Privacy Policy

This Privacy Policy explains how Ergoly Inc ("Ergoly", "we", "us") collects, uses, and shares personal information when you visit www.ergoly.ai (the "Site") or use the Ergoly platform (the "Service").

It covers both, but they work differently, and the difference matters. For the Site and for our own business relationships, we decide why personal information is used — we are the controller, and this policy is the full description. For the content our customers connect to the Service — their messages, files, and their own clients' information — our customers decide, and we act only on their instructions. There we are a processor, and Section 5 explains what that means for you.

1. Who we are

Ergoly Inc is a Delaware corporation at 251 Little Falls Drive, Wilmington, DE 19808, United States. For any privacy question, or to exercise a right described in Section 10, write to legal@ergoly.ai.

2. Information we collect

Information you give us

• Early access and waitlist. Your email address, and the optional note you write about what you would want a worker to do.
• Applications and enquiries. Anything you send when you apply for a role, ask for investor material, or email us.
• Account information. The name, email address, and workspace identifiers used to create and sign in to an Ergoly account.
• Billing information. The billing contact and company details needed to invoice a subscription. Card details are entered with, and held by, our payment processor. We never receive or store full card numbers.

Information we collect automatically

• Server logs. IP address, browser and device type, pages requested, and timestamps, recorded by our hosting provider in the ordinary course of serving the Site.
• Attribution information. Where a visit came from — campaign parameters in the link you followed, the referring page, your device type, and the page you were on when you submitted a form.

The Site uses only the cookies and local storage needed to make it work. We do not use analytics, advertising, or cross-site tracking cookies, and there is no third-party advertising technology on the Site.

Interactive demonstrations

Parts of the Site let you try a worker. What you type into those demonstrations is sent to our model provider to generate a response. Please do not enter confidential information or anyone else's personal information into a demonstration.

3. How we use information

• To provide, operate, secure, and support the Site and the Service.
• To respond to enquiries, applications, and support requests.
• To tell you about early access, product changes, and other things we think are relevant. Every marketing email has an unsubscribe link.
• To invoice and collect fees, and to keep accounting records.
• To understand which pages and campaigns bring people to the Site, in aggregate.
• To detect and prevent fraud and abuse, to enforce our terms, and to comply with legal obligations.

4. Our legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract to provide the Service to you or your company; legitimate interests in operating, securing, and improving our business, and in contacting companies that may want what we build; consent where we ask for it, which you may withdraw at any time; and compliance with legal obligations.

5. Customer content we process for our customers

When a customer deploys an Ergoly worker, that worker reads and writes content in the systems the customer connects to it — for example Slack conversations, Google Workspace documents, calendar events, and the other tools the customer chooses. That content may include personal information about the customer's own staff and about the customer's clients.

For that content, the customer is the controller and we act only on the customer's documented instructions, under our customer agreement and, where signed, a Data Processing Agreement. In particular:

• We do not train on it. We do not use customer content to train, fine-tune, or otherwise develop any foundation model or any machine learning model whose outputs are made available to anyone else, and our providers are contractually held to the same restriction.
• It stays in its own workspace. What a worker learns is scoped to that customer's workspace and, within it, to the individual client workspace. It is not shared across customers.
• It is deleted when the agreement ends, except where we are required by law to keep it.

If you are an employee or a client of an Ergoly customer and want access to, correction of, or deletion of that content, please contact that company. They control it, and we will support them in responding. If you contact us instead, we will pass the request on.

6. Who we share information with

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose it only as described here.

Providers that may process customer content

• Cloud hosting and application delivery
• Database and storage
• Identity and authentication
• Large language model inference
• Integration infrastructure connecting the Service to third-party tools
• The tools each customer chooses to connect, such as Slack and Google Workspace, which the customer directs us to access on their behalf

The current list of these providers, by name, is available to customers on request and is maintained under our Data Processing Agreement, which requires advance notice of changes.

Providers that process our own business information

• Customer relationship management, for enquiries and early-access signups
• Business productivity and email
• Payment processing and billing
• Contract management and electronic signature

Other disclosures

We may disclose personal information to professional advisers, to comply with law or valid legal process, to protect the rights and safety of Ergoly and others, and to a buyer or successor in connection with a merger, financing, or sale of assets. If the latter happens, we will say so before your information becomes subject to a different privacy policy.

7. International transfers

Ergoly is based in the United States, and personal information we hold is processed there. Where we transfer personal information out of the EEA, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses, together with the UK Addendum where applicable, as incorporated into our Data Processing Agreement. You may request a copy of the safeguards we use by writing to legal@ergoly.ai.

8. How long we keep information

We keep personal information for as long as needed for the purposes described in this policy: for the life of an account and a reasonable period afterwards, for as long as a business relationship or enquiry is live, and for longer where tax, accounting, or other legal obligations require it. Customer content is deleted after the customer agreement ends, as described in Section 5. When information is no longer needed, we delete it or render it anonymous.

9. Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and at rest, application-layer encryption of credentials for connected services, authentication through a managed identity provider, access scoped per organization and per client workspace, least-privilege access for our personnel, and logging of application and access events. We notify affected customers of a security incident without undue delay, and in any event within 72 hours of becoming aware of it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to object to or restrict certain processing, to withdraw consent, and to opt out of marketing. Residents of California and other US states with comparable laws also have the right to know what we collect and disclose, to delete, to correct, to opt out of any sale or sharing — we do neither — and not to be discriminated against for exercising a right.

To exercise any of these, write to legal@ergoly.ai. We will respond within the time the applicable law allows, and we may need to verify your identity first. An authorized agent may make a request on your behalf with proof of authority. If you are in the EEA or the UK and are not satisfied with our response, you may complain to your local supervisory authority.

11. Children

The Site and the Service are for businesses. They are not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, write to legal@ergoly.ai and we will delete it.

12. Other sites

The Site links to sites we do not operate. This policy does not cover them, and we are not responsible for their practices.

13. Changes to this policy

We may update this policy. When we do, we will change the date at the top, and for material changes we will give notice by email or in the Service before the change takes effect.

14. Contact us

Ergoly Inc
251 Little Falls Drive, Wilmington, DE 19808, United States
legal@ergoly.ai

For the terms that govern use of the Service, see our Terms of Service.