Privacy Policy

ConnectEngine LLC 30 N Gould St Ste R Sheridan, WY 82801 United States Email: [email protected] ConnectEngine OS is a multi-tenant SaaS platform for automated lead generation, content publishing, and operations monitoring.

Account Information: When you create an account, we collect your email address, name, and preferences. We use Supabase Auth for authentication. Business Data: Lead data, content ideas, outreach emails, and monitoring data you create within the platform. This data belongs to your tenant and is isolated via row-level security. Usage Data: We track feature usage, API calls, and AI model usage for billing and service improvement. Payment Information: Processed via Stripe. We never store full card details.

We use your information to: • Provide and maintain our services (LeadFlow, ContentFlow, OpsFlow) • Process your subscription and track usage against plan limits • Send transactional notifications (Telegram, email) • Improve our platform based on aggregate usage patterns • Respond to support requests • Comply with legal obligations

We use the following third-party services to operate ConnectEngine OS: • Supabase — Authentication, database, and file storage • Anthropic (Claude AI) — Content generation, lead email drafting, and scoring • Apify — Lead discovery via public data sources (Google Maps, Shopify, Etsy) • Hunter.io — Email verification and enrichment • Instantly.ai — Cold email delivery (your own account, BYOA) • AIML API — AI image generation for content • Hetzner — Server hosting (Frankfurt, Germany) • Cloudflare — CDN, DNS, and DDoS protection • Google Analytics — Anonymous site usage tracking (with your consent) Each service processes only the minimum data required for its function. We do not sell your data to any third party.

ConnectEngine OS uses AI extensively: • Lead scoring analyzes public website and social data to rank opportunities • Outreach emails are AI-generated based on lead profiles and your templates • Content rewrites adapt your ideas for different platforms (X, LinkedIn, blog, etc.) • Image generation creates visuals for your content Personal or payment data is never shared with AI providers. AI-generated content may not be unique or copyrightable. Third-party AI providers (Anthropic, AIML) have their own data retention policies — we do not control their data handling beyond our API agreements.

Essential Cookies: Required for authentication and basic site functionality. These cannot be disabled. Analytics Cookies: Used by Google Analytics to collect anonymous usage data. Only set with your explicit consent. You can change your preferences anytime via the cookie settings.

Your data is stored on servers in the EU (Hetzner, Frankfurt) and US (Supabase). We protect your data with: • HTTPS encryption in transit • Row-level security (RLS) for multi-tenant data isolation • Hashed passwords via Supabase Auth (bcrypt) • API rate limiting on all endpoints • HMAC-signed webhooks between services • Regular security audits

Account data is retained while your account is active plus a reasonable period for backup purposes. Lead data, content, and monitoring data remain until you delete them or close your account. Payment records are retained as required by tax law. You can request full deletion of your data by emailing [email protected]. We will process deletion requests within 30 days.

Under GDPR (EU/UK) and CCPA/CPRA (California), you have the right to: • Access your personal data • Correct inaccurate data • Delete your data • Export your data (portability) • Object to processing • Restrict processing • Withdraw consent at any time To exercise these rights, contact us at [email protected]. We do not sell personal information. We do not use personal data for automated decision-making that produces legal effects.

We may update this privacy policy from time to time. Material changes will be posted on this page with an updated date. Continued use of our service after changes constitutes acceptance. For questions about this policy, contact: [email protected]