Privacy Policy

Introduction

This Privacy Policy explains how Ilisai collects, uses, and safeguards personal data when operating the Ilisai platform, our APIs, and companion marketing sites. We only gather the information that is required to deliver the service, improve reliability, and meet legal obligations in the regions where we operate.

Data We Collect

Account data

• Name, email address, organization, and locale supplied during signup.
• Billing details for paid plans, processed through PCI-compliant vendors.
• Authentication credentials stored using salted hashing algorithms.

Product telemetry

• Event metadata such as feature flags, execution time, and model usage counts.
• Error reports, processed on the basis of our legitimate interest in diagnosing faults and keeping the service reliable. Alongside the technical error details, each report includes recent in-product behavioral context: the pages you visited and the interface elements you clicked, recorded as structural identifiers. Error reports never include your identity, the content you type or upload, file names, or query parameters.
• Aggregated error rates that help us identify regressions or abusive traffic patterns.
• Device and browser data that keeps your session secure and lets us detect anomalies.
• The IP address of sign-up and sign-in requests. A completed sign-in or sign-up starts a session, and the IP of the device that started it is stored on that session record until you sign out or the session is revoked. Separately, our anti-abuse counters store the sign-up IP in pseudonymized (hashed) form only, and only for short rate-limiting windows.

Support interactions

• Messages you send to support@ilisai.com or inside the in-product messenger.
• Attachments you provide to reproduce an issue or request specific configuration changes.
• Feedback submitted inside the roadmap or beta programs.

How We Use Data

• To provide the contracted Ilisai services and tailor onboarding recommendations.
• To send operational notifications such as incident updates, billing reminders, or policy changes.
• To comply with legal requirements, defend our rights, and prevent fraud.
• To detect and prevent abusive account creation, on the basis of our legitimate interest in protecting the service.
• To improve the performance of AI workloads by analyzing anonymized, aggregated usage trends.

Data Sharing

• Infrastructure providers (Vercel, Neon, AWS, Cloudflare) receive the minimum data required to run the platform.
• Sentry, our error-monitoring processor, receives error reports carrying the behavioral context described under Product telemetry, scrubbed of identity and content before transmission.
• Payment processors receive billing data when you activate or modify a subscription.
• Professional advisors (accountants, auditors, legal counsel) may review information under strict confidentiality agreements.
• We will never sell personal data to advertisers or unrelated third parties.

International Transfers

Ilisai stores data in the European Union by default. When a customer enables regional replication we process data in the selected geography while still applying EU-grade security controls. If data moves outside of the EEA we rely on Standard Contractual Clauses and conduct transfer impact assessments.

Retention and Deletion

• Workspace content is retained for the life of the contract unless you delete it manually.
• Backups are pruned on a 35-day rolling schedule.
• Account records may be held for longer when required by tax or accounting rules.
• The hashed sign-up IPs held by our anti-abuse counters expire automatically with their short rate-limiting windows. The IP stored with a session record is deleted when you sign out or the session is revoked. Records of sessions that simply expire without a sign-out are retained until you request deletion of your account data.
• You can request deletion of personal data by contacting support@ilisai.com from a verified email address.

Your Rights

Depending on your locale you may have the right to access, correct, restrict, or object to the processing of your personal data. Submit requests through the Workspace Settings panel or by emailing support@ilisai.com. We will respond within 30 days unless the law allows an extension.

Contact

Privacy inquiries can be sent to support@ilisai.com or by mail to Ilisai, 03203 Elche, Alicante, Spain. Please specify whether you are acting as a workspace administrator or an end user so we can authenticate the request.