Privacy policy

Last updated: September 2026

Echo (“we”, “us”) builds an AI-powered workspace for creating applications. We take data protection very seriously. This policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

• Account information — when you sign up or sign in, we receive your name, email address, and profile image from our authentication provider.
• Content you create — projects, prompts, files, connectors, and settings you add to your workspace. This is needed to build, preview, and deploy what you ask for.
• Billing information — plan, credit balance, and transaction records processed by our payment provider. We never see or store your full card details.
• Sales inquiries — if you use our contact form, we keep your company name, name, work email, and anything else you choose to share so our team can follow up.
• Support chats — messages you send to our support team are recorded to improve Echo services.
• Technical data — basic logs such as device type, browser, and error reports that help us keep the service reliable and secure.

2. How we use your information

• To operate, maintain, and improve Echo.
• To process payments, manage credits, and enforce plan limits.
• To respond to support requests and sales inquiries.
• To detect abuse, prevent fraud, and protect the security of the service.
• To comply with legal obligations.

We do not sell your personal information.

3. AI processing

Prompts and project content you submit may be processed by third-party AI model providers to generate results. API keys you connect yourself (BYOK) are stored encrypted and are never displayed back to you or shared.

4. Sharing

We share information only with:

• Service providers — authentication, hosting, payments, and AI inference — bound by contract to handle data only on our instructions.
• Legal authorities — when required by law or to protect rights, safety, and the integrity of the service.

5. Security

We use industry-standard measures such as encryption in transit, encrypted credential storage, and access controls. No system is completely secure, and we encourage you to use a strong, unique password and to keep connected API keys and database credentials private.

6. Retention

We keep your information for as long as your account is active or as needed to provide the service. You may delete your projects at any time, and you may request deletion of your account — we will remove your personal data within a reasonable period unless the law requires us to keep it longer.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Contact us (details below) and we will respond within the timeframe required by applicable law.

8. Cookies

We use strictly necessary cookies and local storage to keep you signed in, remember your preferences (such as theme), and protect against abuse. We do not use third-party advertising trackers.

9. Children

Echo is not directed at children under 13 (or the higher minimum age in your jurisdiction), and we do not knowingly collect their information.

10. Changes to this policy

If we make material changes, we will update the date above and, where appropriate, notify you in the product. Continued use of Echo after changes take effect means you accept the updated policy.

11. Contact us

For privacy questions or requests, reach us through the support section of your Echo settings or via the contact details published on our website.