Enhancly

Privacy Policy

Last updated: July 15, 2026

This policy explains what personal data Enhancly ("we", "us") collects when you use enhancly.io and the Enhancly application (the "Service"), why we collect it, and the choices you have. Enhancly is a product-content enhancement platform for e-commerce stores.

Data we collect

  • Account data — your name, email address, and organization details, provided when you sign up directly or through Google sign-in.
  • Store and product data — product catalogs, descriptions, images, and metadata you upload (CSV), sync from your store (e.g. WooCommerce, product feeds), or create in the Service.
  • Connected advertising data — if you connect a Google Ads or Meta Ads account, we retrieve ad performance metrics (impressions, clicks, spend, conversions) and account/campaign names on a read-only basis. See "Connected ad platforms" below.
  • Payment data — payments are processed by Stripe. We never see or store your full card details.
  • Usage data — basic logs and diagnostics needed to operate and secure the Service.

How we use data

We use your data solely to provide the Service: enhancing your product content (including processing text and images with AI models), syncing and displaying your ad performance, billing, support, and service communications. We do not sell your personal data, and we do not use your product content or advertising data to train AI models.

Connected ad platforms (Google Ads, Meta Ads)

Connecting an ad account uses the platform's official OAuth flow — we never see your platform password. We store the resulting access credentials encrypted and use them only to read your advertising performance data into your dashboard and, where you explicitly enable it, to create draft (paused) ads you control. You can disconnect an integration at any time on the Ads page, which deletes the stored credentials and, where supported, revokes our access with the platform. You can also revoke access from your Google or Meta account security settings.

Enhancly's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We rely on a small number of processors to run the Service: Cloudflare (hosting, storage, and content delivery), Stripe (payments), Resend (transactional email), Google (AI processing of the content you submit for enhancement), Trigger.dev (background job processing), and our managed database provider. Each processes data only on our instructions.

Cookies

We use strictly necessary cookies: a session cookie to keep you signed in and a preference cookie to remember your language. We do not use advertising or cross-site tracking cookies.

Data retention

We keep your data while your account is active. Historical ad metrics are retained after you disconnect an integration so your reporting is not lost; deleting your account removes them along with everything else.

Data deletion

You can delete your account at any time in the app under Settings, which permanently removes your account, organizations you solely own, product data, images, and stored integration credentials. You may also request deletion by emailing [email protected] — including deletion of data received from connected Google or Meta accounts.

Your rights

If you are in the EU/EEA, you have the right to access, rectify, export, and erase your personal data, to restrict or object to its processing, and to lodge a complaint with your supervisory authority. Contact us at [email protected] to exercise these rights.

Security

All traffic is encrypted in transit (TLS). Integration credentials and other sensitive secrets are additionally encrypted at rest. Access to production data is restricted and logged.

Changes

We may update this policy as the Service evolves; material changes will be announced in the app or by email. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy? Email [email protected].