Privacy Policy

1. Information We Collect

Enideon processes information that you provide when using the application, as well as information generated through your use of its features.

1.1 Account and Profile Information

When you create and use an Enideon account, the application may store information associated with your account, including:

• Email address
• Full name, where available
• Profile/avatar information, where available
• Account creation date
• Last login information
• AI access and usage information

Enideon uses Supabase for authentication and application data storage.

1.2 Whiteboard Information

When you create and use a whiteboard, Enideon stores information necessary to save and restore your workspace.

This may include:

• Whiteboard title
• Drawings and other whiteboard content
• Whiteboard objects and associated data
• Creation and modification timestamps
• A generated whiteboard preview/thumbnail

Whiteboard content is stored in the application's database.

Whiteboard previews are generated within the application and stored as image data associated with the relevant whiteboard.

1.3 Chat and AI Interaction Data

When you use Enideon's AI features, the application processes information required to generate an AI response.

This may include:

• Messages sent to the AI
• AI-generated responses
• Conversation history associated with a whiteboard
• Relevant whiteboard information
• Selected whiteboard content
• Images of selected portions of a whiteboard
• Images of the full whiteboard
• Whiteboard shape information, including shape identifiers, types, and geometric information

Chat messages are stored in the application's database and associated with the relevant whiteboard.

1.4 AI Processing

Enideon currently uses Ollama Cloud for AI processing.

When you use AI chat functionality, information necessary to process your request may be transmitted to Ollama Cloud.

Depending on the interaction, this may include:

• Chat messages
• Relevant conversation messages
• Selected whiteboard images
• Full whiteboard images
• Relevant whiteboard shape information

The current implementation does not intentionally include your Enideon account email address, name, Supabase user ID, profile information, or AI credit balance in the AI request sent to Ollama Cloud.

AI requests are made by the application's server after authentication and authorization checks.

Ollama Cloud may process information according to its own terms and privacy practices.

1.5 AI Annotations

Enideon may create AI-generated annotations associated with a whiteboard.

These records may contain:

• Annotation type
• Annotation data
• Associated whiteboard
• Creator information where applicable
• Creation timestamp

AI annotation information is stored in the application's database.

1.6 Contact and Support Information

If you submit a message through the Enideon contact form, the application stores:

• Email address
• Contact/message type
• Message content
• The Enideon page from which the message was submitted
• Browser user-agent information
• Your Enideon user ID, if you are signed in

This information is used to receive, review, and respond to messages submitted through the contact form.

1.7 Technical Information

Enideon processes certain technical information when requests are made to the application.

For example, request information may be used for rate limiting and abuse prevention.

The current contact endpoint uses the originating request information for rate-limiting purposes. The IP address used for this purpose is not stored in the contact_messages database table.

The browser user-agent associated with contact-form requests is stored with the corresponding contact message.

2. How We Use Information

Enideon uses the information described in this Privacy Policy for purposes including:

Providing the Service

Information is used to:

• Authenticate users
• Provide access to user accounts
• Create and manage whiteboards
• Save and restore whiteboard content
• Display account and workspace information
• Provide AI functionality

Providing AI Features

Relevant information is processed to:

• Understand requests submitted to the AI
• Generate AI responses
• Interpret relevant whiteboard content
• Generate AI-assisted whiteboard actions and annotations

Managing AI Usage

Enideon maintains AI usage and credit information associated with accounts.

This information is used to manage the application's current AI usage limits and determine whether an account can use available AI functionality.

Security and Abuse Prevention

Information and technical controls are used to:

• Authenticate requests
• Restrict access to users' own whiteboards
• Prevent unauthorized access
• Apply rate limits
• Reduce abuse of application endpoints
• Protect administrative functionality

Support

Contact information and submitted messages are used to:

• Respond to users
• Investigate reported problems
• Manage support requests
• Review communications submitted through the contact system

3. How Information Is Stored

Enideon currently uses Supabase for authentication and application data storage.

Depending on the feature being used, information may be stored in database records associated with your account or whiteboards.

The application currently stores information relating to:

• User profiles
• Whiteboards
• Chat messages
• AI annotations
• Contact messages
• AI usage information

Access to user-owned whiteboards and associated chat records is restricted through authentication and database-level access policies.

4. Third-Party Processing

Enideon currently uses third-party services to provide parts of the application.

Supabase

Supabase is used for authentication and application data storage.

Ollama Cloud

Ollama Cloud is used to process AI requests.

When AI functionality is used, relevant chat and whiteboard information may be transmitted to Ollama Cloud as described in this Privacy Policy.

Third-party services may process information according to their own applicable terms and privacy policies.

5. Whiteboard and Chat Privacy

Whiteboards are associated with the account that created them.

The application's current database access policies restrict users to their own whiteboards and associated chat records.

Whiteboard content and chat messages are not intended to be publicly accessible through the normal user interface of Enideon.

Enideon does not currently provide a public whiteboard-sharing system.

6. Account Deletion

Enideon provides an account deletion function within the application.

When an authenticated user requests account deletion, the application requests deletion of the corresponding authentication account.

The application's database is configured with cascading relationships for the primary account and whiteboard data.

These relationships are intended to remove associated records including:

• User profile information
• Whiteboards
• Whiteboard content
• Whiteboard thumbnails
• Associated chat messages
• Associated AI annotations

Contact messages are stored separately from the primary account and whiteboard records.

7. Data Retention

Information is retained in the application's systems according to the current operation of the relevant feature and database.

Enideon does not currently state a fixed, universal retention period for all categories of information.

Under the current application structure:

• Account and profile information is associated with the user's account.
• Whiteboard information remains stored while the relevant whiteboard exists.
• Chat messages are associated with their respective whiteboards.
• AI annotations are associated with their respective whiteboards.
• Contact messages are stored separately from whiteboard data.

Different categories of information may therefore remain in the application's systems for different periods depending on how the relevant feature is used.

8. Security

Enideon uses technical measures intended to protect information processed through the application.

The current implementation includes measures such as:

• Authentication for protected functionality
• Database-level Row Level Security (RLS) policies
• Authorization checks for user-owned resources
• Same-origin request checks on relevant APIs
• Rate limiting on relevant endpoints
• Server-side handling of privileged Supabase credentials
• Restrictions on administrative functionality

Privileged Supabase credentials are used by server-side administrative functionality and are not intended to be exposed to users through the client application.

No internet-based service can guarantee absolute security, and Enideon cannot guarantee that unauthorized access, loss, or disclosure will never occur.

9. AI-Generated Content

Enideon uses AI systems to generate responses, explanations, whiteboard actions, and annotations.

AI-generated content may not always be accurate, complete, or appropriate for every situation.

Users should independently verify important information, particularly when using AI-generated educational explanations or other information on which they intend to rely.

10. Your Information and Account Controls

Enideon provides account controls through the application, including the ability to delete an account.

Users should avoid placing unnecessary sensitive personal information into whiteboards, chat messages, or other content submitted to the AI.

If you have a question or concern about information associated with your account, you may contact us using the contact information provided below.

11. Changes to This Privacy Policy

This Privacy Policy may be updated when Enideon's services, features, data practices, or applicable requirements change.

When this Privacy Policy is updated, the effective date at the beginning of the policy will be changed accordingly.

Users should review this page periodically for changes.

12. Contact

For questions, concerns, or requests relating to this Privacy Policy or the handling of information by Enideon, you can contact:

Prajwal Uppalapati
Email: prajwal.uppalapati@gmail.com

13. Applicable Law

This Privacy Policy describes the information-handling practices of the current Enideon application.

Enideon operates from India, and applicable Indian laws and regulations may apply to the processing of personal information through the service.

This Privacy Policy does not limit any rights that cannot lawfully be limited under applicable law.