This policy explains how ENGRYN LLC (Švitrigailos g. 34, Vilnius, LT-03230, Lithuania), the controller, processes personal data on engryn.com, app.engryn.com and the desktop app, in accordance with the EU General Data Protection Regulation (GDPR) and, for people in Brazil, the Brazilian General Data Protection Law (LGPD).
1. Data we process
Account: name, email, profile picture (from Google or GitHub), password (hashed only) and organization memberships.
Access requests: name, email, company, use case, language and plan of interest from the form; a hash of your IP address to prevent abuse.
Service usage: messages to the agent, workspace files, commands, results, session events, credit usage and technical logs.
Integrations: credentials and settings you add. Payment card data is handled by the payment provider; we do not store card numbers.
2. Purposes and legal bases
Providing the service you signed up for (contract); security, fraud prevention and legal obligations (legal obligation / legitimate interest); service communications (contract); marketing only with consent; evaluating access requests (pre-contractual steps).
We do not use your sessions, code or data to train AI models.
3. Sharing
Processors that help us run the service, under contract: AI model providers, the isolated-machine provider, cloud storage for workspaces, hosting, email delivery and payment processing. ENGRYN is based in the European Union (Lithuania); some processors are located elsewhere, such as the United States, and those transfers use GDPR safeguards such as Standard Contractual Clauses. We do not sell personal data.
4. Retention
Account and session data while the account is active, then deleted or anonymized within 90 days except where the law requires retention. Access logs for 6 months; billing records as required by tax law.
5. Security
Each session runs in an isolated, temporary machine destroyed after use; traffic is encrypted; passwords are hashed; secrets are never displayed back or logged; internal access is restricted and logged.
6. Your rights
You may request confirmation, access, correction, anonymization or deletion, portability, information about sharing, withdrawal of consent and objection. Write to [email protected]; we answer within 15 days. You may also lodge a complaint with a supervisory authority — in Lithuania, the State Data Protection Inspectorate (VDAI); in Brazil, the ANPD.
7. Cookies
The app uses an essential session cookie and the site a language cookie. No advertising or third-party tracking cookies.
8. Data protection officer
ENGRYN privacy team, [email protected] · ENGRYN LLC, Švitrigailos g. 34, Vilnius, LT-03230, Lithuania. We will notify you of material changes to this policy.