Enlaye Privacy Policy

1. Introduction

This Privacy Policy applies to Enlaye, Inc., together with all of its subsidiaries, branches, and affiliates worldwide (“Enlaye,” “we,” “our,” or “us”). 
It governs the collection, use, and protection of personal and non-personal information across all Enlaye-operated websites, applications, and services, including www.enlaye.com, www.enlaye.app, and any other domain, subdomain, mobile application, or service operated by Enlaye.
It also applies to our applications and services distributed through third-party app stores, marketplaces, or similar platforms (“Platforms”). 
By using our websites, apps, or services, you agree to the terms of this Privacy Policy and confirm that you meet the age requirements.

​

2. Age Requirements

Our services are intended solely for users who are at least 18 years old. We do not knowingly collect personal information from individuals under 18. 
If we become aware that such information has been collected, we will delete it promptly. Parents or guardians who believe their child has provided personal information may contact us at privacy@enlaye.com.
In jurisdictions where the minimum legal age is higher than 18, we will comply with that requirement.

​

3. Information We Collect

We collect personal details such as your name, contact information, company name, job title, and professional credentials. Payment information is processed through third-party payment providers. 
We also collect technical data including your IP address, browser type, operating system, device identifiers, session duration, approximate location based on IP, log data, and usage metrics. 
Communication records, such as support tickets, emails, chat logs, and survey responses, may also be retained. 
Marketing preferences, event participation history, social media interactions, and opt-in status are recorded when relevant.

​

4. Legal Basis for Processing

We process personal data where necessary to perform a contract with you, in pursuit of our legitimate interests such as service improvement and security, to comply with legal obligations, with your consent for certain activities such as marketing, or where necessary to protect vital interests such as safety and security.

​

5. Methods of Collection

We collect information directly when you register an account, submit a form, participate in an event, or contact our support team. 
Automated technologies such as cookies, analytics tools, server logs, security monitoring, web beacons, SDKs, mobile advertising IDs, and third-party plugins also collect data when you use our services. 
We may receive data from third-party platform providers, public databases, social media platforms, or trusted business partners.

​

6. Use of Information & Data Usage Rights

We use your personal and company-provided information to provide and manage our services, process transactions, and communicate with you. 
We also use it to enhance our products, including developing artificial intelligence models based on both aggregated/anonymized and identifiable data where lawful. 
Information may be used for security, fraud prevention, compliance with legal obligations, marketing, event invitations, and platform integration requirements.
By using our Services, you grant Enlaye a worldwide, perpetual, irrevocable, transferable, sublicensable, and royalty-free license to collect, store, process, analyze, reproduce, modify, distribute, and otherwise use any data you provide or make available to us—whether personal, non-personal, or company-related—for any lawful business purpose, including without limitation product development, artificial intelligence model training, analytics, benchmarking, marketing, and other commercial purposes. Where required by law, such use will comply with applicable legal bases, consent requirements, and user rights as described in this Privacy Policy. All processing of personal data will occur only where a lawful basis under applicable data protection law exists.

​

7. Consent and Your Choices

You may withdraw your consent to marketing communications at any time. Cookie preferences can be managed through our cookie banner or your browser settings. 
You may opt out of analytics and marketing cookies without affecting your use of essential service features. 
We do not respond to “Do Not Track” (DNT) or Global Privacy Control (GPC) signals at this time, but you may manage data collection preferences through our opt-out tools and browser settings.

​

8. Sharing of Information

We share information with service providers who perform tasks on our behalf, such as hosting, analytics, or payment processing. 
When necessary for platform functionality, we may share data with providers including Autodesk, Procore, Fieldwire, InEight, and Microsoft (including SharePoint and OneDrive). 
We may also share data to comply with legal requirements, respond to lawful requests, or during business transfers such as mergers or acquisitions. 
If you are an employee of one of our customers, we may share usage data with your employer for performance, security, and service optimization purposes. 

Any third party with whom we share your data is required by contract to protect your information in a manner that is at least as protective as the standards set forth in this Privacy Policy.

​

9. External Links

Our Services may contain links to third-party websites. If you use these links, you will leave our Services. 
We are not responsible for the content, security, or privacy practices of those third-party sites. 
We encourage you to review the privacy policies of any site you visit before providing personal information.

​

10. Data Security

We employ technical and organizational measures such as encryption in transit and at rest, access controls, security audits, and multi-factor authentication for sensitive accounts. 
However, no method of transmission or storage is completely secure, and we are not responsible for breaches involving data controlled by third-party platform providers.

​

11. Data Retention

We retain account data while your account remains active and for up to seven years after closure. Transaction records are retained for seven years for compliance purposes, log data for twelve months for security and analytics, and marketing data until you withdraw consent or after two years of inactivity.
Retention periods are determined based on the nature and sensitivity of the data, legal requirements, and business needs.

​

12. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your data, request data portability, and object to certain processing. 
California, European Union, and other applicable state or national privacy laws may grant additional rights, such as opting out of the sale of personal information or withdrawing consent at any time. 
Requests can be made by emailing privacy@enlaye.com. We will verify your identity before processing requests and respond within 30 days, or 45 days for complex cases.

​

13. Complaints

If you have concerns about how we process your data, you may contact us at privacy@enlaye.com. 
If you are based in certain jurisdictions, you may also have the right to lodge a complaint with your local supervisory authority.

​

14. International Data Transfers

We may transfer your data internationally using lawful mechanisms such as standard contractual clauses, adequacy decisions, or binding corporate rules. 
By using our services, you consent to the transfer and processing of your data in countries outside of your residence, subject to applicable laws.

​

15. Cookies and Similar Technologies

We use essential cookies for core functionality, functional cookies for enhanced features, analytics cookies to understand usage, and marketing cookies for relevant advertising. 
We may also use web beacons, SDKs, and mobile advertising IDs to improve service performance. 
You can manage your preferences through our cookie banner, browser settings, or opt-out tools provided by the Network Advertising Initiative (NAI) and Digital Advertising Alliance (DAA).

​

16. Third-Party Services and Platforms

When our services integrate with third-party platforms, we and the platform provider act as independent data controllers. Each is responsible for its own data practices.

​

17. Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity with appropriate safeguards and notice.

​

18. Security Incidents

In the event of a data breach affecting your information, we will notify you and relevant authorities as required by law.

​

19. Limitation of Liability and Indemnification

To the maximum extent permitted by law, Enlaye is not liable for any damages arising from the acts, omissions, or practices of platform providers. 
Our total liability for privacy-related claims is limited to the amount you paid us in the twelve months preceding the claim, or one hundred dollars, whichever is greater. 
You agree to indemnify Enlaye against any claims resulting from your misuse of our services, violation of this policy, or breach of applicable laws.

​

20. Intellectual Property Protection and Usage Restrictions

No party is permitted to reproduce, reverse engineer, scrape, extract, train AI models on, or otherwise misuse Enlaye’s content, data, or services without prior written consent. 
Circumvention of security measures is strictly prohibited. We reserve the right to seek injunctive relief, damages, and recovery of legal costs for violations.

​

21. DMCA Compliance

We respect intellectual property rights and comply with the Digital Millennium Copyright Act. 
Copyright infringement notices should be sent to our DMCA Agent at dmca@enlaye.com, Enlaye, Inc., 125 Western Avenue, Boston, MA 02163, USA.

​

22. Dispute Resolution

This Privacy Policy is governed by the laws of the State of Delaware, without regard to conflict of law principles. 
Any disputes shall be resolved in the state or federal courts located in Massachusetts, USA. 
For disputes involving claims under $10,000, you may elect binding arbitration under the rules of the American Arbitration Association, to be conducted in Boston, Massachusetts, or remotely at your option. 
Class or representative actions are not permitted.

​

23. Changes to Privacy Policy

We may update this policy at any time. Material changes will be announced at least thirty days in advance, and your continued use of our services after such changes constitutes acceptance of the revised terms.

​

24. Precedence Over Other Agreements

In the event of any inconsistency between this Privacy Policy and any other agreement you may have with Enlaye, the terms of this Privacy Policy will govern with respect to the collection, use, and sharing of your personal and company data, unless expressly stated otherwise in such agreement.

​

25. Contact Information

For privacy inquiries, email privacy@enlaye.com. For general inquiries, email contact@enlaye.com. 
Our mailing address is Enlaye, Inc., 125 Western Avenue, Boston, MA 02163, USA.

​

Where we process personal data on behalf of our customers, we act solely as a processor in accordance with the customer’s instructions and applicable data protection agreements.