At EliteWorks, we understand that privacy and confidentiality are your top priorities. This policy outlines how we collect, process, and protect your data.
Who We Are (Data Controller)
The data controller responsible for your personal data is EliteWorks (FZC), a Free Zone Company licensed by the SRTI Free Zone Authority, registered at Sharjah Research Technology and Innovation Park (SRTIP), Sharjah, United Arab Emirates. As a UAE-based company, we handle personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where it applies to you, the EU/UK GDPR and the California CCPA. For any privacy request, contact us at contact@eliteworks.io.
1. How We Handle Your Files
The core of our service relies on protecting your intellectual property. When you upload a document for an AI-content or similarity report, for rewriting, or as source material for the assistant or a generated document:
- Your files are yours: We never sell, rent, or resell your documents, and we never use them for advertising or marketing. Document content is transmitted only to the infrastructure and processing providers needed to deliver the service you requested (see Section 6), or where we are legally required to disclose it to competent authorities.
- Keeping and removing your files: Uploaded documents and generated results stay in your account so you can open them again, and you can remove any of them from your dashboard at any time. Closing your account in Settings ends your access and clears your balance, but leaves your documents with us. To have a document — or everything we hold about you — erased for good, write to contact@eliteworks.io and we will do it.
- Source databases: We compare your text against a broad index of web and published sources through third-party AI-detection and similarity APIs, configured so that your document is not submitted to, saved in, or indexed by those sources. Running a check on EliteWorks does not add your file to any database it is compared against, now or later.
- Your results: The report, rewritten text, or generated document is delivered to you in your private dashboard, and you can remove it from your dashboard at any time.
- Assistant and project content: The brief you give, the files you attach, and the messages you send are processed by the AI model providers that power these tools, and are kept in your account so you can come back to them. The same rules apply: never sold, never used for advertising.
2. Information We Collect
We only collect information strictly necessary to provide and secure our services:
- Account Data: your email address, the name you signed up with, and your sign-in method (handled securely via our auth provider, Clerk), your interface language, and your Discord account if you choose to link it. If you accept a referral invitation, we record the account that invited you and whether the invitation qualifies for a reward. The inviter sees aggregate invitation and reward counts, not your name, email, documents or individual purchase history.
- Technical and security data: when you make a payment we record the IP address and browser the purchase was made from, and keep it with that payment. It is used for one thing — showing what happened if that payment is disputed or reported as fraud — and not to profile you or to decide anything about your account. We do not log your IP address as you browse. Separately, our sign-in provider, our hosting, and our payment providers keep their own sign-in and transaction records, which include IP address and device information, to keep accounts and payments secure.
- Payment Data: Handled entirely by our third-party payment providers. EliteWorks does not capture, store, or have access to your full credit card numbers or banking details. We do store the identifiers those providers give us (such as a customer or invoice reference) and a record of what you bought, so that payments can be matched to your account.
- Document Content: The files you upload, and the briefs and messages you send to the assistant and the document tools, processed only to deliver the service you request.
- Usage Analytics: With your consent, data on how the platform is used (e.g., page views, feature usage) via PostHog, linked to your account when you are signed in, to help us improve the user experience. This includes session recordings — playbacks of how a page was used — which are configured to mask text and anything typed into a field, so they show where you clicked and moved rather than what you wrote. Analytics never includes the content of your documents.
3. How We Use Your Information
- To provide, operate, and maintain the services you request.
- To process payments and manage your credit balance.
- To secure the platform and prevent fraud or abuse.
- To communicate service-related notices and respond to support requests.
- To improve our product through usage analytics, where you have consented.
We do not use your document content to train our AI models, and we do not sell your personal data.
Emails we send
Two kinds. Service emails — sign-in codes, payment receipts, security notices — are part of your account and are sent for as long as you have one. Product updates and offers are separate: we send them only if you opt in — with the optional box in the welcome dialog when you first sign in, or later in your account settings — and you can switch them off in your settings or from the unsubscribe link in any such email. Switching them off never stops the service emails.
Legal bases for processing (GDPR)
Where the EU/UK GDPR applies to you, we rely on the following legal bases under Article 6:
- Performance of a contract (Art. 6(1)(b)): to create and operate your account, deliver the checks and rewriting you request, process payments, and manage your credits.
- Legitimate interests (Art. 6(1)(f)): to keep the platform secure, prevent fraud and abuse, defend ourselves against chargebacks and fraudulent payments, and improve our services — balanced against your rights and freedoms.
- Consent (Art. 6(1)(a)): for non-essential analytics cookies and any optional communications. You can withdraw consent at any time (in Cookie Settings, or by switching off product emails in your account settings) without affecting processing already carried out.
- Legal obligation (Art. 6(1)(c)): to meet accounting, tax, and other legal requirements, or to respond to valid legal requests.
4. Data Retention
We keep personal data only for as long as needed to provide the service and meet legal, accounting, or security obligations. Uploaded documents and generated results are retained so that your account history stays available to you. You can remove them from your dashboard at any time, and on request we will erase a document, or your whole account, for good. We do not use them to train AI models. Account data is retained while your account is active. Closing your account in Settings removes your sign-in and your token balance; the account record and your documents stay with us until you ask for erasure, which we carry out on request, subject to any retention required by law. Records of payments and invoices, including the IP address and browser recorded with each payment, are kept for as long as UAE tax and anti-money-laundering law requires — currently up to seven years — including after an account is closed.
5. Cookies and Tracking
We use essential cookies to keep you logged in and to prevent fraud. With your consent we also use analytics cookies to understand how the platform is used. You choose when you first visit, and you can change that choice at any time under Cookie Settings on the Cookie Policy page or in your account settings; your browser controls give you a further layer on top. See our Cookie Policy for details.
6. Data Sharing & Third Parties
We do not sell, rent, or trade your personal information or document contents to third parties for marketing purposes. Data is transmitted only to the providers needed to deliver what you asked for — authentication, payment processing, cloud hosting and storage, the originality and AI-detection provider, the AI model providers behind the assistant and the document tools, email delivery, and (with your consent) product analytics — and only to the extent each one needs. These partners are bound by their own data-protection obligations.
7. Data Security
We protect your data with industry-standard safeguards. All traffic between your browser and EliteWorks is encrypted in transit using TLS/SSL (HTTPS). Data at rest is held on secured infrastructure with restricted, role-based access. Card payments are processed by our third-party payment providers on their own PCI-DSS-compliant infrastructure; we never see or store your full card details. While no method of transmission or storage is 100% secure, we continually review and improve our safeguards to protect your information.
8. International Data Transfers
Our infrastructure partners may process data in countries other than your own. Where data is transferred internationally, we rely on the safeguards provided by those partners (such as standard contractual clauses) to protect your information.
9. Your Privacy Rights (GDPR & CCPA)
Depending on your location, you have the right to:
- Access the personal data we hold about you.
- Request the correction of inaccurate data.
- Request the permanent deletion of your account and all associated data ("Right to be Forgotten"). Closing your account in Settings is not the same thing: it ends your access and clears your balance, while erasure removes what we hold. Ask us and we will erase it.
- Object to or restrict certain processing, and request a copy of your data (data portability).
To exercise any of these rights, contact us through our support team at contact@eliteworks.io. We answer privacy requests within 30 days.
We do not make decisions about you by automated means that produce legal or similarly significant effects.
If you are in the EU or the UK, you also have the right to lodge a complaint with your national data-protection authority; in the UAE, with the UAE Data Office. We would rather you came to us first.
10. Children's Privacy
EliteWorks is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date and, where appropriate, notify you in-app.
12. Contact
For any privacy questions or requests, reach us through our support team at contact@eliteworks.io.