Privacy Policy

Last Updated: 29 September, 2025

Table of Contents

At Elegant Intelligence (Eligient), your privacy is important to us. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, products, and services (collectively, the "Services"). By using our Services, you consent to the practices described in this Privacy Policy.

1. Definitions

"Input" means any content, data, or instructions you submit to the Services.

"Output" means any content, contracts, text, or materials generated by the Services based on your Input.

"Personal Data" means any information relating to an identified or identifiable natural person.

"Controller" means the entity that determines the purposes and means of processing Personal Data. For most services, Eligient acts as a Controller.

"Processor" means the entity that processes Personal Data on behalf of the Controller. Eligient may act as a Processor when handling data on your behalf.

"Third-Party Services" means services, software, data, APIs, or platforms provided by third parties and integrated with our Services

2. Information We Collect

We may collect the following types of information:

Personal Information

Information you provide directly, such as your name, email address, billing information, and account details.

Usage Information

Data about how you interact with our Services, including log files, device identifiers, browser type, IP address, and cookies.

Content & Output

Inputs you provide (such as text or contract information) and AI-generated outputs ("Output").

Third-Party Data

Information received from third-party services or integrations that you choose to use with Eligient.

3. How We Use Your Information

We use your information for the following purposes:

To Provide and Maintain the Services

To operate, secure, and improve our Services, including generating and delivering Output.

To Process Transactions

To manage your subscription, process payments, and send related information.

To Communicate with You

To send service-related announcements, technical notices, updates, and support messages.

For Research and Development (R&D)

As an experimental Minimum Viable Product (MVP), we use your Input, Output, and usage data to train our AI models, conduct research, and enhance the performance and capabilities of our Services. This is a core function of our MVP.

For Compliance and Security

To comply with legal obligations, enforce our Terms of Service, and protect the rights, property, or safety of Eligient, our users, or the public.

5. How We Share Information

Eligient does not sell your Personal Data. We may share it in the following limited circumstances:

With Service Providers and Processors

We share data with trusted third-party vendors who process data on our behalf to provide the Services. These entities are contractually bound as Processors and are prohibited from using your data for any other purpose. This category includes:

• Cloud hosting and infrastructure providers.

• Payment processing services.

• Analytics and performance monitoring tools.

Third-Party AI Models and LLMs

Your Input is processed by third-party Large Language Models (LLMs) that act as sub-processors to generate Output. These providers are under contractual obligations that include data protection commitments.

With Our Affiliated Law Firm

We may share data with our affiliated law firm strictly for operational purposes and to support the Services, under strict confidentiality and data processing agreements.

For Legal Reasons

We may disclose data if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to protect the security or integrity of our Services; or to protect the rights, property, or safety of Eligient, our users, or the public.

6. Third-Party Processing

We may engage trusted third-party service providers ("Processors") to host, store, or otherwise process data on our behalf. While we require such Processors to implement appropriate technical and organizational measures consistent with applicable data protection laws, you acknowledge and agree that:

• Each Processor is solely responsible for its own acts, omissions, security practices, and compliance with applicable data protection obligations, including but not limited to the GDPR, CCPA, and any international transfer requirements.

• Eligient does not warrant or guarantee the performance, availability, or security of any Processor and disclaims liability for any loss, misuse, or unauthorized access arising from a Processor's failure to comply with its obligations.

• By using the Services, you consent to such third-party processing and agree that your recourse in respect of any data incident attributable to a Processor shall be solely against that Processor, and not against Eligient.

7. International Data Transfers

As an MVP, our Services rely on third-party subprocessors, such as cloud providers and Large Language Models (LLMs), which may be located in various countries around the world. Consequently, your Personal Data may be transferred to and processed in a country outside of the one in which you reside.

Personal Data from the European Economic Area (EEA), the United Kingdom (UK), and Switzerland may be transferred to other countries that may not have been deemed by the European Commission to provide an adequate level of data protection.

When we engage in such transfers, we rely on lawful transfer mechanisms to ensure your data is protected. This includes, primarily, the Standard Contractual Clauses (SCCs) approved by the European Commission (under Implementing Decision 2021/914). Where necessary, we supplement these clauses with other safeguards, such as Transfer Impact Assessments, to ensure your data remains protected.

8. Data Security

We use reasonable technical, administrative, and organizational measures to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

10. Your Data Subject Rights (EU/UK)

Under the GDPR, UK GDPR, and other applicable data protection laws, you have rights regarding your Personal Data. These include:

The Right of Access

You have the right to access the data collected about you.

The Right to Know

You can request detailed information about the specific categories and specific pieces of Personal Data we have collected, used, or disclosed over the past 12 months.

The Right to Rectification

You have the right to rectify or update inaccurate or incomplete Personal Data.

The Right to Erasure ('Right to be Forgotten')

You have the right to request the erasure of your Personal Data under specific conditions prescribed by law.

The Right to Restriction of Processing

You have the right to request that we limit the processing of your Personal Data in certain circumstances.

The Right to Object

You have the right to object to the processing of your Personal Data, as allowed by applicable law.

The Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time.

The Right to Data Portability

You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.

A. Exercising Your Rights

To exercise any of these rights, please send an email to privacy@eligient.co.uk. To protect your privacy and for security purposes, we will need to verify your identity before processing your request, which may require us to request additional information from you.

B. Complaints

Depending on your region, you have the right to lodge a complaint with your local Data Protection Authority. Users from the United States can find authority contacts on the Federal Trade Commission website, European users on the European Data Protection Board website, and UK users on the Information Commissioner's Office website.

We aim to respond to all legitimate requests within one month, in compliance with legal requirements. Please note that we may retain certain information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, or for the establishment, exercise, or defense of legal claims.

11. AI and Data Processing Disclaimer

Our Services are an experimental MVP. The AI-generated Output may be inaccurate, incomplete, or unsuitable for your situation and is not a substitute for professional legal advice. You are solely responsible for reviewing and validating any Output before use. By using the Services, you acknowledge and consent to the use of your data for R&D as described herein.

12. Children's Privacy

Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from minors. If we become aware of such data, we will delete it promptly.

13. US State Privacy Laws

This section supplements our Privacy Policy and provides specific information for residents of states with comprehensive data privacy laws, such as California, Colorado, Connecticut, Virginia, and others. This section uses the term "personal information" as defined under these respective state laws.

A. Your State Privacy Rights

Depending on your state of residence and subject to certain legal limitations, you may have the following rights:

• Right to Know & Access: The right to request confirmation of whether we are processing your personal information and to obtain a copy of that information, in a portable format.

• Right to Correction: The right to correct inaccuracies in your personal information.

• Right to Deletion: The right to request the deletion of your personal information, with certain exceptions as required by law (e.g., for completing transactions, security, or compliance).

• Right to Opt-Out: The right to opt-out of the following:

- The "sale" of personal information.

- The "sharing" of personal information for cross-contextual behavioral advertising.

- Profiling in furtherance of decisions that produce legal or similarly significant effects.

• Right to Limit Use of Sensitive Data: The right to limit the use and disclosure of your sensitive personal information, where applicable.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

B. How to Exercise Your Rights

To submit a request to know, correct, or delete your personal information, please contact us at privacy@eligient.co.uk.

To opt-out of the "sharing" of your personal information for targeted advertising, you may submit a request via the same email or, where available, use the "Your Privacy Choices" link in the footer of our website or a universal opt-out mechanism like the Global Privacy Control (GPC).

We will respond to verifiable requests within the timeframes required by law. We may need to verify your identity, which could involve requesting additional information, before processing your request. You may also use an authorized agent to exercise your rights on your behalf, provided you provide signed permission for the agent to act.

C. Notice at Collection & Our Practices

The categories of personal information we collect, the purposes for collection, and the categories of third parties with whom we share this information are described in detail in Sections 1, 2, and 5 of this Privacy Policy.

In the preceding 12 months, we have disclosed identifiers, commercial information, internet activity, and inferences for business purposes to our service providers (e.g., cloud storage, analytics, and LLM processors). As defined by the California Consumer Privacy Act (CCPA), we may "share" identifiers and internet activity with advertising partners. We do not "sell" your personal information in the traditional sense.

D. State-Specific Disclosures

California "Shine the Light": California Civil Code § 1798.83 permits customers who are California residents to request certain details about how their personal information is shared with third parties for direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes.

California Minors: If you are a California resident under the age of 18, you may request removal of content or information you have publicly posted. Please note that removal does not ensure complete or comprehensive deletion from our systems or those of our service providers.

Appeal Process (CO, CT, VA): If we deny your request, you have the right to appeal the decision. We will provide information on how to submit an appeal in our response.

Nevada: We do not engage in the "sale" of "covered information" as defined under Nevada law.

For any questions regarding these state-specific rights, please contact us at privacy@eligient.co.uk

14. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website, and your continued use of the Services constitutes acceptance of the revised Policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:

Email: privacy@eligient.co.uk