Privacy Policy

Edessa is a product of ElevaiteWorks LLC ("Edessa," "we," "us"). We help small teams document how their business runs so their team and their AI can both follow it. This page explains what data we collect, how we use it, and the choices you have.

What we collect

• Account info. Name, email, and password when you sign up. If you use Google sign-in, your name and profile photo from your Google account.
• Workflows you create. The screen recordings, voice narrations, generated workflows, knowledge-base resources, and documents you upload or create in Edessa.
• Usage data. Standard server logs (IP address, user agent, request timestamps) needed to operate the service.
• Billing info. Payment is handled by Stripe. We never see or store your full card number; Stripe handles all card data.

How we use it

• To provide the product: store your workflows, generate the AI outputs you ask for, deliver invite emails.
• To support you: respond to your questions and fix bugs.
• To bill you: process payments via Stripe.
• To secure the product: detect abuse, throttle when needed.

What we do not do

• We do not sell your data.
• We do not use your workflows or recordings to train AI models.
• We do not read your workflows except when you explicitly ask for support.

AI processing

When you record a workflow, Edessa sends your recording to AI providers (currently Anthropic and Google) for transcription, step extraction, and gap auditing. Those providers process your data on our behalf under their own privacy and security terms and do not train their models on your data. You can read more on each provider's site.

Where data is stored

Edessa runs on infrastructure provided by Vercel (United States) and Supabase (United States). Database, file storage, and computation happen in those environments. All data is encrypted in transit and at rest by these providers.

Your choices

• Access & export. Workflows can be exported to Claude, ChatGPT, Cursor, and other AI tools from inside Edessa.
• Deletion. Email thaddeus@elevaiteworks.com from your account's email to request deletion. We remove the organization, its members, all workflows, and the auth records within 30 days.
• Marketing email. Transactional emails (invites, billing) are not opt-out. We do not currently send marketing emails to Edessa users.

Children

Edessa is not directed at children under 13 and we do not knowingly collect data from them.

Changes

We may update this policy. If we change anything material, we'll announce it in-app or by email. The "Last updated" date at the top always reflects the current version.

Contact

Questions or requests? Email thaddeus@elevaiteworks.com.

ElevaiteWorks LLC
2108 N St, Ste N, Sacramento, CA 95816
United States