1. Who we are
This policy explains how the operator of Ensue (“Ensue”, “we”, “us”) handles personal information on getensue.com, the Ensue dashboard, API, documentation and blog (together, the “Services”). It works together with our Terms of Service. We act in two roles: a controller of the information about you and your use of the Services (sections 2, 3, 5 to 10), and a processor of the events and payloads you send through Ensue (section 4).
2. What we collect
- Information you give us. Your name, email address and organization when you join the waitlist, create an account or write to us, plus the content of your messages and your workspace settings, such as source and destination names and URLs.
- Billing information. If you buy a paid plan, our payment processor collects your payment details. We receive limited information such as the card brand, last four digits, billing country and invoice history, not the full card number.
- Usage and device information. Pages visited, features used, request counts, delivery results, error logs, IP address, browser type and approximate location derived from the IP address.
- Security signals. Our forms use a bot check from Cloudflare (Turnstile), which looks at browser and network signals to tell people from automated traffic.
- Information from others. Sign-in providers, if you use one, and information from your teammates who invite you to a workspace.
3. How we use it
- To provide, secure, support and improve the Services, and to run and bill your account.
- To reply to your messages and to send service notices, such as security alerts, delivery failures and changes to our terms.
- To tell you about early access and product news. You can unsubscribe from these at any time.
- To detect abuse, spam and fraud, and to enforce our terms.
- To meet legal obligations.
Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running and securing the Services, your consent (for example for marketing email), and legal obligations. We do not sell personal information, and we do not share it for cross-context advertising.
4. Customer Data (events and payloads)
The events, headers and payloads you route through Ensue are your Customer Data. They may contain personal information about your own customers or users that we never collect ourselves. We process Customer Data only to provide the Services and as you instruct, as described in the data processing section of our Terms (section 14). You decide what to send, where it goes and, within your plan, how long it is kept. If you are an individual whose data reached us because a company uses Ensue, please contact that company, as it controls that data. We will help it respond to your request.
5. Sharing
We share personal information only:
- with service providers who help us run the Services under confidentiality and data protection terms, such as cloud hosting and storage, email delivery, payment processing, bot protection, error monitoring and customer support tools;
- at your direction, for example when you route events to a destination, invite a teammate or connect an integration;
- to comply with the law, respond to valid legal requests, or protect the rights, safety and security of Ensue, our users or others;
- in a business transfer, such as a merger or sale of assets, where the information stays protected by this policy or one at least as protective; and
- with your consent.
We will provide a current list of service providers that process Customer Data on request.
6. Cookies and similar technology
We use only the cookies and local storage needed to keep you signed in, remember preferences and keep the Services secure. Our pages load fonts from Google Fonts, so your browser connects to Google when you visit, and our forms load Cloudflare Turnstile. These providers receive your IP address and browser details under their own policies. We also use Google Tag Manager and Google Analytics to understand how our marketing site, documentation and blog are used. These analytics cookies are off by default and only run if you choose "Accept analytics" in the cookie banner; if you choose "Reject" they never load. We store your choice in a cookie (ensue_consent) for up to 180 days across getensue.com, docs.getensue.com and blog.getensue.com, and you can change it at any time with the "Cookie settings" link in the footer. We do not use advertising cookies. If we add other analytics or advertising tools, we will update this policy and ask for consent where the law requires.
7. Retention
We keep account information while your account is active and afterwards for as long as needed for legal, tax, security and dispute purposes. Waitlist and contact messages are kept until you ask us to delete them or until they are no longer needed. Customer Data is kept for your plan’s retention period and deleted after your account ends, as described in our Terms.
8. Security
We use safeguards that suit the risk, including encryption in transit, encryption of stored secrets, access controls and logging. No system is perfectly secure. If a breach affects your personal information we will notify you and regulators as the law requires.
9. International transfers
We and our service providers may process information in countries other than your own, including the United States. Where the law requires, we use approved safeguards for such transfers, such as the Standard Contractual Clauses.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain uses, to withdraw consent, to opt out of marketing, and to complain to your data protection authority. You can update some details in your account, and you can unsubscribe using the link in our emails. To use any right, write to us at the address below. We may need to verify your identity first, and we will respond within the time the law requires. We will not treat you worse for using your rights.
11. Children
The Services are for businesses and developers and are not directed to children under 16. We do not knowingly collect their personal information. If you think a child has given us any, contact us and we will delete it.
12. Changes
We may update this policy. If the change is material we will tell you by email or in the dashboard before it takes effect. The date at the top shows the latest version.
13. Contact
Questions or requests about privacy? Write to hello@getensue.com or use the contact form.