Privacy Policy

At EliteWorks, we understand that privacy and confidentiality are your top priorities. This policy outlines how we collect, process, and protect your data.

Who We Are (Data Controller)

The data controller responsible for your personal data is EliteWorks (FZC), a Free Zone Company licensed by the SRTI Free Zone Authority, registered at Sharjah Research Technology and Innovation Park (SRTIP), Sharjah, United Arab Emirates. As a UAE-based company, we handle personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where it applies to you, the EU/UK GDPR and the California CCPA. For any privacy request, contact us at contact@eliteworks.io.

1. How We Handle Your Files

The core of our service relies on protecting your intellectual property. When you upload a document for an AI-content or similarity report, for rewriting, or as source material for the assistant or a generated document:

• Your files are yours: We never sell, rent, or resell your documents, and we never use them for advertising or marketing. Document content is transmitted only to the infrastructure and processing providers needed to deliver the service you requested (see Section 6), or where we are legally required to disclose it to competent authorities.
• Keeping and removing your files: Uploaded documents and generated results stay in your account so you can open them again, and you can remove any of them from your dashboard at any time. Closing your account in Settings ends your access and clears your balance, but leaves your documents with us. To have a document — or everything we hold about you — erased for good, write to contact@eliteworks.io and we will do it.
• Source databases: We compare your text against a broad index of web and published sources through third-party AI-detection and similarity APIs, configured so that your document is not submitted to, saved in, or indexed by those sources. Running a check on EliteWorks does not add your file to any database it is compared against, now or later.
• Your results: The report, rewritten text, or generated document is delivered to you in your private dashboard, and you can remove it from your dashboard at any time.
• Assistant and project content: The brief you give, the files you attach, and the messages you send are processed by the AI model providers that power these tools, and are kept in your account so you can come back to them. The same rules apply: never sold, never used for advertising.

2. Information We Collect

We only collect information strictly necessary to provide and secure our services:

• Account Data: your email address, the name you signed up with, and your sign-in method (handled securely via our auth provider, Clerk), your interface language, and your Discord or Telegram account if you choose to link it. If you accept a referral invitation, we record the account that invited you and whether the invitation qualifies for a reward. The inviter sees aggregate invitation and reward counts, not your name, email, documents or individual purchase history.
• Technical and security data: when you make a payment we record the IP address and browser the purchase was made from, and keep it with that payment. It is used for one thing — showing what happened if that payment is disputed or reported as fraud — and not to profile you or to decide anything about your account. When you ask for your first free AI report, we also keep a one-way fingerprint (a salted hash that does not show the address) of the network address it came from, for 30 days, and of the email it was asked with, together with a mark set in your browser (see Cookies). They are used for one thing — keeping the free AI reports to one set per person, so a new account does not get them again — and never to profile you. We do not log your IP address as you browse. To offer the payment option for your country, we look up the country of your IP address when prices are shown and when you start a payment (IP Geolocation by DB-IP); the address is not kept for this. When you pay, we keep with that payment the country of the address you started the payment from and the country of the address the card payment page was used from (our payment provider reports that address to us), but not the addresses themselves. Separately, our sign-in provider, our hosting, and our payment providers keep their own sign-in and transaction records, which include IP address and device information, to keep accounts and payments secure.
• Payment Data: Handled entirely by our third-party payment providers. EliteWorks does not capture, store, or have access to your full credit card numbers or banking details. We do store the identifiers those providers give us (such as a customer or invoice reference) and a record of what you bought, so that payments can be matched to your account. For a card payment, we also keep some details the payment provider reports about the card: the first six digits of the card number (they identify the bank that issued it), the card network (such as Visa or Mastercard), whether it is a credit or debit card and its tier, the issuing bank and its country, and whether it was paid through a digital wallet. If you paid in your own currency, we keep that currency, the amount and the exchange rate. We never store the cardholder's name, the expiry date, or any other part of the card number.
• Document Content: The files you upload, and the briefs and messages you send to the assistant and the document tools, processed only to deliver the service you request.
• Sign-up source: when you first visit, we note where the visit came from — the campaign tags in the link you followed (such as utm_source), the website that sent you (its address only, not the page), the page you landed on, and whether the link came from an ad network (the network's name, never its click identifier) — in a first-party cookie that holds no identifier. If you sign up, it is saved once with your account so we know which channels bring us customers. It records nothing about the pages you visit afterwards.
• Usage Analytics: With your consent (outside the EU, the EEA, the UK and Switzerland: on by default, and you can switch it off at any time in Cookie Settings), data on how the platform is used (e.g., page views, feature usage) via PostHog, linked to your account when you are signed in, to help us improve the user experience. This includes session recordings — playbacks of how a page was used — which are configured to mask text and anything typed into a field, so they show where you clicked and moved rather than what you wrote. Analytics never includes the content of your documents. If you reject analytics cookies, or until you choose, we still count visits anonymously: page views, clicks, errors and which steps of a tool were used — never their content — reach PostHog with no analytics cookie or identifier stored on your device, no link to your account, and no session recording. PostHog groups them by a value it computes on its own servers from technical details such as your IP address and browser, which changes every day, so a visit cannot be linked to your other days. Either way, PostHog records an approximate location (country, region, city and postal area) estimated from the IP address; the IP address itself is not kept.
• Service records: We also analyse records our service keeps to run your account, such as when you last used it, which tools you ran, whether a job succeeded and your token purchases, to understand how the service is used and where it fails. This uses no cookies and is based on our legitimate interest in improving the service.

3. How We Use Your Information

• To provide, operate, and maintain the services you request.
• To process payments and manage your credit balance.
• To work out where each sale was made for tax purposes, and to understand which countries our customers are in and how they pay, from the payment details in Section 2.
• To secure the platform and prevent fraud or abuse.
• To communicate service-related notices and respond to support requests.
• To improve our product through usage analytics: in full where you have consented or, outside the EU, the EEA, the UK and Switzerland, have not switched it off; otherwise only as anonymous visit counts.
• To learn which channels bring us customers, from the sign-up source above.
• To understand how the service is used and where it fails, from our own service records above.

Improving our models. We may use the text of documents you upload to train and evaluate our own AI detection and rewriting models, relying on our legitimate interest in keeping results accurate (Art. 6(1)(f)). You can object at any time by writing to contact@eliteworks.io; your documents are then excluded from future training.

We do not sell your personal data.

Emails we send

Two kinds. Service emails — sign-in codes, payment receipts, security notices — are part of your account and are sent for as long as you have one. Product updates and offers are separate: we send them only if you opt in — with the optional box in the welcome dialog when you first sign in (outside the EU, the EEA, the UK and Switzerland that box comes ticked; untick it if you do not want them), or later in your account settings — and you can switch them off in your settings or from the unsubscribe link in any such email. Switching them off never stops the service emails.

Legal bases for processing (GDPR)

Where the EU/UK GDPR applies to you, we rely on the following legal bases under Article 6:

• Performance of a contract (Art. 6(1)(b)): to create and operate your account, deliver the checks and rewriting you request, process payments, and manage your credits.
• Legitimate interests (Art. 6(1)(f)): to keep the platform secure, prevent fraud and abuse, defend ourselves against chargebacks and fraudulent payments, and improve our services, including the anonymous, cookieless visit counts kept when you have not allowed analytics, learn which channels bring us customers (the sign-up source), understand which countries our customers are in and how they pay, and analyse our own service records — balanced against your rights and freedoms.
• Consent (Art. 6(1)(a)): for non-essential analytics cookies and any optional communications. You can withdraw consent at any time (in Cookie Settings, or by switching off product emails in your account settings) without affecting processing already carried out.
• Legal obligation (Art. 6(1)(c)): to meet accounting, tax, and other legal requirements, or to respond to valid legal requests.

4. Data Retention

We keep personal data only for as long as needed to provide the service and meet legal, accounting, or security obligations. Uploaded documents and generated results are retained so that your account history stays available to you. You can remove them from your dashboard at any time, and on request we will erase a document, or your whole account, for good. Account data is retained while your account is active. Closing your account in Settings removes your sign-in and your token balance, so you can sign up again with the same email; the account record, including the reason you gave for closing it, and your documents stay with us, so we can look into errors and prevent abuse, until you ask for erasure, which we carry out on request, subject to any retention required by law. Records of payments and invoices, including the IP address and browser recorded with each payment and the card and country details described in Section 2, are kept for as long as UAE tax and anti-money-laundering law requires — currently up to seven years — including after an account is closed.

5. Cookies and Tracking

We use essential cookies to keep you logged in and to prevent fraud, and one first-party cookie that remembers where your first visit came from (the sign-up source in Section 2). With your consent we also use analytics cookies to understand how the platform is used; without it, visits are only counted anonymously, with no analytics cookie or identifier on your device. You choose when you first visit, and you can change that choice at any time under Cookie Settings on the Cookie Policy page or in your account settings; your browser controls give you a further layer on top. See our Cookie Policy for details.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information or document contents to third parties for marketing purposes. Data is transmitted only to the providers needed to deliver what you asked for — authentication, payment processing, cloud hosting and storage, the originality and AI-detection provider, the AI model providers behind the assistant and the document tools, email delivery, and product analytics (in full with your consent, otherwise anonymous visit counts) — and only to the extent each one needs. These partners are bound by their own data-protection obligations.

7. Data Security

We protect your data with industry-standard safeguards. All traffic between your browser and EliteWorks is encrypted in transit using TLS/SSL (HTTPS). Data at rest is held on secured infrastructure with restricted, role-based access. Card payments are processed by our third-party payment providers on their own PCI-DSS-compliant infrastructure; we never see or store your full card details. While no method of transmission or storage is 100% secure, we continually review and improve our safeguards to protect your information.

8. International Data Transfers

Our infrastructure partners may process data in countries other than your own. Where data is transferred internationally, we rely on the safeguards provided by those partners (such as standard contractual clauses) to protect your information.

9. Your Privacy Rights (GDPR & CCPA)

Depending on your location, you have the right to:

• Access the personal data we hold about you.
• Request the correction of inaccurate data.
• Request the permanent deletion of your account and all associated data ("Right to be Forgotten"). Closing your account in Settings is not the same thing: it ends your access and clears your balance, while erasure removes what we hold. Ask us and we will erase it.
• Object to or restrict certain processing, and request a copy of your data (data portability).

To exercise any of these rights, contact us through our support team at contact@eliteworks.io. We answer privacy requests within 30 days.

We do not make decisions about you by automated means that produce legal or similarly significant effects.

If you are in the EU or the UK, you also have the right to lodge a complaint with your national data-protection authority; in the UAE, with the UAE Data Office. We would rather you came to us first.

10. Children's Privacy

EliteWorks is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date and, where appropriate, notify you in-app.

12. Contact

For any privacy questions or requests, reach us through our support team at contact@eliteworks.io.