below, and deleting the account deletes all of it (see below).
What we collect and why
- What you tell us about your business. Your offering, location, customers, goal, seasons, contact details for calls to action, words you never use, and stories or notes you choose to keep. This is the material every post is written from. You can see and change all of it under Brain and Me in the app.
- Your voice. When you speak to the app, the recording is sent to our server, transcribed, and the audio file is deleted immediately after. We keep the transcript, because it is your own words and the app writes in your voice. Recordings are transcribed by OpenAI on our behalf.
- Your photos. Photos you add to the app are stored so the app can attach them to posts and so the platforms can fetch them when a post is published. Photos are only the ones you pick; the app never reads your camera roll on its own.
- Your website. If you give the app your business's website address, our server reads up to eight of its public pages once, keeps a short summary of what they say and the addresses of the photos they show, and proposes facts for your business profile. Nothing changes until you confirm it. The site's photos are only downloaded to your shelf when you say yes, and only the ones you say yes to. You can read the site again from the app at any time.
- Your social media accounts. When you connect LinkedIn, Facebook, Instagram or Google Business Profile, the platform gives us an access token. We store it on our server, never on your phone, and use it only to publish the posts you approve, to read how those posts performed and, for Google Business Profile, to read your reviews and send the replies you approve. You can disconnect any account in the app at any time, which deletes the token.
- Your customer reviews. If you connect a Google Business Profile, we read the reviews customers leave on it, about once an hour, so the app can show you the ones waiting for an answer and draft a reply in your own voice. A reply reaches Google only when you tap to send it, and you can change every word first. Reviews are your customers' words, not yours, so we keep them only while your account exists and use them for nothing except drafting the reply you see.
- Your posts and their numbers. We keep every post the app published and, once a night, the view, reaction and follower counts the platforms report for them, so the app can show you how each channel is doing.
What we do not do
- We do not sell your data, share it with advertisers, or use it to track you across other apps or websites.
- We do not post anything you have not approved. A swipe books a post for a slot within the next fourteen days, and you can pull it back until it goes; “Publish right now” sends it at once, with five seconds to undo.
- We do not send a reply to a review unless you tapped to send that reply.
- We do not use your business information or your customers' reviews to train AI models. Posts and review replies are written by OpenAI's API under terms that do not permit training on your data.
Who handles your data
Your data is stored with Supabase (hosting, database and sign-in) and processed by OpenAI (transcription, writing posts and review replies, and reading your website). Publishing and metrics go to the platform you connected: LinkedIn, Meta (Facebook and Instagram) or Google, and Google also sends us the reviews you answer.
Retention and deletion
Your data is kept while you use the app. Disconnecting a social account deletes its token at once. To delete everything, email farlen@enny.ai; we remove your data within 30 days. Posts already published stay on the platform you published them to.
Your rights
If you are in the European Union or the United Kingdom, you can ask for a copy of your data, correct it, or have it deleted, and you can complain to your data protection authority. If you are in California, the same rights apply under the CCPA. Email farlen@enny.ai for any of these.
Children
PostIT is for businesses and is not directed at children under 16.
6. Data Storage and Security
Your data is stored on secure, access-controlled infrastructure. OAuth tokens are stored locally on our servers and are never exposed to third parties. We use encryption in transit (HTTPS/TLS) for all communications. Access to user data is restricted to authorized personnel only.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your data, including stored OAuth tokens and conversation history, within 30 days.
8. Your Rights
- Request access to your personal data
- Request correction or deletion of your data
- Revoke access to connected third-party services at any time
- Opt out of non-essential communications
9. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active users of material changes via their connected messaging platform.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us at: farlen@enny.ai