Request early access

Policies

Privacy Policy

Last updated 30 October 2026

What Elan collects, why, where it lives and how to have it removed. Written against what the platform actually does.

This is a draft awaiting legal review. It describes what the platform actually does and is written in good faith, but it has not been reviewed by a lawyer and still needs the registered company name, the governing jurisdiction, a registered address. Treat it as a statement of intent rather than a finished agreement, and ask us if anything here matters to a decision you are making.

What we collect, and why each one

  • Your account details — name, email and organization — because an account is how we tell you from somebody else.
  • What you ask us to run: your repository reference, your agents' definitions and the configuration you deploy.
  • What your agents did: the events a run emits, what it cost, how long it took and which build served it. This is how the console answers a question about your own run at three in the morning.
  • Billing details, if you give us any. Card details go to our payment provider and never reach our systems.
  • If you asked for early access: the answers you gave on that form, so we can decide who to let in and in what order.

What we do not do

We do not sell your data and we do not use it to train models. We do not read your agents' conversations except where you ask us to look at a specific run to help you with it.

Your end users' data

Where your agents handle data about your own customers, you are the controller of it and we process it on your instructions. We hold it in order to run your agent and to show you what happened, and for no other purpose.

Where it lives, and for how long

Your database, your files and your run history live in the platform's managed data plane, in the region the environment you deploy to is in. Your prompts go to the model provider you chose.

Removing a project removes what was provisioned for it. Its database is snapshotted first and the snapshot kept for ninety days, so an accident is recoverable — after which it is gone.

Who else sees it

The providers we need in order to run the service: a cloud provider for compute and storage, an identity provider for sign-in, a payment provider for card payments, and an email provider for the notifications you receive. Each sees only what their part requires.

What you can ask for

A copy of what we hold about you, a correction, or its deletion. Write to support@openelan.ai and we will come back to you.

Cookies

The console sets a session cookie so that signing in once is enough, and a cookie that protects your requests from being forged by another site. There are no advertising or tracking cookies on these pages.