Enterall Privacy Policy

Personal Data We Collect

We collect only the data necessary to provide, secure, and improve Enterall. This may include:

• Account data: email address, user ID, and authentication metadata.
• Board content: titles, notes, shapes, comments, and images you upload or generate.
• Usage data: feature usage, performance logs, and error diagnostics.
• Device information: IP address, browser type, and device information.

If you use AI features, relevant text and images are sent to third-party AI providers to fulfill your request.

How We Use Data

• Provide core functionality such as boards, collaboration, and AI features.
• Maintain security, prevent abuse, and investigate service issues.
• Improve performance, reliability, and usability.
• Comply with legal obligations and enforce our terms.

Sharing of Data and Third Parties

We do not sell personal data. We share data only with service providers needed to operate the product, including:

• Supabase for authentication, database storage, file storage, and realtime collaboration.
• Google Gemini for AI features that process text and images you submit for generation, analysis, or editing.
• PostHog EU for pseudonymous product analytics, feature usage measurement, privacy-masked session replay, and error diagnostics. We send a pseudonymous user ID rather than your email address.
• Google Analytics for consented measurement of visits and acquisition on selected public pages.

Analytics Storage Details

The preference record is necessary to remember your choice. Analytics identifiers are used only after consent. Durations are maximums and may restart when the technology is used again. Withdrawing consent disables collection and removes analytics identifiers accessible to Enterall.

The campaign record is stored only if you allow analytics. Until then the campaign tags from the link you arrived on are held in the page for your visit and are not written to your device. Either way, if you create an account we record which campaign reached you, and the record holds no identifier and cannot follow you to other sites.

Data Retention

We retain personal data only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is kept while your account is active. Board content remains until you delete it, your account is deleted, or it is removed according to our operational retention practices.

Your Rights

If you are in the EU or another jurisdiction with similar protections, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Withdraw consent where processing is based on consent.
• Object to or request restriction of certain processing.

To exercise these rights, contact us at hello@enterall.co.

Data Deletion

You can delete board content from within the product. To request deletion of your account or other personal data, email hello@enterall.co. We may need to verify your identity before completing the request.

International Data Transfers

Your data may be processed in countries outside the EU or EEA, including by service providers that support Enterall. When this happens, we rely on appropriate safeguards such as contractual protections and provider transfer mechanisms.

Contact

If you have questions about this policy or our privacy practices, contact us at hello@enterall.co.