Privacy Policy

1. Who we are

Elglide, Corp., a Delaware corporation at 5606 Dalton Ranch Ln, Sugar Land, TX 77479, USA, is the controller of the personal information described in this policy. You can reach us at support@elglide.com.

This policy covers elglide.com, docs.elglide.com, and the Elglide application at app.elglide.com.

2. Two different kinds of data

It matters which is which, so we treat them separately throughout this policy.

Account information is what you give us to have an account and be billed: your name, work email, company, and so on. We are the controller of it, and section 3 covers it.

Customer Data is the data Elglide moves for you — the contents of the tables and views you connect. We never decide what is in it or what it is for; you do. We process it only on your instructions, as a processor acting for you. Section 4 covers it.

3. Account information we collect

When you register or use the app

• Identity and contact: name, work email address, company name, and the users you invite.
• Authentication: a password hash — never the password itself — and session cookies needed to keep you signed in.
• Connection configuration: hostnames, ports, database names, and the schema, table, and column names you choose to sync. Credentials for those systems are encrypted at rest.
• Operational records: sync history, row counts, timings, error messages, and audit logs. We need these to run the service, bill accurately, and help you when something breaks.
• Billing records: invoices, credit balance, and payment history. Card details go directly to Stripe; we never receive or store your full card number.
• Support correspondence: what you send us when you ask for help.
• Elglide AI conversations: what you type to the assistant and its answers, plus a record of each action it proposes and token counts for each message.

When you request a demo on our website

The Book-a-Demo form collects your first and last name, work email, company, job title, country, website, and whether you opted in to marketing email. Submissions are stored durably with Cloudflare and forwarded to our application so we can respond.

What our website does not do

Our hosting provider processes standard server logs, including IP addresses, for security and reliability. In the application we use cookies that are strictly necessary — keeping you signed in and protecting against cross-site request forgery. We do not use advertising or profiling cookies, so there is nothing here to opt out of.

4. The data we move for you

This is the part most privacy policies are vague about, so here is precisely what happens.

If you use the hybrid agent

The agent runs inside your own network. It reads from your source and writes to your destination directly. The contents of your tables never reach Elglide's systems. What reaches us is control-plane information only: which task ran, when, how many rows moved, and whether it succeeded.

If you use our cloud or an SSH bastion

Your data passes through Elglide's systems in transit while a sync runs. It is written to a staging area inside the warehouse account you control — for Snowflake, your own user stage — and that staging area is purged once the load completes. Elglide does not retain a copy of your table contents after a sync finishes.

What we do retain is the operational record of the sync: counts, timings, schema and column names, and any error detail needed to diagnose a failure. An error message can occasionally include a data value that caused it — for example a value that would not convert to the destination type. We keep those records only as long as described in section 7.

If you use Elglide AI

Elglide AI is an optional assistant in the application. To answer you, it sends information to an AI model provider: what you type, and the records it looks up in your account. Those records can include connection details such as hostnames and database names, schema, table and column names, task settings, sync history, audit results, and agent and sync log lines. An audit result can include a value computed from your data, such as a total or a minimum.

The assistant does not read rows from your tables, and it never receives your passwords or keys. A password you type on a confirmation card is not sent to the model. A log line can occasionally include a data value, as described above, and that line would then reach the provider. This applies to hybrid agent logs too.

The provider does not use this information to train its models. It deletes it within 30 days, except where it must keep it longer to enforce its usage policy or to comply with the law.

If your organization uses its own provider API key, your organization's agreement with that provider applies to what is sent. Elglide Support may use the assistant when helping you.

What we never do with it

• We do not sell Customer Data or share it with advertisers.
• We do not use Customer Data to train machine-learning models.
• We do not access Customer Data except as needed to run the service or to fix a problem you have asked us to fix.

5. Why we use account information

• To provide the service — run your syncs, show you their results, keep your account working.
• To bill you — meter usage, apply credit, issue invoices, take payment.
• To support you — answer questions and investigate problems.
• To keep the service secure — detect abuse, investigate incidents, maintain audit trails.
• To tell you things you need to know — service notices, security notices, billing notices, and material changes to these policies. These are operational and you cannot unsubscribe from them while you have an account.
• To send marketing — only if you opted in. Every marketing email has an unsubscribe link, and unsubscribing has no effect on your service.

Where the GDPR applies, our legal bases are performance of a contract, our legitimate interests in securing and improving the service, consent for marketing, and compliance with legal obligations.

6. Who we share information with

We use a small number of service providers. Each is bound to handle information only on our instructions.

We may also disclose information if legally required — a valid subpoena, court order, or similar. Where we are permitted to tell you, we will. And if Elglide is ever involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; this policy continues to apply until you are told otherwise.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7. How long we keep things

• Account information: for as long as your account is open, and for a reasonable period afterward.
• Operational and audit records: retained while your account is open so you can review sync history, and to meet our security obligations.
• Billing records: retained as long as tax and accounting law requires, which is generally seven years.
• Customer Data contents: not retained after a sync completes, as described in section 4.
• Elglide AI conversations: kept so you can reopen them, and deleted when you delete them or 30 days after the last message, whichever comes first. They include the records the assistant looked up for you. In the application, only the person who wrote a conversation can see it. Action records and token counts are kept with your operational records.

When you close your account we delete your configuration and operational records within a reasonable period, except records we are required to keep. Data already delivered to your own warehouse is unaffected — it is yours and stays where you put it.

8. Security

Security is central to how the service is built rather than a feature bolted on. Connections are encrypted in transit. Credentials for your systems are encrypted at rest. Access to production systems is restricted to those who need it. The hybrid agent exists precisely so that organizations who cannot let data leave their perimeter do not have to.

No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting your information, we will notify you without undue delay and as required by law.

To report a security issue, email support@elglide.com.

9. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, object to or restrict how we use it, receive it in a portable format, or withdraw consent you previously gave. You also have the right not to be discriminated against for exercising these rights.

To exercise any of them, email support@elglide.com. We will respond within the time the applicable law requires, and we may need to verify your identity first.

If your personal information is inside Customer Data that one of our customers is moving, that customer controls it, not us. Please contact them directly; if you reach us instead, we will refer you to them.

10. Where your information is held

Elglide is based in the United States, and our infrastructure runs in the US East region of Amazon Web Services. If you use the service from outside the United States, your information will be transferred to and processed in the US, where privacy laws may differ from those in your country. Where a transfer mechanism is legally required, we rely on standard contractual clauses. Elglide AI requests are processed in the United States.

11. Children

Elglide is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. If a change is material we will give at least 30 days notice by email or in the product before it takes effect. The effective date at the top of this page always reflects the current version.