Privacy Policy

1. Information We Collect

A) Personal Information

When you create an account or use our Service, we may collect:

• Name and email address
• Company name and business information
• Payment information (processed securely by third-party payment processors)
• Account credentials and authentication data
• Communication preferences

B) Usage Data

We automatically collect information about how you use our Service:

• Device information (IP address, browser type, operating system)
• Log data (access times, pages viewed, actions taken)
• Performance and analytics data
• Cookie and tracking technology data

C) Reddit-Related Data

To provide our Service, we collect and process:

• Reddit posts and comments you interact with through our platform
• Subreddit preferences and targeting criteria
• Content generated or submitted through our Service
• Campaign performance metrics and analytics

D) Communications

We collect information from your communications with us, including:

• Customer support inquiries and correspondence
• Feedback and survey responses
• Email communications and interactions

2. How We Use Your Information

We use the collected information for the following purposes:

A) Service Provision

• Create and manage your account
• Provide Reddit marketing automation services
• Process payments and manage subscriptions
• Deliver customer support and respond to inquiries
• Generate AI-powered content and recommendations

B) Service Improvement

• Analyze usage patterns and optimize platform performance
• Develop new features and improve existing functionality
• Conduct research and analytics
• Train and improve our AI models

C) Communication

• Send service-related notifications and updates
• Provide marketing communications (with your consent)
• Send newsletters and educational content
• Notify you of changes to our Service or policies

D) Legal and Security

• Comply with legal obligations and regulations
• Prevent fraud, abuse, and security incidents
• Enforce our Terms and Conditions
• Protect our rights and the rights of our users

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our Service and fulfill our contractual obligations to you
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., service improvement, fraud prevention), balanced against your rights
• Consent: Processing based on your explicit consent (e.g., marketing communications), which you can withdraw at any time
• Legal Obligation: Processing required to comply with applicable laws and regulations

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

A) Service Providers

We share data with third-party service providers who assist in operating our Service:

• Payment processors (Stripe, PayPal)
• Cloud hosting and infrastructure providers
• Analytics and monitoring services
• Email and communication platforms
• AI and machine learning service providers

B) Reddit Platform

Our Service interacts with Reddit's platform. When you use our Service to post or comment on Reddit, that content is subject to Reddit's Privacy Policy and Terms of Service.

C) Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Enforce our Terms and Conditions
• Protect the rights, property, or safety of Engain, our users, or others
• Prevent fraud or security issues

D) Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

5. Data Storage and Security

A) Data Storage Location

Your data is stored on secure servers located in the European Union and other jurisdictions. We ensure that all data transfers comply with applicable data protection laws.

B) Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

C) Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR.

6. Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain circumstances
• Right to Restriction: Request that we limit the processing of your personal data
• Right to Data Portability: Receive your personal data in a structured, commonly used format
• Right to Object: Object to processing of your personal data based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing based on consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at info@engain.io. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

A) What Are Cookies?

Cookies are small text files stored on your device that help us improve your experience and analyze how our Service is used.

B) Types of Cookies We Use

• Essential Cookies: Necessary for the Service to function properly
• Performance Cookies: Help us understand how visitors use our Service
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your activity for advertising purposes (with consent)

C) Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

8. Data Retention

We retain your personal data for as long as necessary to:

• Provide our Service and fulfill the purposes described in this Privacy Policy
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements

When your account is closed or inactive, we will delete or anonymize your personal data within a reasonable timeframe, except where we are required to retain it for legal purposes. Typically, we retain account data for up to 7 years after account closure for tax and accounting purposes.

9. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Privacy Shield certification (where applicable)
• Other legally approved transfer mechanisms

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services (including Reddit). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Automated Decision-Making and AI

Our Service uses AI and automated systems to analyze Reddit content, generate recommendations, and create content. While we use automated processing to enhance our Service, we do not make solely automated decisions that significantly affect you without human oversight. You have the right to request human review of automated decisions.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority: If you are in the EEA and have concerns about our data practices, you may contact the Estonian Data Protection Inspectorate or your local data protection authority.