Privacy policy
This policy explains what we collect when you use EnneaFox, why we need it, how long we keep it and who processes it for us. We do not sell personal data, and your answers are never used for advertising.
Draft for owner review. This page has not yet been approved and may change.
Who is responsible
This policy covers the EnneaFox website and assessment, run by Sourdough AI LLC, which operates EnneaFox ("we"). Questions about privacy go to support@enneafox.com.
What we collect
- Your answers to the assessment items, the time you spent, and the assessment version, so the server can score your attempt and show you the result.
- The country your connection comes from, read from the network edge, so we can apply a regional price. We do not store your IP address; we keep a one-way salted hash of it to limit abuse.
- Your email address, only if you give it to us: to send a save link, or at checkout so we can send your receipt and help you recover a report later. If you enter it on the checkout page and leave without paying, we may use it for up to two checkout reminders (see below).
- How you found us: the first page you landed on, the referring site, and any campaign tags in the link (such as utm_source). This is stored in your browser and attached to your attempt so we can see which channels work.
- Usage events such as "assessment started" or "report viewed". These contain no names, emails, answers or results, and the visitor identifier is stored only as a salted hash.
- If you use the assistant, the messages you send are passed to our AI provider to write a reply. We keep only counts and timing for the conversation, never the message text.
Payment details are entered on Stripe's checkout page. We never see or store your full card number.
How we use it
- To score your attempt, show your free result and, after payment, your full report.
- To send the emails you asked for (save link, receipt, report recovery). We do not send newsletters or other marketing email.
- Abandoned-checkout reminders: if you finish the assessment, enter your email on the checkout page and leave without paying, we may send at most two reminders with a link back to your results page, about one hour and about one day later. Each address gets no more than two of these, ever. We never send them if you declined promotional email on the checkout page, if you unsubscribe, or once that address has paid for a report. Every reminder has a one-click unsubscribe link.
- To set the regional price and to run price tests. You are never charged more than the list price.
- To understand, in aggregate, which pages and channels lead people to the assessment, and to find and fix errors.
- To prevent abuse, through rate limits keyed to hashed identifiers.
We never sell personal data, never share your answers or results with advertisers, and never use your answers to target ads.
How long we keep it
- Unpaid attempts, including answers and any email you gave for a save link: deleted 90 days after the attempt started.
- Paid attempts, including answers, the report and the email used at checkout: kept 3 years from payment so you can return to your report, then deleted.
- Analytics events and daily counters: 400 days. They contain no personal details.
- Assistant conversation metadata (turn counts, token totals, cost): 30 days. Message text is not stored.
- Unsubscribe and bounce records: kept as a one-way hash of the email address for as long as needed to honor them.
- Checkout reminder records (the address and timing for an unpaid checkout): deleted seven days after the checkout expired. The count of reminders sent to an address is kept as a one-way hash so the two-reminder limit holds.
Stripe keeps payment records under its own retention rules, which tax and accounting law require.
Who processes data for us
- Stripe: payment processing and receipts of payment.
- Amazon Web Services: database storage (DynamoDB) and transactional email (SES), in the United States.
- Cloudflare: hosting, content delivery and network security for the website.
- Google Analytics: aggregate website analytics, with advertising features turned off. In the European Economic Area, the United Kingdom and Switzerland, analytics cookies are off by default and Google receives cookieless measurements only.
- Anthropic: generates assistant replies from the messages you send, under its commercial terms.
Your choices and rights
You can ask us to access, correct or delete the data tied to your attempt or email address by writing to support@enneafox.com. Deleting a paid attempt also removes access to its report. Depending on where you live, you may have further rights under local law, such as objecting to processing or complaining to a data protection authority.
You can block analytics with a browser setting or extension, or clear your browser storage to remove the first-visit record. The assessment works either way.
Adults only
EnneaFox is for adults 18 and over. We do not knowingly collect data from children. If you believe a child has used the site, contact us and we will delete the attempt.
Changes to this policy
When this policy changes, we update the reviewed date on this page. Material changes apply only to data collected after they take effect.