Legal
Privacy Policy
Ensemblis is a free public demo of an AI operating layer for business, operated by an individual based in Spain. This page explains, in plain language, what personal data it handles and what you can do about it.
In short
- We collect only what's needed to operate the demo: your account details, the objectives, Company Context and documents you provide, the AI results, and your usage history.
- The text of your objectives — with the relevant Company Context, document passages and memory — is sent to our AI provider (a third-party AI model provider) to generate results.
- No advertising, no ad trackers, no selling of data. Your browser stores a login token so you stay signed in.
- You can ask for a copy of your data or for it to be deleted at any time by writing to support@ensemblis.com.
1. Who is responsible
The data controller is the individual who operates this Ensemblis demo, based in Spain (European Union). Ensemblis is a personal project, not a registered company. You can reach the operator at support@ensemblis.com.
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account details — name, email, and optionally company and role | To create your account, sign you in and show your profile | Performing our agreement with you (Art. 6(1)(b)) |
| Password — stored only as a one-way hash, never in readable form | To secure your account | Art. 6(1)(b) |
| Objective content — objectives, success criteria, plans, AI-generated outputs, evidence, verification results, and recurring objectives you set up | To execute your objectives and show you the results | Art. 6(1)(b) |
| Usage records — which executions took place, when, their cost, top-ups and refunds | To operate your usage balance, apply fair-use limits and prevent abuse | Art. 6(1)(b) and our legitimate interest in keeping the service working (Art. 6(1)(f)) |
| Company Context and memory — the business profile, documents and website you provide, and learnings you confirm | To ground your objectives in your business. Documents are passed to the AI as untrusted data, not as instructions. | Art. 6(1)(b) |
| Technical logs — IP address, browser type and request times, recorded by the hosting infrastructure | Security, debugging and preventing abuse | Legitimate interest (Art. 6(1)(f)) |
We don't ask for, and you shouldn't submit, sensitive data (health, religion, political views, etc.) or other people's personal data. See the Terms.
3. What's stored in your browser
We don't use advertising or analytics trackers. The site stores only what it needs to work:
- A login token in your browser's local storage, so you stay signed in. Logging out removes it.
- Small preferences such as your light/dark theme choice, which notifications you've read, and whether you closed the demo banner.
These are strictly necessary for the service you asked for, so they don't require a consent banner.
4. Who receives your data
We never sell your data or use it for advertising. To operate the demo we rely on a few service providers who process data on our behalf:
- Hosting provider — serves the website and the application server.
- Database provider — stores accounts, objectives, Company Context, memory, results and usage records.
- AI provider: a third-party AI model provider — when an objective is executed, its description, relevant context and the intermediate steps are sent to this provider so its models can generate the result. The provider processes that text under its own API terms.
Some of these providers may process data outside the European Economic Area (for example in the United States). When that happens, the transfer relies on the safeguards the provider offers, such as the EU Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. You can ask us which providers are used at any time.
We may also disclose data if the law requires it.
5. How long we keep it
- Account data, objectives, Company Context, memory and results are kept while your account exists. You can edit or delete documents and memory items at any time.
- You can ask for your account and everything in it to be deleted at any time. We'll do it within 30 days; residual copies in backups expire on their normal cycle.
- Because this is a demo, data may be reset or deleted at any time, and everything is deleted if the demo is shut down.
- Technical logs are kept only briefly by the hosting infrastructure, as part of its normal operation.
6. Your rights
Under the GDPR and Spain's data-protection law (LOPDGDD) you can ask to:
- Access your data and get a copy of it (including in a portable format).
- Rectify inaccurate data — you can also edit your profile yourself in Settings.
- Erase your data and close your account.
- Object to or restrict processing based on legitimate interest.
Write to support@ensemblis.com from the email address on your account. We'll reply within one month. If you're unhappy with our answer, you can complain to the Spanish data-protection authority, the Agencia Española de Protección de Datos (AEPD), or to the authority in your own EU country.
7. Security
Passwords are hashed, traffic is encrypted over HTTPS, and access to the database is restricted to the operator. No online service is perfectly secure, though — another reason not to put confidential information into a public demo.
8. Age
The demo is intended for adults (18+) evaluating it for work. Please don't use it if you're younger.
9. Changes to this policy
If this policy changes, we'll update the date at the top of the page. For significant changes we'll let account holders know.
See also our Terms of Use. Questions? Write to support@ensemblis.com.