Privacy Policy

Effective: January 10, 2026
Last updated: January 10, 2026

1. Who We Are

This policy explains how ElarisLabs collects, uses, shares, and protects information across its website, applications, dashboards, APIs, and related services.

Contact: privacy@elarislabs.ai

2. What This Policy Covers

The policy covers website visitors, customers, trial users, leads, marketing contacts, business partners, and vendors. Third-party websites accessed through links are excluded.

3. Key Definitions

• Personal Data: Information identifying or reasonably linkable to an individual.

• Customer Content: Submitted prompts, text, brand assets, images, videos, files, and other creative materials.

• Outputs: Content generated from Customer Content.

• Account Data: Account, organization, role, and billing information.

• Usage Data: Service telemetry and usage logs.

4. Information We Collect

Information may include account details, billing information, uploaded content, saved outputs, support communications, device and browser data, IP addresses, usage logs, cookies, and information from identity providers, payment processors, analytics platforms, and permitted public sources.

5. How We Use Information

Information is used to operate the Services, generate outputs, maintain accounts, improve reliability, prevent abuse, provide support, administer billing, communicate with users, and meet legal obligations.

6. AI Processing and Training Controls

Customer Content is processed to generate outputs. Third-party infrastructure and AI providers may be used.

By default, Customer Content and outputs are not used to train or fine-tune foundation models. Optional improvement settings may permit additional use of shared content. Limited review may occur for safety, security, abuse investigations, and legal compliance.

Users are advised not to submit highly sensitive personal information or secrets without an appropriate agreement.

7. Legal Bases for Processing

For users in the EEA, UK, and Switzerland, processing may rely on contract, legitimate interests, consent, or legal obligations.

8. How We Share Information

Information may be shared with service providers, AI and infrastructure providers, affiliates, parties involved in business transfers, and legal or safety authorities where necessary.

9. International Data Transfers

Personal Data may be transferred internationally using appropriate safeguards, including Standard Contractual Clauses where required.

10. Data Retention

Account data is retained as needed to operate and close accounts and meet legal obligations. Customer Content is retained until deletion, subject to backups. Backups may persist for 30–90 days after deletion, while logs are typically retained for 30–180 days. Billing records follow applicable legal requirements.

11. Security Measures

Measures include access controls, encryption in transit, encryption at rest where supported, monitoring, rate limiting, anomaly detection, secure development, and vulnerability management. No system is guaranteed to be completely secure.

12. Your Rights and Choices

Depending on location, users may request access, correction, deletion, restriction, portability, withdrawal of consent, or appeal of certain automated decisions.

Privacy requests: privacy@elarislabs.ai

California residents may have additional rights concerning data sharing and authorized-agent requests.

13. Children's Privacy

The Services are not intended for children under 13, or a higher applicable age. ElarisLabs states that it does not knowingly collect children's Personal Data.

14. Changes to This Policy

ElarisLabs may update the policy and revise the last-updated date. Material changes may be communicated by email or in-product notification.