# Privacy Policy

> **Placeholder — for legal review.** This document is a draft skeleton and
> has not been reviewed by counsel. Replace before launch.

_Last updated: August 2026_

## Overview

Elaichi ("we", "us") operates the elaichi.ai website and the Elaichi MCP
control plane. This policy describes what we collect, why, and the choices
you have.

## Information we collect

- **Account information** — name, email address, and organization details you
  provide when signing up or being provisioned via SSO/SCIM.
- **Connection metadata** — which connectors your organization connects and
  operational status. Third-party credentials are stored encrypted in a
  dedicated vault and are never exposed to end users or AI models.
- **Audit and usage data** — privileged actions and MCP tool calls are
  recorded in your organization's append-only audit log.
- **Website analytics** — this marketing site does not set analytics cookies.

## How we use information

To provide and secure the service, comply with legal obligations, and
communicate with you about your account.

## Data retention and deletion

Organization admins control audit retention and member offboarding. Contact
us to request account deletion.

## Contact

Questions? Email [hello@elaichi.ai](mailto:hello@elaichi.ai).