Privacy Policy

1. Scope

This policy covers Elixir (Elixir, we, us), the marketing site at ecomelixir.com, the application at app.ecomelixir.com, and related tools and support channels. It does not cover third party sites we link to, or the stores and landing pages you publish using the Service, which you control and are responsible for.

2. Information you give us

• Waitlist details. When you apply for early access we collect your email address, your Discord username, and the monthly revenue range you select.
• Account details. When you create an account we collect your email address, your name if you provide one, and authentication data handled by our authentication provider. We do not store your password.
• Workspace content. Products, offers, customer profiles, angles, research notes, swipe files, images, and pages you create or upload.
• Billing details. If you buy a plan or credits, our payment processor collects your payment details directly. We receive the subscription status, the amount, and limited card metadata such as the last four digits. We never receive your full card number.
• Support messages. Anything you send us by email, chat, or Discord, including bug reports and attachments.

3. Information from your connected accounts

If you connect a Shopify store or another platform, we receive the data that integration exposes so we can provide the Service. Depending on the integration and the scopes you approve, this can include store and theme details, product and collection data, page content, and aggregate order, traffic, and conversion metrics. We request only what the features you use require, and you can disconnect an integration at any time.

4. Information we collect automatically

• Usage data. Pages viewed, features used, actions taken, and timestamps, collected through our product analytics provider.
• Device and log data. IP address, browser and device type, operating system, referring page, and error logs.
• Cookies and similar technologies. Used to keep you signed in, remember preferences, and measure product usage. See section 9.

5. How we use your information

• To provide, operate, and maintain the Service.
• To generate pages, copy, research, images, and recommendations you ask for.
• To review and manage waitlist applications and grant early access.
• To process payments and manage subscriptions and credits.
• To send service messages such as access invitations, receipts, security notices, and product updates.
• To provide support, debug problems, and improve reliability, safety, and performance.
• To prevent abuse and fraud, enforce our terms, and comply with legal obligations.

We do not sell your personal information, and we do not use your workspace content to train our own models.

6. Legal bases (for users in the EEA and UK)

We process personal data where it is necessary to perform our contract with you, where we have a legitimate interest in operating and improving the Service and keeping it secure, where you have given consent (for example to non-essential analytics or marketing email), and where we must comply with a legal obligation.

7. AI providers

To generate Output, we send the relevant parts of your prompts and workspace content to third party AI providers, which currently include OpenAI, Anthropic, and Google. These providers process the content to return a result. We use their business or API offerings, under which customer content is not used to train their public models by default. Avoid putting sensitive personal data, payment details, or health records into prompts.

8. Other service providers

We share data with vendors who process it on our behalf, under contract, and only for the purposes we specify. By category, these are:

• Cloud hosting, storage, and content delivery.
• Database hosting and vector search for stored intelligence.
• Authentication and account management.
• Payment processing.
• Transactional email delivery.
• Product analytics and error monitoring.
• Customer support messaging.
• Web crawling, screenshots, and ad library research used by the competitor and page analysis features.
• Internal team notifications about new applications.

We may also disclose information if required by law or valid legal process, to protect our rights, safety, or property, or in connection with a merger, acquisition, or sale of assets, in which case we will tell you before your information becomes subject to a different policy.

9. Cookies

We use strictly necessary cookies to sign you in and keep your session secure, preference cookies to remember settings such as your selected workspace, and analytics cookies to understand how the product is used. You can block or delete cookies in your browser, but the Service will not work correctly without the strictly necessary ones.

10. Retention

We keep personal data for as long as your account is active and for as long as we need it for the purposes in this policy. Waitlist submissions are kept until the waitlist closes or you ask us to remove them. Workspace content is kept until you delete it or close your account, after which it is removed from our live systems within a reasonable period and may persist briefly in backups. We keep records we are required to keep for tax, accounting, or legal reasons.

11. International transfers

We and our providers operate in several countries, including the United States, so your information may be transferred outside the country where you live. Where required, we rely on appropriate safeguards such as standard contractual clauses.

12. Security

We use encryption in transit, access controls, scoped credentials, and isolation between workspaces to protect your data. No system is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and any regulator as required by law.

13. Your rights

Depending on where you live, you may have the right to access a copy of your personal data, correct it, delete it, restrict or object to processing, withdraw consent, and request portability. Users in California may request details of the categories of information collected and disclosed, and may not be discriminated against for exercising these rights. To make a request, email support@ecomelixir.com. We may need to verify your identity, and we will respond within the time the law allows. You can unsubscribe from marketing email using the link in any such message. Service messages about your account will still be sent.

14. Children

The Service is for business use and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us information, contact us and we will delete it.

15. Changes to this policy

We may update this policy as the product changes. We will update the date at the top, and if a change is material we will give reasonable notice by email or in the product.

16. Contact

For privacy questions or requests, email support@ecomelixir.com.