Privacy Policy

1. Who we are

Enchanta is operated by NORD Innovation Ltd. (“NORD”, “Enchanta”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, join the waitlist, create an account, connect a photo source, upload photos or memories, use AI-assisted features, place an order, or contact us.

For privacy questions or requests, contact: privacy@enchanta.ai.

2. What we collect

Depending on how you use Enchanta, we may collect:

Waitlist and contact information

• email address;
• name, if provided;
• communication preferences;
• messages you send us.

Account information

• name;
• email address;
• login details or authentication identifiers;
• country or region;
• account settings;
• consent and preference records.

Photo and memory content

• photos and videos you upload or select;
• image metadata, where available, such as dates, file names, album information, location metadata, or device metadata;
• captions, names, dates, stories, prompts, notes, and other text you provide;
• book projects, layouts, previews, drafts, exports, and production files.

Third-party photo source data

If you connect Google Photos or another source, we may receive the photos, videos, metadata, and account information you choose or authorize, only as needed to provide Enchanta. For Google Photos, we use selected access to help you create, edit, preview, print, and support your Enchanta book. See section 5 for our Google API Limited Use commitments.

Order and payment information

• order details;
• products purchased;
• shipping address;
• billing country;
• payment status;
• transaction identifiers;
• tax and invoice information.

We generally do not store full card numbers. Payment processing is handled by third-party payment providers.

Usage, device, and technical information

• IP address;
• device and browser type;
• pages viewed;
• referral source;
• approximate location based on IP address;
• logs, diagnostics, crash data, and security events;
• cookies and similar technologies.

Support communications

• emails, forms, chat messages, and other support interactions;
• attachments or screenshots you provide.

3. How we use personal data

We use personal data to:

• operate the website and waitlist;
• create and manage user accounts;
• allow users to import, upload, select, organize, and edit photos;
• generate book drafts, layouts, captions, previews, and print-ready files;
• provide AI-assisted features;
• process orders, payments, printing, shipping, refunds, and support;
• communicate about launch, early access, account activity, orders, updates, and support;
• improve product reliability, safety, usability, and performance;
• prevent fraud, misuse, security incidents, and policy violations;
• comply with legal, tax, accounting, and regulatory obligations;
• enforce our Terms.

4. AI and model training

We may use AI service providers to process your photos, text, metadata, and project content for the purpose of providing Enchanta features, such as memory organization, layout generation, text suggestions, and book creation.

Unless you separately and explicitly agree, we do not use your personal photos, Google Photos data, private memories, or book projects to train foundation models.

We may use aggregated, anonymized, or de-identified information to understand product performance and improve Enchanta, provided it does not identify you or your personal content.

5. Google Photos & the Google API Limited Use statement

When you connect Google Photos, Enchanta asks Google for access to the photos and videos you choose so you can create an Enchanta book. We use that selected Google Photos data only to help you choose, arrange, edit, preview, print, and support your book.

Enchanta’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve user-facing Enchanta features that are visible and beneficial to you.
• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not use Google user data to build a general-purpose photo gallery.
• We do not use Google user data to train AI models unless you separately and explicitly agree and applicable Google policies allow it.
• We do not allow humans to read Google user data unless necessary for security, legal compliance, support you requested, or with your explicit permission.

You can disconnect Enchanta from your Google Account at any time through your Google Account permissions, and through your Enchanta account settings where available.

6. Legal bases for processing

Where applicable data protection law requires a legal basis, we rely on one or more of the following:

• your consent, such as for waitlist emails, optional marketing, optional photo access, or optional cookies;
• performance of a contract, such as creating your account, generating your book, processing orders, and providing support;
• legitimate interests, such as improving security, preventing misuse, debugging, and understanding service performance;
• legal obligations, such as tax, accounting, consumer protection, and compliance duties.

7. How we share personal data

We may share personal data with:

• cloud hosting and storage providers;
• authentication and login providers;
• AI and image-processing service providers;
• print and fulfillment partners;
• shipping and logistics providers;
• payment processors;
• email and customer-support providers;
• analytics and product-monitoring tools;
• legal, accounting, tax, insurance, and professional advisors;
• authorities, courts, or regulators where required by law;
• a buyer, investor, or successor in connection with a merger, financing, acquisition, restructuring, or sale of assets.

We do not sell your personal photos or memories.

8. International transfers

We may process and store personal data in Israel, the United States, Europe, and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international data transfers, such as contractual protections and transfer mechanisms required by applicable law.

9. Retention

We keep personal data only as long as reasonably needed for the purposes described in this Privacy Policy, unless a longer period is required by law:

• waitlist emails: until you unsubscribe or request deletion;
• account data: while your account is active;
• uploaded photos and project files: while your project is active, and then for up to 12 months unless you delete them earlier;
• print-ready files: for 12 months after order completion, for reprints, support, and quality issues;
• order, invoice, tax, and payment records: as required by law;
• backups: deleted on a rolling basis within 90 days;
• support records: for 24 months, unless a longer period is needed for legal or security reasons.

10. Deletion

You may request deletion of your account, uploaded photos, project files, or personal data by contacting privacy@enchanta.ai.

We may need to retain limited information where required for legal, accounting, fraud-prevention, security, dispute, or order-support purposes. Deleting a project may make it impossible to reprint or continue editing a book.

11. Your rights

Depending on your location, you may have rights to:

• access your personal data;
• correct inaccurate data;
• delete data;
• restrict or object to certain processing;
• withdraw consent;
• request a copy of your data;
• opt out of marketing emails;
• complain to a data protection authority.

To exercise rights, contact privacy@enchanta.ai. We may need to verify your identity before fulfilling a request.

12. Children’s privacy

Enchanta is not directed to children and may only be used by adults. Because Enchanta is used for family memories, users may upload photos or information involving children. You are responsible for ensuring that you have the legal right to upload, edit, print, and share that content.

If you believe a child’s personal data was provided to Enchanta without proper permission, contact us at privacy@enchanta.ai.

13. Security

We use reasonable technical and organizational measures designed to protect personal data. These may include encryption in transit, access controls, vendor review, logging, backups, and operational security practices. No online service can be guaranteed to be completely secure.

14. Marketing communications

If you join the waitlist or subscribe to updates, we may send you Enchanta news, launch updates, early-access invitations, and product announcements. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us. We may still send non-marketing messages, such as order updates, account notices, security alerts, or legal notices.

15. Changes to this Privacy Policy

We may update this Privacy Policy as Enchanta evolves. If changes are material, we will take reasonable steps to notify you. The “Last updated” date shows when this policy was last changed.

16. Contact

NORD Innovation Ltd., operating brand Enchanta.

• Privacy: privacy@enchanta.ai
• Support: support@enchanta.ai