Privacy Policy

1. Introduction

Welcome to EntiSearch ("we", "us", or "our"). We operate EntiSearch, a federated search workflow platform. This Privacy Policy is designed to inform users in the United States and globally about our practices regarding the collection, use, disclosure, and security of personal information. By using our platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We believe in data minimization and only collect information necessary to deliver a high-quality workflow experience. This includes:

• Account Credentials: If you register or authenticate via third-party providers (e.g., Google OAuth), we receive authorization details, specifically your name, profile photo URL, and email address, to safely establish your private account.
• Search Workspace Configuration: Custom private entities, URL configurations, search history logs, and layout preferences stored in your account to maintain your productivity space.
• Technical & Usage Data: IP addresses, browser types, device information, and diagnostic telemetry to prevent malicious access, manage API traffic, and ensure server stability.

3. How We Use Your Information

We use the collected data for the following essential business purposes:

• To initialize, run, and maintain your customized federated search workspace.
• To process third-party authentication and authorize access to custom user configurations.
• To detect, investigate, and mitigate cybersecurity threats or policy abuse.
• To fulfill legal requirements or satisfy compliance standards in jurisdictions where we operate.

4. Cookies, Storage, and Tracking Technologies

We utilize standard browser technologies (such as session cookies, secure database tokens, and local storage) to provide persistent features. Specifically, cookies are deployed to keep your session authenticated across page reloads. We do not participate in behavioral tracking networks or sell your usage history to ad-tech agencies.

5. Data Disclosure and Sharing

We respect your privacy and do not sell, rent, or trade your personal information. We may disclose personal details only under these specific scenarios:

• Service Providers: Secure infrastructure hosts and database services required to boot and run the software stack.
• Legal Obligations: When requested by valid law enforcement orders or court subpoenas under US federal or state law.
• Safety & Business Protection: To enforce our terms of service, defend against litigation, or protect the safety and assets of our users.

6. Information Security

We implement modern cryptographic practices (such as TLS transmission encryption and secure password hashing algorithms) to shield your database credentials and profile metadata. However, no digital transmission channel or storage scheme is 100% impenetrable. We encourage you to always employ strong, unique passwords and safeguard authorization codes.

7. US State Privacy Rights (CCPA / CPRA)

Under US state laws, including the California Consumer Privacy Act (CCPA), as amended by the CPRA, residents of California and other states enjoy specific rights regarding their personal data:

• Right to Know: The right to request disclosure of the specific categories and pieces of personal data collected, used, or shared.
• Right to Correct & Delete: The right to request rectification of inaccurate profile data or the permanent deletion of your account.
• Right to Opt-Out of Sale or Sharing: Because we do not sell or share personal data for cross-context behavioral advertising, we do not provide a "Do Not Sell" button.
• Right to Non-Discrimination: We will not penalize, degrade, or alter the response speed of your search tools for exercising state privacy rights.

To exercise any of these state-mandated legal rights, please contact our support department through your account dashboard settings panel.

8. Changes to This Privacy Policy

We reserve the right to modify this policy as our federated architecture evolves. Any modifications will be posted directly to this page with an updated "Last Updated" timestamp. We recommend reviewing this document periodically to stay informed about how we safeguard your workspace data.

9. Contact Information

If you have any questions or require clarification regarding our security protocols, privacy standards, or state-level disclosures, please communicate with us at:

EntiSearch Compliance Team
Email: support@entisearch.com
Address: United States Corporate Workspace, Wilmington, DE