Privacy Notice

1. Who is responsible

C-Prio Ltd is the controller of personal data processed to provide EninTree. Company number: 14298401. Registered office: Arise Innovation Hub, Alan Cherry Drive, Chelmsford, Essex, England, CM1 1QT. Privacy contact: jiahui@c-prio.com.

2. Scope

This notice applies to the EninTree website, beta web application, accounts, support and feedback. It does not govern third-party websites reached through external links.

3. Data we process

• Account and profile data, including name, email address, optional mobile number, identifiers, password hash and authentication/session records.
• Content you provide, including Tree pages and nodes, notes, prompts, AI outputs, evidence, files, media, contacts, feedback and related metadata.
• Service and security data, including timestamps, feature activity, errors, logs, browser/device and network information reasonably needed to operate and protect the service.
• Support and communications data when you contact us or take part in beta testing.

4. Why we use data and our lawful bases

• To create and operate your account, provide requested features, persist and synchronise content, and respond to service requests: performance of our contract with you.
• To secure, diagnose, maintain and improve the beta service, prevent misuse and understand whether features work: our legitimate interests in operating and improving EninTree, balanced against your rights.
• To keep records and respond where the law requires: compliance with legal obligations.
• Where a future optional activity legally requires consent, we will request it separately and allow withdrawal.

5. Operational statistics and administrator access

EninTree records limited operational events to understand account activity, feature and workflow use, response time, failures and trial operation. These events use codes, timestamps, identifiers, outcomes and bounded technical properties. They are designed not to contain conversation text, prompts, answers, node titles or content, Tree content, Vault content, Safe content, uploaded-file content, request bodies or response bodies.

For AI-supported requests, EninTree may separately record content-free provider usage such as account and workspace identifiers, model, workload, token totals, duration and an estimated provider cost where a versioned price table is configured. This usage record does not store the prompt, response or selected workspace content and does not itself impose a charge or quota.

Authorised operations personnel may see aggregate statistics. Personnel with an additional user-activity or AI-usage permission may see which account was operationally active and content-free activity or usage totals. Holding an administrator role does not by itself provide access to Conversations, Trees, Vaults or Safe.

Feedback and support messages contain information you deliberately submit for those purposes. If diagnostic access to a particular item is needed, EninTree uses a separate, specific, time-limited and revocable permission record. Safe and whole-workspace diagnostic grants are not permitted through the routine support system.

• Logging in or viewing a page alone does not count as meaningful active use.
• Administrator reads and operational changes are recorded in a separate audit history.
• Operational statistics are not used for advertising or cross-service behavioural profiling.

6. Account security and communications

EninTree records managed login sessions, verification and recovery state, email-change requests and bounded security events so that sessions can expire or be revoked and account changes can be investigated. Passwords are stored as hashes. Verification, reset and email-change token records store token hashes rather than the plaintext secret.

Essential verification, recovery, security, trial and material-service messages are transactional. Optional research and product-update email choices are recorded separately and may be changed without suppressing essential account-security messages. Security links waiting for authorised delivery are encrypted in the transactional outbox.

• Password and email changes revoke existing managed sessions.
• Suspension blocks access without deleting account content.
• Account deletion begins as a tracked request rather than immediate irreversible deletion.

7. AI processing

When you choose an AI-assisted function, EninTree may send the prompt and relevant selected or retrieved context to an AI service provider to generate the requested response. Do not enter highly sensitive personal, medical, legal, financial, confidential third-party or regulated client data during beta testing. AI output requires human review.

• AI context is selected for the requested function; it is not a promise that every workspace record is sent.
• We do not state that AI output is professional advice or a final authority.
• Provider use is governed by our service arrangements and the provider's applicable data-processing terms.

8. Recipients and service providers

We use providers for hosting, database infrastructure, AI processing, email, domains, source control and operational support. Current or anticipated providers include Render, Vercel, OpenAI, GitHub and GoDaddy where their service is used. They may process data on our behalf or receive limited technical data needed to supply their service. We may also disclose data where legally required or necessary to protect users, rights or service security.

9. International transfers

Some providers may process data outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we will rely on an applicable adequacy regulation, approved contractual safeguards or another lawful mechanism. Provider locations and safeguards should be reviewed as the production supplier list changes.

10. Retention

Account content and uploaded material are currently retained while the account or beta relationship remains active unless you or an authorised administrator delete them, subject to backups, legal obligations and technical recovery periods. Raw operational events currently have a default 90-day retention setting and may be deleted only after the relevant daily aggregates have been produced. Aggregate statistics, administrator audit, support, trial and communication records follow separate periods based on their operational, security and legal purposes. Temporary generated files may be removed after processing or download.

We review retention needs and intend to publish more specific production periods as the schedule is finalised. We will delete or anonymise personal data when it is no longer needed, subject to legal, security, dispute and recovery requirements.

11. Cookies and local device storage

EninTree uses an essential authentication cookie to keep you signed in. It also uses browser local or session storage for preferences, navigation continuity and temporary workflow state. We do not currently describe any advertising or non-essential analytics cookies as active. If that changes, this notice and any required consent control must be updated before those technologies are used.

12. Security and confidentiality

We use proportionate access controls, encrypted transport, controlled provider access and operational safeguards. Beta software can still contain defects, and no internet service can guarantee absolute security. Keep independent copies of critical or irreplaceable information and do not use EninTree as the sole repository for it during beta testing.

13. Your rights

Depending on the circumstances, UK data-protection law may give you rights to be informed, access personal data, correct it, request erasure or restriction, object to certain processing, receive portable data and complain about processing. Some rights are qualified and may not apply to every record.

• Use Export my data in Settings for the available workspace export.
• Until in-app account deletion is available, request account or data deletion at jiahui@c-prio.com.
• You may complain to the UK Information Commissioner's Office at ico.org.uk, although we encourage you to contact us first so we can try to resolve the issue.

14. Children

EninTree beta is intended for adults and organisations. It is not directed to children, and we do not knowingly invite children to create accounts.

15. Changes and contact

We may update this notice as EninTree and its suppliers develop. We will change the version and effective date and provide appropriate notice of material changes. Questions and rights requests may be sent to jiahui@c-prio.com.