Elicit Labs Privacy Policy

1. Information We Collect

We collect two main categories of information:

(a) Account and Service Information

When you create an account, sign up for or use the Elicit Labs API, or otherwise communicate with us, we collect:

• Name
• Email address
• IP address
• Device and browser information
• Account credentials (passwords are hashed and encrypted)

We process this information to:

• Create and maintain your account;
• Provide, secure, and improve our Services;
• Communicate with you about your account;
• Comply with our contractual and legal obligations.

Lawful basis: the processing is necessary to perform a contract with you (or the organization you represent).

(b) User Content

When you submit data, prompts, or other materials to the Elicit Labs API or SDK ("User Content"), that content may include personal information, depending on what you choose to submit.

We process and retain User Content and related metadata to:

• Operate and improve our AI memory and personalization models;
• Enhance accuracy, safety, and system performance;
• Conduct internal research and evaluation.

Lawful basis: our legitimate interest in developing and improving AI systems, balanced against your privacy rights. Where required by law, we rely on consent.

We do process personal or sensitive information unless users include it in their inputs.

2. How We Use Personal Information

We use the personal information we collect to:

• Provide and operate our Services and Website;
• Authenticate users and maintain account security;
• Monitor system performance, detect fraud, and prevent misuse;
• Improve our models and develop new features;
• Comply with applicable legal and regulatory requirements;
• Respond to inquiries, feedback, or technical support requests.

We do not sell personal information. We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law.

3. How We Share Personal Information

We share personal information only in the following circumstances:

(a) Service Providers

We use trusted cloud, hosting, analytics, and infrastructure providers (for example, to store data, operate our models, and provide support).

These providers process personal information solely on our behalf and under contractual obligations that require confidentiality and security.

(b) Legal and Compliance

We may disclose personal information if required by law or to protect the rights, safety, or property of Elicit Labs, our users, or others.

(c) Business Transfers

If we undergo a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain personal information for as long as needed:

• To provide the Services and maintain your account;
• To comply with legal or contractual obligations;
• To maintain security and audit logs;
• For model improvement, in the case of de-identified training data.

After these periods, data is deleted, anonymized, or securely archived in accordance with our retention policy.

5. Safeguards and Security

We use technical and organizational measures to protect personal information, including encryption in transit and at rest, access controls, and periodic security assessments.

However, no online service is completely secure, and we cannot guarantee absolute protection against unauthorized access.

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information;
• Restrict or object to certain types of processing;
• Withdraw consent where applicable;
• Opt out of communications or data uses not required to provide the Services.

You can submit a request by emailing privacy@elicitlabs.ai. We may verify your identity before fulfilling the request.

If you are a resident of the EEA, UK, or other jurisdiction with specific data rights, you may also contact your local data protection authority.

7. Children's Privacy

Our Services are intended for professional or enterprise use and are not directed to individuals under 18.

We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal information, we will delete it.

8. Updates to this Policy

We may update this Policy periodically to reflect changes in our practices or legal requirements.

We will post the updated version on our Website and update the "Last Updated" date above.

Your continued use of our Services after changes take effect means you accept the revised Policy.

9. Contact Us

If you have questions, concerns, or requests about this Policy or our privacy practices, please contact us at:

Email: privacy@elicitlabs.ai