Privacy Policy

Boostify, a Danish sole proprietorship registered under CVR 44697327, c/o Christian Nymark Jensen, Vestre Alle 1, 4. th, 9000 Aalborg, Denmark, operates Eloquend and is the controller of the personal data described in this Policy (“Eloquend,” “we,” “us,” or “our”). You can contact our support and privacy channel at support@eloquend.com or send formal legal notices to chris@eloquend.com, or call +45 61 61 67 61 Monday–Friday, 09:00–16:00 Danish time (CET/CEST), excluding Danish public holidays. Voicemail is available outside those hours.

This Policy applies to Eloquend’s website and application. It does not govern LinkedIn, Google, Stripe, or another third-party service you choose to use; those services process data under their own notices.

If a Business User acts as a controller or processor and submits personal data for Eloquend to process on its or a client’s behalf, Eloquend acts as processor or subprocessor for that content under our Data Processing Addendum. The Business User remains responsible for its authority, instructions, purpose, lawful basis, and notices. This Policy still applies to Account, security, billing, analytics, legal, and other data for which Eloquend determines the purposes and means of processing.

Where the EU or UK GDPR applies, we rely on the legal bases below. The same purposes describe our use of personal data elsewhere.

The account, authentication, and core content data requested during sign-up and use is needed to provide Eloquend. Optional profile fields, LinkedIn connection, voice input, and Google sign-in are not required. We do not use solely automated decision-making that produces legal or similarly significant effects about you.

An Eloquend user may include information about another person in a prompt, draft, file, voice input, or publishing request. The information generally comes from that user rather than from you. It may include your name, professional or contact details, public profile information, correspondence, opinions, voice, image or likeness, or other information the user chooses to supply. Eloquend is not designed for children’s data or special-category or similarly sensitive personal data.

Where a Business User determines the purpose and means of this processing, that Business User is the controller and Eloquend is its processor or subprocessor. Contact the Business User first about its purpose, lawful basis, and use of the result. Where Eloquend acts as an independent controller for incidental third-party data, we process it under Article 6(1)(f) only to fulfil the user-directed request and operate the feature, subject to the safeguards described above.

The information may be disclosed to the infrastructure and AI providers listed in “How we disclose personal data,” and to LinkedIn only if the user directs publication. Provider and Eloquend retention follows “How long we keep personal data.” You may ask for access, correction, deletion, restriction, or objection and may complain to a supervisory authority using the contact and rights information below. This public section is Eloquend’s general Article 14 notice where direct individual notice would involve disproportionate effort. If Eloquend directly contacts you or reuses the information beyond the user’s immediate request, we will provide direct notice before or when that first contact or additional use occurs, unless law provides an exception.

To generate text, Eloquend sends the prompt and only the profile settings and existing content needed for the requested feature through Vercel AI Gateway. The current workflow routes Claude directly to Anthropic as the primary route and routes GPT through Microsoft Azure as the fallback route. Image prompts and voice recordings are sent directly to OpenAI for image generation and transcription.

• Eloquend does not use private user content to train its own foundation model and does not opt in to provider training. Every text-generation request requires Zero Data Retention, disallows prompt training, is pinned to an approved provider, and does not enable prompt caching.
• Vercel AI Gateway and the selected text provider receive the input, relevant context, technical request metadata, and generated output. Under the configured ZDR routes, they do not retain prompt or output content after the request. Limited service metadata, such as model, provider, token counts, timing, and status, may be processed without prompt or output content.
• Direct OpenAI image generation is not covered by Eloquend’s text ZDR routing. OpenAI may retain image inputs and outputs for up to 30 days for abuse monitoring, with longer retention where required for safety or law. Direct transcription requests have no application-state or abuse-monitoring retention under OpenAI’s current endpoint controls. Eloquend holds raw voice audio only in request memory and retains limited transcription event metadata for 7 days.
• Eloquend stores drafts, generated outputs, transcripts, and associated files in your account when the product saves or auto-saves them. Saved account content follows the account-content retention period below.
• If browser speech recognition is used as a fallback, your browser or operating-system provider may process audio under its own terms and privacy notice.
• AI output can be incorrect or unexpected. Review it before publishing, especially where it refers to people or contains factual claims.

Google sign-in and LinkedIn publishing are optional. When you choose one, the provider receives the information needed to complete authentication or the requested publishing action and independently processes data under its privacy notice.

Eloquend uses LinkedIn’s OAuth flow and official API. We receive the limited profile and token data listed above and keep OAuth tokens in a server-restricted store. We do not receive your LinkedIn password, messages, or connection list. We use the connection to publish or schedule content only when you direct us to do so. You can disconnect LinkedIn in Settings; you can also revoke access in LinkedIn.

Content published to LinkedIn becomes subject to your LinkedIn settings and LinkedIn’s own processing. Deleting content or your Eloquend account does not automatically remove a post that has already been published on LinkedIn.

Eloquend uses strictly necessary cookies for Supabase authentication and short-lived security cookies for actions such as LinkedIn OAuth and legal-document acknowledgement. Blocking them can prevent sign-in or connected features from working. A theme preference and limited session-only performance or fallback hints may be stored in your browser. These items are not used for advertising.

For signed-in product events, Eloquend sends a Supabase account UUID and limited event properties to PostHog EU, such as onboarding completion, content generation, scheduling, publishing, LinkedIn connection, or checkout creation. We do not send prompts, post text, email addresses, names, file contents, or full URLs as analytics properties.

Eloquend suppresses browser and server PostHog analytics for requests identified as originating in the United Kingdom. Vercel derives a transient two-letter country code from the request for this control. Eloquend does not retain that code or send it to PostHog. In production, analytics is also suppressed when the country code is unavailable.

Eloquend honors browser Do Not Track for browser analytics and stops browser analytics when Global Privacy Control is enabled. We do not allow third parties to collect your activity across unrelated websites on Eloquend for behavioral advertising. No advertising cookies, session replay, heatmaps, or ad pixels are enabled.

We disclose personal data only as needed for the purposes in this Policy. We do not sell personal data or share it for cross-context behavioral advertising.

• We may disclose information to professional advisers, auditors, insurers, or authorities when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or establish or defend legal claims.
• If Eloquend is involved in a merger, financing, reorganization, acquisition, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to confidentiality and applicable-law requirements.
• We may use information that has been aggregated or anonymized so that it no longer identifies a person. This Policy does not restrict information that is no longer personal data.

Eloquend uses providers that operate in the European Economic Area, the United States, and other countries. PostHog is configured for EU Cloud, but other service providers and their subprocessors may process data outside your country.

Where European data-protection law applies to a transfer outside the EEA, we use an available lawful transfer mechanism, such as an adequacy decision (including the EU–U.S. Data Privacy Framework where applicable), the European Commission’s Standard Contractual Clauses, and supplementary safeguards where appropriate. Contact us if you want information about the safeguard used for a particular transfer.

We keep personal data only for the period needed for the purpose collected, including providing the service, meeting legal obligations, resolving disputes, and maintaining security. The service uses the following periods and criteria:

Deletion from active systems may not immediately remove restricted copies in disaster-recovery backups. Those copies remain protected, are not used for ordinary business purposes, and are removed as backups rotate. We may retain limited information for longer when law requires it, a legal claim is active, or deletion would impair security or the rights of another person.

We use technical and organizational safeguards appropriate to the nature of the service. These include encrypted transport, provider encryption at rest, private user-file buckets, row-level database access controls, server-restricted OAuth tokens and billing writes, signed short-lived file access, scoped secrets, request-origin checks, content security policies, dependency and vulnerability checks, sanitized logs, and controlled deletion and export workflows.

No online service can guarantee absolute security. Protect your password and connected accounts, use a unique password, keep your devices secure, and contact us promptly if you suspect unauthorized account access.

Depending on where you live and subject to legal limits, you may have the right to:

• access personal data and receive information about how it is used;
• correct inaccurate or incomplete personal data;
• delete personal data;
• restrict or object to processing, including processing based on legitimate interests;
• receive data you provided in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible;
• withdraw consent at any time where a processing activity relies on consent, without affecting earlier lawful processing; and
• complain to a competent data-protection authority.

You can edit many profile fields, disconnect LinkedIn, manage billing, export account data, or request account deletion from Settings. You may also email support@eloquend.com. We may need to verify your identity and clarify the scope of a request. We will respond within the period required by applicable law; under the GDPR this is generally one month, subject to permitted extensions.

Rights are not absolute. For example, we may retain accounting records required by law or decline a request that would adversely affect another person’s rights. You will not receive discriminatory treatment for exercising a privacy right. If you disagree with our response and local law provides an appeal, reply to our decision and ask us to review it.

If you are in the EEA, you may complain to the supervisory authority where you live, work, or believe an infringement occurred. In Denmark, the authority is Datatilsynet (the Danish Data Protection Agency).

Eloquend is a professional content-creation service for adults and is not directed to anyone under 18. We do not knowingly permit an Account for or collect personal data directly from a person under 18. If you believe a person under 18 has provided personal data to Eloquend, contact us so we can investigate and delete it where appropriate.

We may update this Policy when the service, vendors, or legal requirements change. We will post the revised version here and update the date and version above. If a change materially affects how we use personal data, we will provide additional notice before it takes effect, such as an in-product or email notice, when required. If consent is legally required for a new use, we will request it rather than treating silence as consent.