Privacy policy

1. About this policy

Entatan LLC (“Entatan”, “we”, “us”) is an AI-native software engineering and marketing company based in Utah. This policy explains how we handle personal information when you visit entatan.com, submit a form, use the client portal, contact us, or interact with us on social platforms (the “Services”).

This policy does not cover personal data we process on behalf of partner companies during engagements. That processing is governed by our Data Processing Addendum and the partner's own privacy notice. It also does not cover job applicants, who are covered by our Recruitment Privacy Notice. Products built by Vinyatan ventures publish their own privacy policies where they collect data directly.

2. Information we collect

We collect as little as the job needs. Please do not put sensitive personal information (health, financial account numbers, government identifiers) in free-text form fields.

• Contact and enquiry data: name, email address, company, role, website, and what you tell us in forms, direct messages, or calls. Collected directly from you.
• Portal account data: name, email, organization, login credentials, and activity inside the client portal such as approvals, comments, and file uploads.
• Technical data: IP address, device and browser type, pages viewed, referrer, approximate location derived from IP, and interaction events. Collected automatically through server logs and analytics tools.
• Communication data: messages you send us and our replies, including through social platforms, which are also subject to that platform's policies.
• Marketing data: whether you opened or clicked an email we sent, and your subscription preferences.
• Payment data: for Vinyatan products or invoices paid online, a third-party payment processor handles card details. We see transaction records, not full card numbers.

3. How we use personal information

We use personal information to:

• Respond to enquiries, pitches, and support requests, and run engagements.
• Operate, secure, and improve the Services, including debugging and analytics.
• Send updates about our work, playbooks, and events where you have opted in or where the law allows. You can unsubscribe at any time.
• Comply with legal obligations, enforce our terms, and protect Entatan, our partners, and the public.
• Use AI tools to help draft replies, summarize enquiries, and route requests. A person reviews decisions that affect you. We do not use your personal information to train AI models.

4. How we disclose personal information

We do not sell personal information and do not share it for cross-context behavioral advertising. We disclose it only:

• To service providers that host our infrastructure, send email, process payments, run analytics, and provide productivity tools, under contracts that limit their use of the data. Categories are listed on our subprocessor page.
• To professional advisers such as accountants and lawyers, under confidentiality.
• When required by law, subpoena, or court order, or to protect rights, safety, or property.
• In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
• At your direction, for example when you ask us to introduce you to a partner or venture.

5. Cookies and analytics

We use strictly necessary cookies for theme preference, consent, and portal sessions, and privacy-respecting analytics to understand traffic. Where we run advertising for our own services we may use measurement pixels with your consent. Our Cookie Policy lists what we set and how to control it.

6. Retention

We keep personal information for as long as needed for the purpose we collected it and to meet legal, accounting, or reporting requirements. As a guide: enquiry data for 24 months after our last contact; portal data for the life of the engagement plus three years; analytics data in identifiable form for 14 months; and financial records for seven years. We delete or anonymize data after that.

7. Security

We protect personal information with access controls, encryption in transit and at rest, least-privilege credentials, dependency and secret scanning, and monitoring. No system is perfectly secure. If a breach affects your information we will notify you and any regulator as the law requires. Our security page has more detail.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, to withdraw consent, and to not be discriminated against for exercising these rights. Residents of US states with privacy laws, including California, Colorado, Connecticut, Utah, and Virginia, and people in the EEA, UK, and Switzerland have specific rights under those laws.

Submit a request through the privacy portal. We verify identity by matching the email address or portal account associated with the data. Authorized agents may submit on someone's behalf with proof of authority. We respond within 30 days, or 45 days where the law allows an extension, and we will tell you if we need more time. If we deny a request you can appeal by replying to our decision.

Marketing email includes an unsubscribe link. Browser settings and our cookie notice control non-essential cookies. We honor Global Privacy Control signals as an opt-out of sale or sharing where that concept applies.

9. International transfers and children

We are based in the United States and process data there. If you are outside the US, your information is transferred to the US and protected by contractual safeguards with our providers, including standard contractual clauses where required.

The Services are not directed to children under 13, and we do not knowingly collect their information. If you believe a child has provided information to us, use the privacy portal and we will delete it.

10. Changes and how to contact us

We will post changes to this policy here with a new effective date and, for material changes, notify portal users and email subscribers. Questions and requests go through the privacy portal or the contact form. You can also DM @chancerobertson on X, though please do not send sensitive information through social platforms.