Privacy notice.

1. Controller and roles

The controller for Ente's own processing is TiVA Digital – Valentin Döring, a sole proprietorship / Einzelunternehmen, represented by Valentin Döring. Contact: support@ente.fast.

This notice covers ente.fast, app.ente.fast, support, pilot administration, and optional integrations. For content in customer workspaces, Ente generally acts as a processor for the business customer. For website operation, account administration, contract and support communication, security, and Ente's own business records, Ente may act as controller. The order form and DPA govern any different allocation.

2. Data categories

• Account, profile, authentication, role, and workspace data.
• Company knowledge such as people, organizations, projects, activities, notes, messages, tasks, relationships, and user-authored content.
• Files, recordings, audio, transcripts, summaries, and export artifacts.
• Data from optional connected systems, including OAuth identity, credentials, email, calendar, and Plaud data.
• AI data such as prompts, selected context, model output, tool calls, and technical usage data.
• Support messages, feedback, attachments, and technical request, device, error, and security data.

3. Purposes and legal bases

Ente processes data to provide and secure accounts; store, organize, search, relate, share, and export company knowledge; run requested integrations; transcribe and structure recordings; provide AI features and notifications; respond to requests; and administer B2B pilots and contracts.

Depending on the processing, the legal basis may be Article 6(1)(b) GDPR (contract or pre-contract steps), Article 6(1)(c) (legal obligation), Article 6(1)(f) (legitimate interests in secure operation, restricted product analytics, and support), or—only for a voluntary and revocable choice—Article 6(1)(a) (consent). As processor, Ente acts on the customer's documented instructions; the customer is responsible for its legal basis and notices to employees, contacts, and meeting participants.

4. Infrastructure, authentication, and contact

Ente uses Convex for authentication, database, files and server-side processing. The central production deployment is in Ireland. Netlify delivers the website and application through a global network and also processes customer file bytes through the private-file proxy. Support at support@ente.fast uses AWS infrastructure in Frankfurt.

Account, session, and authorization data are processed for sign-in. Credentials for optional integrations are stored only when a connection is enabled; the application code supports encrypted credential storage.

5. Optional integrations

Google Workspace, Microsoft/Outlook, user-selected IMAP/SMTP or CalDAV services, Plaud, LaMetric, browser push services, and import tools process data only when a user connects or invokes them. Scope, location, and other parties depend on the service selected. Disconnecting removes the connection credentials and, where implemented, local caches; information deliberately imported as Ente content may remain.

6. AI, recordings, and agents

Depending on the feature selected, Ente may send audio, transcripts, prompts, selected workspace context, and tool results to OpenAI or the configured Kimi/Moonshot model route through Amazon Bedrock in Stockholm. These providers support transcription, structuring, search, summaries, and agent features. Output may be wrong and must be reviewed before use or disclosure.

Recordings may be captured by microphone, uploaded, or imported from Plaud. Users must provide any notices and obtain any permission or other legal basis required before recording. Mood, valence, and arousal analysis fields are disabled by default and are not offered in the B2B pilot without separate legal and technical approval.

7. Product analytics and browser storage

This marketing website no longer loads a DataFast tracker. The separate product application is configured for restricted analytics using PostHog EU Cloud in Frankfurt. Its event path contains only a coarse product surface and ephemeral identifiers; user text, full URLs, stable Ente identifiers, autocapture, persistence and replay are excluded. Network metadata remains part of the processing. A completed TiVA Digital DPA is evidenced.

Necessary browser storage and session mechanisms support sign-in, security, language choice and requested features. Removing the website tracker does not revoke an external DataFast–Stripe grant; its separate status is explained below.

8. Recipients and international transfers

Recipients may include authorized members of a customer workspace, providers on the subprocessor page, customer-connected systems, and legally authorized authorities or advisers. Several providers are established in or process data in the United States or other countries outside the EEA. Depending on the provider, transfers rely on adequacy decisions, Standard Contractual Clauses, or another lawful mechanism.

9. Retention and deletion

Data is generally kept while the account, customer workspace, requested feature, or a legal retention duty requires it. Some features use shorter cache periods; Gmail periods are set out in the Google section below. Shared customer content may remain under the business customer's control after one user leaves.

Self-service full-account deletion is not yet available. Access or deletion requests can be sent to support@ente.fast. Legal retention duties, third-party rights, and shared content controlled by a customer may limit what can be deleted.

10. Data-subject rights

Depending on the conditions, people may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent, and may complain to a data protection authority. If Ente processes data for a business customer, a request will normally be referred to or handled on instructions from that customer.

Supplier website, billing and support processing

TiVA Digital acts as controller for its website, contract administration, billing and support. Netlify processes website requests including IP addresses, headers and requested URLs. Stripe processes payment, subscription, invoice and necessary contact data, acting as processor or independent controller depending on purpose. This does not give Stripe general access to CRM content. Support at support@ente.fast uses the existing AWS infrastructure in Frankfurt.

Stripe DPA · Netlify privacy

DataFast: website tracking removed, account connection unverified

The website release dated 22 October 2026 removes the DataFast script, website identifier and event calls. This does not revoke an external DataFast–Stripe account grant. The previously documented revenue connection may continue processing payment, subscription, invoice, refund, product and customer records, including contact details, until provider-side termination is confirmed. DataFast is operated by JustShipIt Pte. Ltd. in Singapore; the previous disclosure identifies infrastructure outside the EU including the US. Account-specific contractual and transfer evidence, revocation, retention and deletion of historical data remain unverified.

Previous providers and retained data

AgentMail is no longer offered as a contact route on this website. This does not confirm closure of the former external US mailbox or deletion of its messages, attachments or logs. DPA acceptance, transfer safeguards and remaining processing for that former vendor mailbox are not fully verified. Ente's own agent mailboxes use AWS and are separate. Direct Anthropic and Resend are not listed as active recipients in the current hosted processing route. Removing old disclosures or integrations does not delete historical vendor copies or business records subject to retention obligations.

Backups and data return

Native weekly Convex database backups exclude files. No completed full recovery test or specific recovery time is promised. Comprehensive export and deletion require an authorized request and inventory review; these documents do not establish a fully tested company offboarding workflow.

11. Google Workspace data

Gmail and Google Calendar are optional integrations. Ente accesses Google data only after a user deliberately connects the relevant service and approves access at Google.

Storage and retention

• Gmail: Ente stores connection and synchronization data, message and thread metadata, and fetched message bodies in its Convex backend. Metadata is normally retained for a 90-day synchronization window; fetched bodies for 30 days; search results for 15 minutes. An attachment access token lasts two minutes. Attachment bytes are streamed from Gmail and are not stored as a separate Ente file.
• Google Calendar: Ente stores connection data and the selection and basic metadata of selected calendars while the connection remains active. Events are fetched from Google when needed and are not kept as a complete persistent calendar copy. Content a user deliberately imports into Ente may then become ordinary Ente content.
• OAuth credentials are stored by Ente so the requested connection can operate. The application code supports encrypted storage. A user can revoke Ente's access at any time in their Google Account.

Sharing, AI, and training

Ente shares Google data only as needed for a user-requested feature, contracted infrastructure, or a legal requirement. Gmail currently synchronizes through scheduled polling. The optional Google Cloud Pub/Sub route is inactive because its required production topic is unset. If a user expressly asks an Ente AI agent to perform a Calendar action, the event details and tool results needed for that action may be sent to the configured AI service provider. Gmail content is not exposed as an AI-agent tool in the currently reviewed implementation.

Ente does not use Google user data to develop, improve, or train generalized or shared AI or machine-learning models.

Disconnecting, revocation, and deletion

Disconnecting Gmail deletes the relevant Ente connection credential and starts bounded cleanup of the local Gmail cache. Disconnecting Google Calendar deletes the connection and stored calendar selection. Because Gmail and Calendar can share one Google grant, disconnecting a single feature does not automatically revoke that grant at Google; revocation is available in Google Account permissions.

A user may request deletion of Google data associated with their account at support@ente.fast. Shared content may remain under the business customer's control. Self-service full-account deletion is not yet available.

Google API Limited Use

Ente's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google API Services User Data Policy.

12. Changes

Material changes will be published with a new revision date and, where required, communicated through an appropriate channel.