Who is responsible
Ennearock is the controller of personal information described in this policy unless a project agreement states otherwise. When we process data inside a client workspace solely on that client's instructions, the client may be the controller and Ennearock may act as its processor.
Information we collect
- Account and transaction details: name, work email, organization, billing address, plan, purchase, and invoice information. Payment card details should be handled by the payment provider rather than stored by Ennearock.
- Project and communication data: messages, briefs, uploaded files, feedback, and support requests you choose to provide.
- Technical data: IP address, device and browser details, approximate location, referral page, cookie identifiers, and product usage events.
How we use information
We may use information to provide and secure the service, manage accounts and purchases, deliver projects, respond to enquiries, prevent abuse, understand product performance, meet legal obligations, and—where permitted—send relevant product or studio updates.
We do not sell personal information. We do not use private project materials to train public artificial-intelligence models unless the relevant customer has expressly agreed.
Legal bases
Where the GDPR or similar law applies, processing may rely on performance of a contract, legitimate interests such as operating and securing the service, consent for optional communications or cookies, and compliance with legal obligations. You may withdraw consent at any time without affecting earlier processing.
Retention and security
Information is retained only as long as reasonably needed for the purposes above, contractual commitments, dispute resolution, and tax or other legal requirements. Account data should be deleted or anonymized after the applicable retention period.
We use reasonable organizational and technical safeguards, but no online service can promise absolute security. Please use a strong, unique password and notify us promptly if you suspect unauthorized access.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your information; object to certain processing; withdraw consent; and complain to a supervisory authority. We may need to verify your identity before fulfilling a request.
This service is intended for business users and is not directed to children under 16. If you believe a child has provided personal information, contact us so it can be addressed.
Questions or requests
Contact the privacy owner at hello@ennearock.com. Include “Privacy request” in the subject line. The final deployed policy should also identify the legal entity, postal address, and relevant supervisory authority.