November 20, 2025
Privacy Policy
Details about the personal data Ilisai processes, why we collect it, and how to exercise your rights.
Introduction
This Privacy Policy explains how Ilisai collects, uses, and safeguards personal data when operating the Ilisai platform, our APIs, and companion marketing sites. We only gather the information that is required to deliver the service, improve reliability, and meet legal obligations in the regions where we operate.
Data We Collect
Account data
- Name, email address, organization, and locale supplied during signup.
- Billing details for paid plans, processed through PCI-compliant vendors.
- Authentication credentials stored using salted hashing algorithms.
Product telemetry
- Event metadata such as feature flags, execution time, and model usage counts.
- Aggregated error rates that help us identify regressions or abusive traffic patterns.
- Device and browser data that keeps your session secure and lets us detect anomalies.
Support interactions
- Messages you send to support@ilisai.com or inside the in-product messenger.
- Attachments you provide to reproduce an issue or request specific configuration changes.
- Feedback submitted inside the roadmap or beta programs.
How We Use Data
- To provide the contracted Ilisai services and tailor onboarding recommendations.
- To send operational notifications such as incident updates, billing reminders, or policy changes.
- To comply with legal requirements, defend our rights, and prevent fraud.
- To improve the performance of AI workloads by analyzing anonymized, aggregated usage trends.
Data Sharing
- Infrastructure providers (Vercel, Neon, AWS, Cloudflare) receive the minimum data required to run the platform.
- Payment processors receive billing data when you activate or modify a subscription.
- Professional advisors (accountants, auditors, legal counsel) may review information under strict confidentiality agreements.
- We will never sell personal data to advertisers or unrelated third parties.
International Transfers
Ilisai stores data in the European Union by default. When a customer enables regional replication we process data in the selected geography while still applying EU-grade security controls. If data moves outside of the EEA we rely on Standard Contractual Clauses and conduct transfer impact assessments.
Retention and Deletion
- Workspace content is retained for the life of the contract unless you delete it manually.
- Backups are pruned on a 35-day rolling schedule.
- Account records may be held for longer when required by tax or accounting rules.
- You can request deletion of personal data by contacting support@ilisai.com from a verified email address.
Your Rights
Depending on your locale you may have the right to access, correct, restrict, or object to the processing of your personal data. Submit requests through the Workspace Settings panel or by emailing support@ilisai.com. We will respond within 30 days unless the law allows an extension.
Contact
Privacy inquiries can be sent to support@ilisai.com or by mail to Ilisai, 03203 Elche, Alicante, Spain. Please specify whether you are acting as a workspace administrator or an end user so we can authenticate the request.