Élisa Interactive Privacy Policy
Effective Date: May 1, 2025
Élisa Interactive Inc. (“Élisa,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Élisa software plugin and related services (the “Services”).
We comply with applicable data protection and privacy laws, including but not limited to:
- The Act Respecting the Protection of Personal Information in the Private Sector (Quebec)
- The Personal Information Protection and Electronic Documents Act (PIPEDA)
- The General Data Protection Regulation (GDPR)
- The UK Data Protection Act 2018
- The California Consumer Privacy Act (CCPA) and other applicable U.S. state laws
1. Information We Collect
We may collect the following categories of information:
a. Information You Provide
- Prompts or text inputs
- API Keys (stored transiently if required for service delivery)
- Support or feedback messages
- Screenshots captured using the Élisa Screenshot feature (processed transiently and not stored)
- Files manually uploaded to prompts, such as images, PDFs, or other supported attachments, which are stored and associated with the prompt for workflow continuity
b. Usage Data
- Session metadata (e.g., time of access, feature usage)
- Device type, plugin version, and operating environment
- Aggregate analytics (anonymized)
c. Third-Party API Usage
When using our BYOK (Bring Your Own Key) features, you are responsible for providing and managing your own API keys. Élisa does not store third-party keys beyond the request lifecycle unless explicitly permitted.
2. How We Use Your Information
We use collected data to:
- Operate and deliver our Services
- Retain chat sessions and prompts across all plans to support user workflows and enable project continuity
- Diagnose and improve product functionality
- Provide support and respond to inquiries
- Maintain compliance with licensing terms and legal obligations
If you are using the Freelancer (Free) Edition, we may also use de-identified prompt and output data for:
- Improving AI models and system performance
- Quality assurance (which may include limited human review)
For Studio and Enterprise users, prompts and outputs are never used for training AI models or for any form of model improvement.
3. Sharing of Information
We may share your data in the following cases:
- Service providers who help operate our Services (e.g., cloud infrastructure, analytics, AI model providers such as OpenAI or Google)
- Legal obligations to comply with applicable laws or respond to lawful requests
- Business transactions including mergers, acquisitions, or asset sales
We do not sell your personal data.
Once your data is transmitted to third-party service providers (e.g., OpenAI, Google), it is subject to their respective privacy policies. Élisa does not control and is not responsible for the data practices of these providers once information leaves our systems. We encourage users to review the privacy policies of such third-party services before use.
4. International Transfers
Your information may be transferred to, stored, and processed in countries other than your own, including Canada, the United States, and EU member states. Where required by applicable laws, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
5. Your Rights and Choices
Depending on your location and applicable laws, you may have the right to:
- Access or correct your data
- Request deletion of your data
- Withdraw consent for processing
- Object to certain types of processing (such as marketing or analytics)
To exercise any of these rights, please contact us at: [email protected]
6. Data Retention
- Data passed to third-party AI or service providers is not retained by Élisa. These providers may have their own retention and processing policies.
- We retain de-identified data for model training (Free plan only) unless you withdraw consent.
- Logs and analytics data are retained for up to 12 months.
- Data is retained for as long as you maintain an active client relationship with Élisa, to support long-term projects and access to prior work.
7. Security Measures
We implement industry-standard technical and organizational security measures to protect your data, including:
- TLS encryption for all data in transit
- Role-based access controls and audit logging
- Logical data separation by studio or client environment
While we strive to protect your data, no method of transmission or storage is completely secure.
8. Children’s Privacy
Élisa is not intended for use by individuals under the age of 18. You must be at least 18 years old, or the age of majority in your jurisdiction (whichever is higher), to use the Services. We do not knowingly collect personal data from individuals under this age threshold. If we become aware that we have inadvertently collected such information, we will take steps to delete it., and we do not knowingly collect personal data from children.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” at the top and updated this page.
If material changes are made, we may provide additional notice by email or in-product messaging.
10. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:
Élisa Interactive Inc. [email protected]
By using Élisa, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.