Skip to main content
← Back to Elorix

Privacy Policy

Last updated: March 17, 2026

1. Introduction

Atoma Insights, Inc. ("Company," "we," "us") operates Elorix ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Service. By using Elorix, you consent to the practices described here.

2. Information We Collect

Information you provide

  • Account data: email address, name, password (hashed)
  • Channel data: YouTube/TikTok/Instagram channel IDs, handles, niche, subscriber counts
  • Content: video metadata, scripts, thumbnails, and generated content you create through the Service
  • Payment data: billing information processed by Stripe (we do not store card numbers)
  • Communications: support requests, feedback, and form submissions

Information collected automatically

  • Usage data: pages visited, features used, actions taken, timestamps
  • Device data: browser type, operating system, IP address, screen resolution
  • Performance data: video performance metrics from connected platforms (views, watch time, engagement)
  • Cookies: session cookies for authentication and CSRF protection (see Section 7)

3. How We Use Your Information

  • Provide the Service: generate content, analyze performance, deliver recommendations, process payments
  • Improve the Service: train and improve our AI models, optimize user experience, fix bugs
  • Communicate: send weekly intelligence reports, billing notifications, and service updates
  • Security: detect fraud, prevent abuse, enforce our Terms of Service
  • Legal compliance: respond to legal requests, enforce our rights

We do not sell your personal information to third parties. We do not use your content to train AI models that serve other customers. Your channel data and generated content are used exclusively to improve your experience.

4. Third-Party Services

We share data with the following categories of service providers, solely to operate the Service:

  • Authentication & database: Supabase (account data, application data)
  • Payments: Stripe (billing and subscription management)
  • AI providers: Anthropic, OpenAI, ElevenLabs, FAL (content generation — only the minimum data needed for each request)
  • Infrastructure: Vercel (hosting), RunPod (GPU compute), Cloudflare R2 (media storage)
  • Email: Resend (transactional emails)
  • Rate limiting: Upstash (Redis-based, IP-level only)

Each provider is bound by their own privacy policy and data processing agreements. We select providers that meet industry-standard security practices.

5. Data Retention

  • Active accounts: data is retained for the duration of your account
  • Canceled accounts: data is retained for 90 days after cancellation to allow reactivation, then permanently deleted
  • Payment records: billing history is retained for 7 years for tax and legal compliance
  • Usage logs: anonymized after 12 months

You may request immediate deletion of your data by contacting support (see Section 10).

6. Data Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS 1.3) and at rest
  • Row-level security on all database tables
  • CSRF protection on all API endpoints
  • Rate limiting to prevent abuse
  • Regular security audits

No system is 100% secure. If we discover a data breach affecting your personal information, we will notify you within 72 hours as required by applicable law.

7. Cookies

We use the following cookies:

  • Authentication cookies: session management via Supabase Auth (essential)
  • CSRF token: double-submit cookie for API security (essential)

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate data
  • Deletion: request deletion of your personal data
  • Portability: receive your data in a machine-readable format
  • Objection: object to certain processing activities
  • Restriction: request restriction of processing

To exercise any of these rights, contact us at privacy@elorix.app. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

10. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the Service at least 30 days before the changes take effect.

12. Contact

For privacy-related inquiries, contact us at privacy@elorix.app.

Atoma Insights, Inc.
United States