Privacy Policy

This Privacy Policy explains what information Enforly (“Enforly”, “we”, “us”) collects when you use the Enforly website, dashboard, and API (the “Service”), how we use it, and the choices you have. Enforly is a guardrails API that evaluates content, data, or operations you send against rules written in natural language and returns an allow, deny, or review decision.

Information we collect

• Account information. When you create an account we collect your email address and, if you choose to set one, a password (stored hashed by our authentication provider).
• Google sign-in. If you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use them only to create and identify your Enforly account.
• Policies. Rules you save in the dashboard, including their titles and versions.
• API keys. The names and metadata of API keys you create. Key secrets are managed by our API key provider and are shown to you only once.
• Check activity. For each check we record the request ID, time, HTTP status, decision, per-policy results (such as the policy evaluated and the estimated violation probability), and any error code. This log is deleted automatically after 90 days.
• Billing information. If you subscribe to a paid plan, payments are processed by Polar. We receive subscription status and plan details; we do not receive or store your full card number.

Data you send in checks

The policy text and the data you send to the check endpoint are used only to produce the evaluation for that request. Enforly does not store the contents of data after the response is returned. To evaluate the check, the policy and data are sent to TypeSafe AI, which runs the Jev model that produces the decision. You decide what evidence to include; avoid sending personal or sensitive data that is not needed to evaluate your rule.

How we use information

• To provide, operate, and secure the Service, including authentication, API key verification, rate limiting, and usage quotas.
• To show you your policies, keys, usage, and activity in the dashboard.
• To process subscriptions and send transactional emails, such as account confirmation and password reset.
• To diagnose problems, prevent abuse, and comply with legal obligations.

We do not sell your personal information and we do not use it for advertising.

Google user data

Enforly’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only basic profile scopes (name, email address, and profile picture), use them solely to sign you in and identify your account, do not share them with third parties except the service providers needed to run the Service, and do not use them to train AI models.

Service providers

We rely on the following providers to run the Service. They process information on our behalf and only as needed to provide their services:

• Supabase — authentication and database.
• Unkey — API key management and rate limiting.
• TypeSafe AI — evaluation of checks with Jev.
• Polar — payments and subscriptions.
• Vercel — website hosting.

Retention

Account information, saved policies, and API key metadata are kept while your account is active. Check activity is deleted after 90 days. Check data is not stored. When you delete your account, we delete your account data, except where we must keep limited records for billing, security, or legal reasons.

Security

We use encryption in transit, access controls, and hashed credentials to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

You can access and update your policies and API keys from the dashboard. You can request access to, correction of, export of, or deletion of your personal information by emailing support@enforly.com. If you signed in with Google, you can also revoke Enforly’s access at any time from your Google account permissions.

Children

The Service is intended for developers and businesses and is not directed to children under 16. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. We will post the new version on this page and update the date above. If changes are material, we will notify you by email or in the dashboard.

Contact

Questions about this policy? Email support@enforly.com.