Privacy Policy and Terms of Service

Last updated: March 21, 2026

Privacy Policy

This Privacy Policy explains how Elastra collects, uses, stores, and protects personal data when you use our products and services. Elastra is a Portuguese company based in Matosinhos, Portugal.

1. Personal Data We Collect

We may collect: (a) account and contact data, such as name, email address, and organization details; (b) subscription and billing data; (c) content you submit to the product, such as prompts, rules, policies, skills, commands, logs, and synced files or references; and (d) technical and usage data, such as IP address, device, browser, identifiers, and platform events.

2. How We Use Personal Data

We use personal data to provide and operate the platform, authenticate users, deliver contracted functionality, maintain security, prevent abuse and fraud, provide support, comply with legal obligations, and improve product performance, reliability, and user experience.

3. Legal Bases for Processing (GDPR)

Where applicable, we process personal data on the basis of contract performance, legitimate interests, legal obligations, and, when required, consent.

4. Sharing of Personal Data

We do not sell personal data. We may share data with processors and service providers that support our operations, such as cloud infrastructure, authentication, communications, analytics, billing, and support providers, subject to appropriate contractual safeguards and only for legitimate purposes. We may also disclose data when required by law or by a competent authority.

5. Third-Party Integrations and Services

If you connect third-party integrations, such as code providers, authentication providers, or AI services, some data may be processed by those services under their own terms and privacy policies. You should review those policies before enabling integrations.

6. International Data Transfers

Where personal data is transferred internationally, we use appropriate legal mechanisms and technical and organizational measures consistent with applicable law.

7. Retention

We retain personal data for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, prevent fraud, maintain security, and resolve disputes. Retention periods may vary depending on the type of data and your account or organization settings.

8. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, and improper disclosure. No system is entirely risk-free, but we apply safeguards proportionate to the sensitivity of the data we process.

9. Your Rights

Depending on applicable law, you may request access, correction, update, portability, restriction, objection, or deletion of your personal data. You may also withdraw consent where consent is the legal basis for processing. You may also lodge a complaint with the competent data protection authority, including the CNPD in Portugal.

10. Children's Data

Our services are not directed to children without an appropriate legal basis and applicable supervision. If we become aware of improper processing involving children's data, we will take steps to correct or remove it.

11. Policy Updates

We may update this Privacy Policy from time to time. When material changes are made, we will publish the updated version and, where appropriate, provide notice through reasonable means.

12. Contact

For privacy questions or to exercise your rights, contact us at support@elastra.ai.

Terms of Service

By using Elastra, you agree to these Terms of Service and to use the platform in accordance with applicable law.

1. Acceptance

By using Elastra, you agree to these Terms of Service.

2. Platform Use

You must use the platform in accordance with applicable law and not for unlawful or unauthorized purposes.

3. Registration and Security

You are responsible for maintaining the confidentiality of your credentials and for all activity performed through your account.

4. Intellectual Property

All content, trademarks, and technology associated with Elastra belong to the company or its licensors.

5. Limitation of Liability

Elastra is provided as is. We do not guarantee uninterrupted availability or absence of errors, and we are not liable for indirect, incidental, or consequential damages.

6. Termination

We may suspend or terminate access in the event of violation of these terms or misuse of the platform.

7. Changes

We may modify these terms at any time. Continued use after changes implies acceptance of the updated terms.

8. Jurisdiction

The courts of Matosinhos, Portugal, are elected to resolve disputes related to these terms, subject to applicable law.