Privacy Policy
Last updated: 1 May 2026
This Privacy Policy describes how engagelayer.io ("we", "us") collects, uses and protects information when you use our website, the engagelayer.io platform, and the AI assistant we deploy on your behalf.
1. Who we are
engagelayer.io is operated by PRO AGENCY EUROPE SRL, a Romanian company registered at Str. Academiei 35-37, sc. A, et. 3, ap. 16, Bucharest 030167, Romania (Reg. No. 50684851, VAT RO50684851). We act as a data processor when handling your visitors' conversation data, and as a data controller for your account information (billing, sign-in, support).
2. What we collect
For your account: full name, email, phone, company name, billing address, payment method (handled by Stripe), interface language, time zone, sign-in history. For your visitors: messages exchanged with the assistant, browser language, country, source page, and any contact details they voluntarily leave. For platform operations: aggregated usage metrics (conversation count, lead count, response satisfaction).
3. What we do not collect
We do not collect: visitor IP addresses beyond country resolution, biometric data, payment card details (Stripe handles those), social-security or government identification numbers, health or medical records.
4. Your data and the AI connection
We use a managed AI connection to deliver the assistant. Your data stays isolated in your tenant — visitor conversations are retrieved and processed using only your knowledge base, with strict Row Level Security and per-tenant vector retrieval. We never use your content or your visitors' conversations to train AI models — for ourselves or for any other customer.
5. Where data is stored
By default, your account data and visitor conversations are stored in EU data centres (Frankfurt). PRO AGENCY EUROPE SRL maintains its operations from Romania, an EU member state. For non-EU customers we offer alternative regions on request. Backups are retained for 30 days, then permanently deleted.
6. How long we keep data
You set the retention period for visitor conversations: 30, 90, 180 or 365 days. Account information is kept for the duration of your subscription plus 90 days for accounting and legal records, then anonymized. Invoices are kept for 7 years to comply with EU tax law.
7. Sharing & sub-processors
We share data only with sub-processors that are essential to operate the service: Stripe (billing), AWS / OVH (hosting), our own AI provider integrations only when you opt in. Full sub-processor list is available on request.
8. Your rights
You can request access, correction, export or deletion of your data at any time. Email privacy@engagelayer.io and we respond within 30 days. You can also pause the assistant or wipe your knowledge base in one click from admin → Settings at any moment, which immediately stops conversation processing.
9. Security
TLS 1.3 in transit, AES-256 at rest. Bulk export of full content libraries or full conversation history is blocked at platform level. Activity log of every admin action. Optional restrictions on admin sign-in by IP.
10. Contact
For privacy questions: privacy@engagelayer.io. For data subject requests: dpo@engagelayer.io. We aim to reply within 5 business days.
The English version of these documents is the legally authoritative reference.