Privacy Policy

Information We Collect

At ENTITY Ltd. ("ENTITY", "we", "us", or "our"), we collect information necessary to provide you with enterprise-grade software engineering, dynamic email engines, API integrations, and cloud application services.

We collect data across the following categories:

• Account & Identity Information: Name, business email address, phone number, organization name, country, and login credentials created during account registration or SSO authorization.
• Telemetry & Usage Data: IP addresses, browser types, device identifiers, operating system specs, page interaction metrics, and API request logs to ensure system stability and performance.
• Payment & Billing Records: Transaction metadata, payment method tokens (processed securely via PCI-DSS compliant partners like M-Pesa STK & Visa/Mastercard), invoice history, and subscription status.
• Customer Code & API Assets: Custom templates, JSON payloads, configuration options, and email assets provided when utilizing our email delivery engine or web application suites.

How We Use Your Information

We utilize your information strictly to operate, maintain, protect, and elevate our software infrastructure:

• Core Service Delivery: Provisioning API serial keys, executing transactional email dispatches, hosting cloud web applications, and delivering customized digital architecture.
• Security & Fraud Prevention: Verifying user identities, enforcing single-sign-on (SSO) permissions, monitoring threat telemetry, and preventing unauthorized system access.
• Customer Support & SLAs: Responding to support inquiries, troubleshooting API integration errors, and fulfilling dedicated 24/7 SLA commitments.
• Billing & Operations: Processing subscription renewals, issuing tax invoices, and managing account tiers.

Data Security & Encryption Standards

Security is fundamentally embedded into every line of code at ENTITY. All web traffic and API payloads are encrypted using TLS 1.3/SSL 256-bit protocols. Databases and stored credentials are encrypted using AES-256 standards.

API credentials and template access tokens are cryptographically bound to authorized account identifiers to prevent key spoofing. ENTITY does not sell, rent, trade, or monetize your personal information or customer payloads to third-party advertisers under any circumstances.

Infrastructure & Third-Party Partners

We partner only with premier cloud infrastructure providers that maintain rigorous global compliance standards (ISO 27001, SOC-2 Type II):

• Cloud Hosting & Edge: Vercel Cloud Infrastructure and AWS for reliable global deployment and low-latency API routing.
• Payment Gateways: Safaricom M-Pesa STK Push, Stripe, and Visa/Mastercard payment processors for secure PCI-compliant transactions.
• Transactional SMTP Engines: Automated Gmail & Nodemailer SMTP infrastructure for encrypted email dispatches.

Your Rights & Global Compliance (GDPR/CCPA)

Regardless of your geographic location, ENTITY respects your rights regarding your data:

• Right to Access: Request a copy of all personal information and API logs stored under your account.
• Right to Rectification: Update or correct inaccurate account details at any time via your user dashboard.
• Right to Erasure (Right to be Forgotten): Request complete deletion of your account, API serials, and historical data logs.
• Opt-Out Rights: Easily unsubscribe from marketing communications via a single click.

Cookies & Session Management

ENTITY uses essential cookies and local storage items strictly for maintaining active authentication sessions without requiring repeated sign-ins, storing user interface preferences (such as selected email layout presets), and preventing CSRF (Cross-Site Request Forgery) attacks.

We do not use invasive cross-site tracking or advertising cookies.