Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your email address, name, and password.
• Profile Information: Optional information you provide such as company name, job title, or profile picture.
• Content Data: Projects, diagrams, code, and other content you create, upload, or store within EcosystemCode.
• Payment Information: If you subscribe to a paid plan, we collect billing information through our payment processor (we do not store full credit card numbers).
• Communications: Information you provide when you contact us for support or feedback.

1.2 Information Collected Automatically

• Usage Data: Information about how you interact with the Service, including features used, pages viewed, and actions taken.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Log Data: Server logs that record requests made to our Service, including timestamps and referring URLs.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage patterns.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To operate, maintain, and provide the features of the Service.
• Account Management: To create and manage your account and authenticate your access.
• Communication: To respond to inquiries, send service-related notices, and provide customer support.
• Improvement: To analyze usage, diagnose technical issues, and improve the Service.
• Billing: To process payments and manage subscriptions.
• Security: To detect, prevent, and address fraud, abuse, and security issues.
• Legal Compliance: To comply with legal obligations and enforce our terms.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., hosting, payment processing, analytics), subject to confidentiality obligations.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Protection of Rights: To protect the rights, property, or safety of Ecosystem.AI, our users, or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case your information may be transferred.
• With Your Consent: When you have given us explicit consent to share your information.

4. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly (e.g., authentication).
• Analytics Cookies: Help us understand how users interact with the Service.
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. We may retain certain information after account deletion as required by law or for legitimate business purposes, such as resolving disputes, enforcing agreements, and complying with legal obligations. Upon request, we will delete or anonymize your personal information unless retention is required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal exceptions.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications at any time.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us at amy@ecosystem.ai.

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information is collected, used, shared, or sold.
• The right to delete personal information held by us and by our service providers.
• The right to opt out of the sale or sharing of personal information (we do not sell your personal information).
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.
• The right to limit use and disclosure of sensitive personal information.

To make a request, contact us at amy@ecosystem.ai. We will verify your identity before processing your request.

8. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We implement appropriate safeguards for international transfers, including standard contractual clauses where required.

10. Third-Party Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Service.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we may also provide notice via email or through the Service. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Governing Law

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: