How Elligent handles your information.

1. Scope and contact

This Privacy Policy applies to elligent.io, app.elligent.io, Elligent emails, and related services that link to it (together, the Service). The operator of the Service is Elligent LLC, a Pennsylvania limited liability company. “Elligent,” “we,” “us,” and “our” refer to Elligent LLC. This policy does not control the independent practices of YouTube, Google, Stripe, OpenAI, Resend, Plausible, or other services you choose to use.

Privacy questions and requests can be sent to support@elligent.io. Please do not send passwords, payment-card numbers, OAuth tokens, or other credentials by email.

2. Information we handle

Depending on how you use Elligent, we handle:

• Account and Workspace information: name, email address, authentication records, Workspace and Brand Identity names, memberships, roles, invitations, preferences, and account lifecycle state.
• Creator research: channel URLs and identifiers, public channel and video metadata, thumbnails, publish dates, duration, views, subscriber snapshots, tags, filters, scan configuration, and public performance snapshots.
• Connected YouTube information: when you choose to connect a channel, encrypted authorization credentials, channel identity, authorization and sync status, and the private YouTube Analytics reports covered by the consent shown during connection. Depending on available scopes, reports may include views, watch time, retention, traffic sources, devices, geography, engagement, subscribers, and video-level metrics.
• Transcripts, analysis, and ideas: transcripts, summaries, titles, thumbnail images or links, evidence-backed breakdowns, Idea Generation Guides, generated ideas, scores, explanations, shortlist or archive state, and the source records that support them.
• Service activity: scans, jobs, status history, bounded operational events, errors, usage reservations, feature consumption, and security or abuse-prevention records.
• Billing and referrals: plan, entitlement and usage state, checkout and invoice status, Stripe customer or subscription references, referral attribution and ledger state, and Stripe Connect onboarding or payout status. Stripe—not Elligent—collects full payment-card and connected-account financial details.
• Communications: required authentication, security, invitation, billing, and account-lifecycle messages; notification preferences and delivery state; support messages; and optional marketing consent and unsubscribe state.
• Website and device information: aggregate page and allowed event measurements described below, plus technical request information such as IP address, browser, device, time, and logs that hosting, authentication, security, and email providers may process to deliver and protect the Service.

We receive information directly from you, from members acting in a shared Workspace, from YouTube and Google APIs, from service providers, and from the operation of the Service. Please do not add sensitive personal information to prompts, transcripts, Idea Generation Guides, titles, or support messages unless it is necessary and you are authorized to provide it.

3. How we use information

We use information to:

• create accounts, Workspaces, Brand Identities, and permissions;
• scan selected channels, calculate explainable performance signals, and keep source evidence tied to research;
• transcribe, summarize, analyze, generate, score, organize, and export the work you request;
• operate subscriptions, usage limits, referrals, payouts, and customer support;
• send required service messages, requested notifications, and optional marketing only after affirmative consent;
• monitor reliability, diagnose failures, prevent fraud and abuse, enforce our Terms, and protect users and the Service;
• understand aggregate acquisition and feature adoption without sending customer content or identifiers to Plausible; and
• comply with law and respond to valid legal requests.

4. YouTube API Services

Elligent uses YouTube API Services. By using Elligent features that interact with YouTube, you also agree to the YouTube Terms of Service. Google explains its data practices in the Google Privacy Policy.

Public API data is used to resolve channels and videos, display source metadata, and calculate performance signals. Public statistics are refreshed or removed within the storage windows required by YouTube; Elligent’s default public-statistics window is no more than 30 days unless an approved exception applies.

Connecting your own channel is optional. The connection screen identifies the channel, data categories, Workspace-sharing effect, and purpose before authorization. Authorized analytics are visible only to permitted members of the Workspace and Brand Identity in which you deliberately share the connection. We use authorization credentials only to provide the connected-channel features you request. We do not ask for or store your YouTube password.

You can disconnect a channel through Elligent’s connection controls, which removes the local connection and associated authorized analytics. You can also revoke Elligent’s access from the Google security permissions page. Revoking access in Google does not delete content held by YouTube. To make a deletion request directly to Elligent, use the in-product controls or email support@elligent.io. We periodically revalidate authorizations and remove associated data when access can no longer be verified.

5. AI and transcript processing

When you request analysis or ideas, Elligent may send the minimum relevant source title, thumbnail, transcript or excerpt, performance evidence, and your generation instructions to OpenAI through its API. Elligent stores the resulting summaries, hypotheses, ideas, scores, explanations, and usage state so your Workspace can use them. OpenAI states that API data is not used to train its models by default unless a customer opts in, and that some API content may be retained temporarily for abuse monitoring under its data controls.

AI output can be incomplete, inaccurate, or unsupported. Elligent labels interpretations as hypotheses and keeps evidence references where available, but you remain responsible for reviewing an output before using or publishing it.

“Continue in AI” creates a reviewable context packet in your browser. Elligent does not automatically send that packet to ChatGPT, Claude, Gemini, or another assistant. If you copy, download, paste, or upload it, you direct the transfer and the selected provider’s terms and privacy practices apply.

6. When information is shared

We share information only as reasonably necessary:

• With people you authorize: Workspace members can access data according to their role and Brand Identity access. Workspace owners and administrators can manage members and some settings.
• With processors: Supabase provides authentication and data infrastructure; Render hosts the web services; Google and YouTube provide API data and authorization; OpenAI processes requested AI work; Stripe processes billing, referrals, and Connect; Resend delivers email; and Plausible provides limited aggregate analytics.
• For safety and law: when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or establish or defend legal claims.
• For a business transaction: subject to appropriate confidentiality and notice where required, in connection with a financing, merger, acquisition, reorganization, or sale of assets.
• At your direction or with your consent.

We do not sell personal information or customer content, and we do not share it for cross-context behavioral advertising.

7. Cookies, local storage, and analytics

Elligent uses necessary browser storage and cookies to maintain authentication, security, preferences, and the application session. Blocking them can prevent sign-in or other core features.

We use separate Plausible Analytics sites for elligent.io and app.elligent.io. Plausible does not use cookies for this measurement. The marketing site records pageviews and the fixed event Start Free. The product records pageviews and the fixed events Channel Added, Scan Started, and Idea Shortlisted.

We do not send Plausible names, email addresses, account, Workspace or Brand Identity IDs, channel or video IDs, titles, thumbnails, transcripts, ideas, searches, provider identifiers, URL query strings, or custom event properties. Dynamic routes are reduced to fixed templates and referrers to their origin. A restricted first-party aggregate ledger records the three product transitions so administrators can compare system activity with browser analytics. It is not available to Plausible or browsers.

8. Retention and deletion

We keep information for as long as needed to provide the Service, maintain security and reliability, resolve disputes, meet provider rules, and satisfy legal, tax, accounting, and financial obligations. Retention varies by data type and context:

• Workspace research generally remains until an authorized user deletes it, the owning Workspace is deleted, or the account lifecycle removes it.
• Public YouTube statistics are normally refreshed or removed within 30 days. Connected daily analytics can cover up to the most recent 365 complete days while authorization remains valid.
• Disconnecting a YouTube channel removes its local authorization credentials and connected analytics. Operational backup or provider records may age out under controlled retention.
• Successful notification content is cleared on a short schedule; bounded delivery states and signed provider events may be kept longer for reliability, suppression, and security.
• Marketing provider events are generally retained for 90 days. An anonymized record of a consent or withdrawal may be retained for up to 24 months to demonstrate and enforce the choice.
• Billing, referral, payout, fraud-prevention, and legal records may remain after account deletion when required to reconcile transactions or meet legal obligations.

Eligible users can permanently delete an owned Workspace or their Elligent account in Settings. Deletion may pause until active processing completes or financial, subscription, referral, payout, connected-account, or administrator obligations are safely resolved. Deleting your account removes data you own; content in a Workspace owned by someone else can remain for that Workspace, but your membership and personal connection data are removed or detached as appropriate.

9. Your choices and rights

Elligent provides controls to:

• review or update your profile, Workspace, and Brand settings;
• manage members and roles if your permissions allow it;
• disconnect YouTube and revoke Google authorization;
• turn optional product notifications on or off and choose a cadence;
• opt in to marketing separately, unsubscribe in any marketing message, and keep using the product after opting out;
• cancel or manage a paid plan through the Stripe-hosted portal; and
• delete eligible owned Workspaces and your Elligent account.

Depending on where you live, applicable law may also give you rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information, or to appeal a decision. Email support@elligent.io to make a request. We may need to verify your identity and authority, and some exceptions may apply. We will not discriminate against you for exercising a privacy right.

10. Security and international transfers

Elligent uses administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, row-level and role-based authorization, restricted service credentials, encrypted OAuth secrets, and fail-closed provider operations. No security method is perfect, so we cannot guarantee absolute security. Keep your credentials confidential, use a unique password, and tell us promptly if you suspect misuse.

Elligent and its providers may process information in the United States and other countries. Those countries may have different data-protection laws. Where required, we and our providers rely on legally recognized safeguards for international transfers.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A higher minimum age may apply where local law requires it. If you believe a child provided information in violation of this section, contact us so we can investigate and delete it where appropriate.

12. Changes to this policy

We may update this policy as the Service, providers, or laws change. We will post the updated version and effective date here. If a change materially expands how we use information, we will provide additional notice or seek consent where required.

Questions or requests: support@elligent.io.