Privacy Policy

Last updated: November 4, 2024

1. Introduction

This Privacy Policy explains how Enjinia Tech S.L.U ("we," "us," or "our"), based in Spain, collects, uses, and protects your information when you use our ticket creation assistant service ("Service"). We are committed to protecting your privacy and handling your data in an open and transparent manner.

2. Information We Collect

2.1 Account Information

  • Email address (required for free and paid plans)
  • Account preferences and settings

2.2 User-Provided Content

  • Project documentation and files you upload
  • Ticket creation instructions and inputs
  • Generated tickets and related content

2.3 Usage Information

  • Service interaction data
  • Analytics data collected through Umami (privacy-compliant analytics)

3. How We Use Your Information

3.1 Service Operation

  • To provide and maintain our Service
  • To process your ticket creation requests
  • To authenticate your access
  • To send service-related communications

3.2 Document Processing

  • Documents or portions of documents you upload may be processed by OpenAI's systems alongside your ticket creation instructions to provide contextual assistance
  • This processing is temporary and used only to generate your requested tickets
  • We recommend not uploading highly sensitive business information or confidential data that you do not want processed by third-party AI systems

3.3 AI Training Data Collection (Free Plan Only)

  • Generated tickets from free plan usage are stored for future AI training purposes
  • Training will be conducted exclusively on our self-hosted infrastructure within the European Union
  • Training data never leaves our control and is not shared with third parties
  • Paid plan users' data is explicitly excluded from AI training data collection

4. Data Storage and Security

4.1 Storage Location

  • All user data is stored on servers located in the European Union
  • We use Railway for server deployment and database services

4.2 Retention Periods

  • Account information: Retained while your account is active
  • Uploaded documents: Stored until you delete them, delete the associated project, or close your account
  • Generated tickets (Free Plan): Retained for AI training purposes
  • Generated tickets (Paid Plan): Retained only while actively needed for service provision

5. Your Rights and Choices

You have the right to:

  • Access your personal data
  • Request data export in a portable format
  • Request deletion of your data
  • Object to processing of your data
  • Withdraw consent for data processing

We will process all requests within 30 days. For complex requests, we may extend this period by an additional 60 days, in which case we will notify you.

6. Document Upload Guidelines

6.1 Recommended Content

  • Product Requirements Documents (PRDs)
  • Technical Specifications
  • Design Documents
  • User Research Findings
  • Market Analysis Reports
  • Architecture Documents

6.2 Prohibited Content

  • Personal identifying information of any individuals
  • Sensitive credentials or tokens
  • Protected health information
  • Payment card information
  • Government-issued identification numbers
  • Financial records
  • Private communications
  • Source code files

6.3 User Responsibility

  • Users are responsible for ensuring uploaded content complies with applicable data protection laws
  • Users must have necessary rights and permissions to share uploaded content
  • Users should not upload confidential information that requires strict security measures

7. Third-Party Services

We use the following third-party services:

  • OpenAI: For processing ticket creation requests with document context
  • Railway: For infrastructure and database services
  • Email Service Provider: For service-related communications
  • Umami: For privacy-compliant analytics

8. Data Protection

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • File size limits (30MB per file)
  • Secure data processing environments

9. International Data Transfers

When you use our Service:

  • Your data is primarily stored and processed in the European Union
  • Some data may be processed by OpenAI (for ticket creation) in accordance with applicable data protection laws
  • We ensure appropriate safeguards are in place for any international data transfers

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: hello@enjinia.es