Account data — your X handle and/or email address, a hashed
password if you set one, and X authorization tokens if you connect your
account. Basis: performance of the service you signed up for.
Usage and content — the charts and drafts you generate, your
plan, credits and generation counts. Basis: performance of the service.
Billing — subscriptions and purchases are handled by
Stripe; we never see your card
number. Invoicing data is kept as required by Spanish tax and commercial law
(up to 6 years). Basis: contract and legal obligation.
Emails — sign-in links and account notices, sent through the
Resend platform. Basis: performance of the service.
AI features — captions and analyses are produced with Anthropic
Claude models on Amazon Web Services (EU region). Prompts contain chart data,
not your personal details. Basis: performance of the service.
Anonymous visit metrics — public pages send a beacon with a
short-lived hash of IP + browser (kept 5 minutes, never stored raw) to count
visitors. No profile is built. Basis: legitimate interest.
Cookies
We only use technical cookies/local storage needed to keep you signed in.
There are no advertising or third-party analytics cookies, so no consent
banner is required. Public pages load fonts from Google Fonts, which involves
your IP address being sent to Google.
Who else is involved
Hosting by Railway (US), payments by Stripe, email by Resend, AI by AWS.
Where providers process data outside the EEA, transfers rely on the EU-US
Data Privacy Framework or Standard Contractual Clauses. When you publish a
draft, its content is sent to X (Twitter) under your authorization.
How long we keep data
Account data: while your account exists (you can delete it from the app
menu at any time, which also cancels any subscription). Billing records: the
legally required period. Anonymous metrics: aggregated daily counts only.
Your rights
You can request access, rectification, erasure, portability, restriction
or objection at legal@enri.me. You can
also complain to the Spanish supervisory authority
(AEPD).