Privacy Notice

1. Who we are

Elegy Flow LLC ("Elegy Flow", "we", "us") provides the Elegy Flow service. We act as the data controller for personal data we collect through the Service, except where Paddle acts as controller for payment processing.

2. Personal data we collect

• Account data — name, email address, login credentials, organization name.
• Service content — information you submit to generate documents, including details about deceased individuals and their families that you choose to provide.
• Support data — messages and attachments you send when contacting us.
• Usage and device data — telemetry about how you use the Service, device identifiers, browser type, and IP address.

3. Why we use it

• Account creation and authentication (legal basis: contract performance).
• Providing the Service, including generating drafts from your inputs (contract performance).
• Customer support (contract performance / legitimate interests).
• Security, fraud prevention, and abuse detection (legitimate interests, legal obligation).
• Product improvement and analytics (legitimate interests).
• Service communications and, where permitted, marketing (legitimate interests or consent, depending on jurisdiction; you can opt out at any time).

4. Who we share data with

• Service providers / subprocessors — hosting, database, email delivery, analytics, error monitoring, and AI model providers used to generate drafts.
• Paddle, our Merchant of Record, for sale of the Service, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — legal, accounting, and similar advisers when needed.
• Authorities — where required by law, regulation, or valid legal process.

5. Data retention

We keep personal data only for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. UK and EEA users also have the right to lodge a complaint with their supervisory authority and we will respond to rights requests within one month. To exercise any right, contact privacy@elegyflow.com.

7. International transfers

Personal data may be processed outside your country, including in the United States. Where required, we use appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) for transfers from the UK or EEA.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and audit logging. No system is perfectly secure, but we work continuously to reduce risk.

9. Cookies

We use essential cookies to keep you signed in and to operate the Service. We may also use limited analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.

10. Contact

For privacy questions, contact privacy@elegyflow.com.