Privacy Policy

1. Privacy Summary and Scope

This Privacy Policy explains what personal data Elaryx collects, why we use it, how LinkedIn-connected data is handled, how long data is kept, and how users can exercise privacy rights.

It applies to website visitors, trial users, paid subscribers, administrators, team members, support contacts, and people interacting with Elaryx pages, forms, products, APIs, and support channels. Third-party services may apply their own privacy terms.

2. Who We Are and Key Definitions

Elaryx is owned and operated by PINNAL SOFTWARE SOLUTIONS LLP, India. In privacy terms, Elaryx may act as a data fiduciary/controller for account and service data and as a processor/sub-processor for some team or client workspace data.

• Personal Data means information relating to an identifiable person.
• Data Principal means the individual to whom personal data relates.
• Processing means collecting, storing, using, sharing, deleting, or otherwise handling data.
• Consent means permission given for specified purposes, including LinkedIn OAuth authorisation where applicable.
• User Content, AI Input, AI Output, LinkedIn Data, OAuth Token, Usage Data, Processor, and Sub-processor have the meanings used in this policy and the Terms.

3. Data We Collect

4. LinkedIn OAuth and API Data

Elaryx accesses LinkedIn data only after user authorisation through OAuth or other approved methods. We do not collect LinkedIn passwords. Access depends on LinkedIn-approved scopes, account permissions, and user consent.

We use LinkedIn data only to provide authorised product features such as profile intelligence, content personalisation, scheduling or publishing, analytics, integration health, and support. Users can disconnect LinkedIn and request deletion. Some records may be retained for legal, tax, security, fraud prevention, dispute, backup, or compliance reasons.

5. AI Prompts, Uploaded Content, and Generated Outputs

Prompts, uploaded materials, brand instructions, drafts, images, and generated outputs may be processed by authorised AI providers and subprocessors to deliver product features. Human support access is limited to support, safety, debugging, abuse prevention, compliance, or user-authorised situations.

Do not submit unnecessary sensitive personal data, confidential client data, financial account information, health data, government IDs, passwords, API keys, or secrets unless you are authorised and the data is necessary for your use.

6. Purposes, Consent, and Withdrawal

• Account creation, authentication, security, and workspace administration.
• Subscription billing, invoices, taxes, payment status, and plan limits.
• Product personalisation, AI generation, profile intelligence, and content workflow support.
• LinkedIn-connected publishing, scheduling, analytics, and integration health.
• Customer support, product analytics, reliability, security, fraud prevention, abuse prevention, and legal compliance.
• Marketing communications where permitted, with available opt-out controls.

Where consent is required, including LinkedIn OAuth authorisation, you may withdraw consent by disconnecting integrations, changing settings, cancelling the account, or contacting support. Withdrawal may limit functionality and does not affect lawful processing already completed.

7. Sharing, Processors, and International Transfers

We do not sell personal data. We may share data with payment gateways, cloud hosting, AI model/API providers, analytics, email delivery, support tools, error monitoring, legal/accounting advisors, government authorities, or law enforcement where required.

Elaryx may use cloud, AI, analytics, and support providers outside India. Transfers are handled subject to applicable law, contractual safeguards, and any restrictions notified under Indian law.

8. Retention and Deletion

Account data is retained while the account is active and for a reasonable period after closure. Billing and tax records are retained as required by law. LinkedIn OAuth tokens are retained until disconnected, expired, or deleted as required. Drafts, content, and assets are retained until users delete them or close the account, subject to backups and lawful retention.

Backup deletion may take additional time. Logs may be retained for security, audit, support, and legal periods. Deletion requests are subject to verification and may not remove records that must be kept for tax, dispute, fraud prevention, or legal obligations.

9. User Rights and Grievance Support

India-focused privacy principles may allow users to request access or a summary of personal data, correction, completion, updating, erasure, consent withdrawal, grievance redressal, nomination where applicable, and complaint escalation where legally available.

To submit a privacy request, email support@elaryx.ai with the subject line 'Privacy or data request', your account email, request type, and verification details. We will respond within legally applicable or operationally reasonable timelines.

10. Security, Cookies, and Children

Elaryx applies practical safeguards such as HTTPS/TLS, access controls, token protection, logging, monitoring, backups, and least-privilege practices. See the Security Policy for details.

We may use necessary cookies, analytics cookies, preference cookies, and marketing cookies where implemented. Browser cookie controls may affect login and product functionality.

Elaryx is intended for business users and is not intended for children or minors. Users must be legally competent to contract or use Elaryx through an authorised organisation.

11. Changes and Contact

We may update this policy as laws, product features, AI providers, or integrations change. For privacy, deletion, LinkedIn data, or grievance questions, contact support@elaryx.ai.