Privacy Policy

Last updated: 6/20/2026

Ersilia ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Personal Information

We collect information that you provide directly to us:

• Account information (name, email address, password)
• Profile information (company, phone number, timezone)
• Project data (client information, project details, communications)
• Usage data (how you interact with our service)

Automatically Collected Information

• Log data (IP address, browser type, pages visited)
• Device information (device type, operating system)
• Cookies and similar tracking technologies

How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our services
• Process your transactions and send related information
• Send you technical notices and support messages
• Respond to your comments and questions
• Detect and prevent fraud and abuse
• Analyze usage patterns to improve user experience

Information Sharing

We do not sell your personal information. We may share your information only in these circumstances:

• With your consent: When you explicitly agree to share information
• Service providers: Third-party vendors who help us operate our service
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, sale, or acquisition

Third-Party Services

We use trusted third-party services to provide and improve our Service. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose:

• Supabase: Database, authentication, and hosting services
• Stripe: Payment processing and subscription management
• Google Gemini: AI-powered scope creep detection
• Resend: Transactional email delivery
• Vercel: Application hosting and content delivery
• Sentry: Error tracking and performance monitoring

Each of these services has their own privacy policies governing their use of your information.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Objection: Object to processing of your personal information

To exercise these rights, please contact us at hello@ersilia.ai

GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have specific rights under the General Data Protection Regulation (GDPR):

• Right to access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate information
• Right to erasure: You can request deletion of your personal data
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request a copy of your data in machine-readable format
• Right to object: You can object to our processing of your personal data
• Rights related to automated decision-making: You can request human review of automated decisions

We process your data based on: (1) your consent, (2) fulfillment of our contract with you, (3) compliance with legal obligations, or (4) our legitimate business interests. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know: You can request information about the personal data we collect, use, and disclose
• Right to delete: You can request deletion of your personal information
• Right to opt-out: You can opt out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, please contact us at hello@ersilia.ai with "California Privacy Rights" in the subject line. We will respond to verifiable requests within 45 days.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, your personal information is permanently erased immediately, unless we are required to retain specific records for legal obligations.

Cookies

We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings, but disabling cookies may affect the functionality of our service.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at: