Privacy policy

1. Data we collect

• Account data - name, email, and profile details, handled through our authentication provider (Clerk). We store an internal user id, workspace memberships, and roles.
• Workspace and content data - the prompts, files, images, audio, video, transcripts, conversations, and canvases you upload or generate, plus their metadata (titles, timestamps, visibility).
• Billing data - plan, subscription status, credit usage, and transaction records. Our payments processor (Stripe) collects and stores your full card details. We keep a copy of only the card brand, the last four digits, the expiry date, the card type (credit or debit), the issuing country, and the billing name, so we can show which card is on file.
• Usage and device data - log data, approximate location derived from IP, device and browser type, and product-analytics events about how the Service is used.
• Session activity - when analytics is on for you (see section 9), we record replays of your use of the Endless app through our product-analytics provider to diagnose issues and improve usability. A replay records the page layout, navigation, and clicks only: all text and form inputs are masked, and images, video, audio, and other media are not recorded. We do not record replays on our marketing site.
• Communications - messages you send us (for example, support requests) and transactional email delivery events.
• Business contact data - when you sign up with a work email address, create a workspace, give your company website during onboarding, or contact our sales team, we collect your name, email address, company domain, and how you found us (for example, campaign parameters and ad click identifiers). Section 4 describes how we research the company and follow up.
• Data from MOD and Dual - MOD and Dual are earlier Endless products. When a workspace in one of them asks to move to Endless, we copy it into an Endless workspace: its members (name, email address, and role), its content (for example chats, transcripts, files, boards, voices, shortcuts, schedules, and the social-media accounts it follows), its billing customer record, and its remaining credits. When you sign up, we also check whether your email address has a MOD or Dual account and, if it does, we link the accounts.

2. How we use your data

We use personal data to:

• Provide, secure, and maintain the Service, including authentication, storage, and AI generation.
• Process payments, meter credits, and enforce plan and spending limits.
• Communicate with you about your account, security, and service changes.
• Understand and improve how the Service is used, and to build new features.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our terms.

We do not sell your personal data. We do not use your content to train, fine-tune, or otherwise improve any machine-learning or artificial-intelligence model, whether developed by a third party or by us, and we do not permit others to do so. Where your content is processed by the third-party AI providers listed on our Subprocessors page to generate the output you request, those providers act as our subprocessors and may process your content solely to provide that output; we select providers offering privacy-protective terms and enable no-training and, where offered, zero-retention options with such providers.

3. Legal bases (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract - to provide the Service you have signed up for, to process billing, and to move a workspace from MOD or Dual when that workspace asks for it.
• Legitimate interests - to secure, analyze, and improve the Service, provided your interests and rights do not override ours.
• Legitimate interests in business development - to research the company behind a work email address or company website and to follow up with business sign-ups and sales inquiries. You can object at any time by writing to privacy@endless.app.
• Consent - for optional cookies and analytics where required, and for certain marketing communications; you can withdraw consent at any time.
• Legal obligation - to keep records (for example, tax and accounting) and respond to lawful requests.

4. How we share data

We share personal data with subprocessors that help us run the Service - for hosting, authentication, payments, storage, email, AI inference, analytics, customer relationship management (CRM), customer support, and security. Each is bound by a data-processing agreement and may only process data on our instructions. The current list is on our Subprocessors page.

We may also share data with your workspace administrators (who can manage your membership and content in that workspace), and with authorities or advisors where required by law or to protect our rights, users, or the Service. If Endless is involved in a merger or acquisition, data may be transferred as part of that transaction, subject to this policy.

Endless staff. A limited number of Endless staff can see account, billing, and usage data - for example member names and email addresses, workspace names, plans, subscriptions, invoices, credit balances, and usage counts - to give support, run billing, and prevent fraud and abuse. Each staff member holds only the named staff permissions that we give them (for example, to read billing data or to change credits), and every change that staff make through our staff tools, including an attempt that is refused, is recorded in an append-only audit log. Our staff tools do not show your content (your prompts, files, chats, and generated output), and no staff permission gives access to it. Staff cannot invite themselves into your workspace.

Sales follow-up. When you sign up with a work email address, create a workspace, give your company website during onboarding, or contact our sales team, we research your company from public sources: we read the company website (through Exa), the company's public Instagram account (through RapidAPI), and we use an AI model (through Vercel AI Gateway) to summarize the company, its industry, size, and country. These providers receive the company domain and the public company information, not your email address. We then create or update your contact and company record in our CRM (HubSpot), with your name, email address, the company summary, how you found us, your Endless user id and, when analytics is on for you, your IP address and browser user agent for ad measurement (section 9). For a new lead, our sales team gets a notice in our internal messaging tool (Slack) with your name, email address, company, workspace name, and any message you sent us. When there is no company domain - for example, a personal email address such as Gmail and no company website - we do none of this, unless you contact our sales team.

5. AI assistants you connect

You can connect an AI assistant, such as ChatGPT or Claude, to Endless through our MCP server at mcp.endless.app. You sign in to Endless and approve the connection; the assistant then receives an access token that acts as your account. It can reach only what your account can see in the Endless app, and nothing in another workspace unless you are a member of it.

Through that connection the assistant can read: your account id and the workspaces you belong to, with your role in each; the assets, projects, chats, canvases and skills of the workspace you select; and the workspace's credit balance and your spending limit. It can also, on your instruction, save files you point it at into that workspace, from a public link or from a file you upload through it, and start work that spends the workspace's credits: transcribing a public video or audio link, generating images, video or audio, and retrieving public social-media data (profiles, posts, searches and trends). It cannot edit or delete existing content. It also chooses which workspace it acts on, a choice we keep for 90 days.

What the assistant reads is sent to it, and its provider (for example OpenAI or Anthropic) processes that data under its own terms and privacy policy, not ours. Work the assistant starts runs through the same subprocessors as in the app: a link you import is fetched from the site that hosts it; transcriptions and generations are processed by the AI inference providers listed on our Subprocessors page; and public social-media data is retrieved through RapidAPI, which receives the handle, link or search terms the assistant requests and nothing from your workspace.

For each tool call we record the tool name, the outcome, an error code if it failed, how long it took, your user id and the workspace id. We do not record the arguments the assistant sends or the results we return. We also send the same facts to our product-analytics provider. We keep these records while your account exists. When you delete your account, we delete them or irreversibly anonymize them, and we keep the anonymized records to measure usage. Our product-analytics provider keeps its copy for its retention period. A per-minute counter used for rate limiting expires after one minute.

To stop access, disconnect Endless in the assistant's settings. To revoke every access token issued to an assistant, or for any other request about this data, contact privacy@endless.app.

6. International data transfers

Endless and several of our subprocessors are located in the United States and other countries outside the EEA/UK. When we transfer personal data internationally we rely on appropriate safeguards - the EU-U.S. Data Privacy Framework where the provider is certified, and/or the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant) - together with additional technical and organizational measures.

7. Data retention and deletion

We keep personal data for as long as your account is active and as needed to provide the Service. You can move content to trash and restore it within 30 days; after 30 days, trashed assets and skills are deleted automatically.

Account deletion. You can delete your account from your account settings. When you do, your sign-in identity is deleted at our authentication provider. In our records, your name, email addresses, picture, username, language and time-zone details, and links to your MOD, Dual, and support accounts are removed, and your user id is replaced by a random anonymized identifier (a “del_” id). Our copy of your support conversations is deleted, and your contact at our customer-support provider is archived. A workspace where you are the only member is deleted with your account (see below); where you are the only admin, you first choose a new admin. Canvases you own are closed. Other content you created in a workspace that has other members stays in that workspace, because it belongs to the workspace.

Workspace deletion. A workspace admin can delete a workspace. When a workspace is deleted, no one can open it or its content any more; its name, address, and logo are removed; its identifier is replaced by a random anonymized identifier; and its customer record at our payments processor and its company record at our customer-support provider are deleted.

Records we keep after deletion. We keep anonymized usage records with no time limit: counts, statuses, durations, credits, and costs of chats, tool calls, generations, assets, and calls to AI and data providers. They hold no content, and the user and workspace ids in them are replaced by the same random anonymized identifiers. We keep the audit log of staff actions, with your ids anonymized in the same way. We also keep records where required for legal, tax, or security purposes. The error text of a MOD or Dual import, which can repeat parts of the imported data, is deleted 90 days after the import. Our database is backed up every 12 hours, and each backup is deleted after 2 days.

8. Your rights

Depending on where you live, you may have the right to:

• Access - obtain a copy of the personal data we hold about you.
• Rectification - correct inaccurate or incomplete data.
• Erasure - request deletion of your personal data (the “right to be forgotten”).
• Portability - receive your data in a structured, machine-readable format.
• Restriction and objection - limit or object to certain processing, including profiling and direct marketing.
• Withdraw consent - where processing is based on consent, without affecting prior processing.

To exercise any of these rights, contact privacy@endless.app. We will respond within the timeframe required by law. You also have the right to lodge a complaint with your local data-protection authority.

9. Cookies and analytics

We use strictly necessary cookies to keep you signed in and to secure the Service. We also use analytics cookies and similar technologies - for product analytics and session replay (PostHog) and, where enabled, website and marketing measurement (Google Analytics, Meta, and LinkedIn). In the EEA, the UK, Switzerland, and California, and whenever we cannot tell where you are, they run only after you accept them in our cookie banner. Elsewhere, they are on by default. Everywhere, you can change your choice at any time from “Cookie settings” in the footer, and we honor Global Privacy Control as a request to reject non-essential cookies.

When analytics is on for you and you are signed in, the Meta pixel also receives your email address and name, hashed in your browser before they are sent, and your Endless user id. When analytics is on for you, our servers also report sign-ups, checkouts, trial starts, purchases, sales inquiries, and changes to your status as a sales lead in our CRM to Google Analytics, Meta, and LinkedIn, through our own server-side tag manager. These reports can contain your hashed email address, your name, your Endless user id, your IP address, your browser user agent, and ad click identifiers. Meta and LinkedIn use this data to measure and improve our advertising, as independent controllers under their own terms and privacy policies.

10. Security

We use technical and organizational measures to protect personal data, including encryption in transit, scoped access controls, named staff permissions with an append-only audit log of staff changes, and least-privilege service credentials. No system is perfectly secure, but we work to protect your data and to notify you and the relevant authorities of qualifying breaches as required by law.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the Service evolves or the law changes. We will post the updated policy with a new effective date and, for material changes, provide additional notice in the Service.

13. Governing law

This policy and any dispute relating to it are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws rules. This does not deprive you of any mandatory data-protection rights under the law of your country of residence, including your right to lodge a complaint with your local supervisory authority.

14. Contact us

For any privacy question or request, contact privacy@endless.app.