Privacy Policy

This Privacy Policy explains how Canela Code LLC (d/b/a OnlyEngage, “OnlyEngage,” “we,” “us”) collects, uses, shares, and protects information when you use the OnlyEngage website, applications, and services (the “Service”). By using the Service, you agree to the practices described here. This policy works alongside our Terms of Service.

1. Information We Collect

• Account information — email, display name, password credentials (managed via AWS Cognito), and your subscription tier.
• Content you provide — photos, captions, bios, voice samples, templates, and scheduling data you upload or create.
• Verification data — for certain features (e.g. marketplace), identity and age verification performed by our processor (Stripe Identity). We receive a pass/fail result and limited attributes; we do not store your government ID image.
• Payment data — handled by Stripe. We receive transaction metadata (amount, status, subscription/credit-pack identifiers) but never your full card number.
• Usage & device data — log data, IP address, browser and device information, and feature interactions, used for security, rate limiting, and improving the Service.

2. How We Use Information

• provide, operate, and maintain the Service and your account;
• run DMCA scanning, image enhancement, watermarking, and AI-assisted content tools at your direction;
• process subscriptions, credit-pack purchases, and marketplace transactions, including escrow;
• verify identity and age where required, and enforce safety and anti-fraud measures;
• communicate with you about your account, security, and (with your consent where required) updates;
• comply with legal obligations and enforce our Terms.

3. Adult-Content Sensitivity

We understand that material managed through the Service may be sensitive. We treat your content as confidential, restrict internal access to what is needed to operate the Service, and do not sell your content or use it to train third-party AI models beyond providing the feature you requested. AI providers process content transiently to return a result and are bound by their own data commitments (see Section 5).

4. How We Share Information

We do not sell your personal information. We share it only:

• with service providers and sub-processors that operate the Service on our behalf (Section 5);
• to send DMCA takedown notices you initiate, which by their nature include the contact information required by law;
• with another user only as needed to complete a marketplace transaction you enter into;
• to comply with law, legal process, or valid requests, and to protect the rights, safety, and security of users and the public; and
• in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. Service Providers & Sub-Processors

We rely on trusted providers to deliver the Service, including:

• Amazon Web Services — hosting, object storage, and content delivery;
• AWS Cognito — authentication and identity;
• Neon — database;
• Upstash — caching and rate limiting;
• Stripe — payments, subscriptions, escrow, and identity verification;
• Anthropic (Claude) and ClipDrop — AI text generation and image enhancement;
• Cloudflare — content delivery and edge security;
• Amazon SES and Sentry — transactional email and error monitoring.

Each processes information only as needed to provide its function and under its own data-protection commitments.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, except where retention is required for legal, security, accounting, or dispute-resolution purposes. You can delete content within the Service, and closing your account removes your data subject to those exceptions.

7. Security

We use technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and isolation of production secrets. No system is perfectly secure; we cannot guarantee absolute security, but we work to protect your data and will notify you of incidents as required by law.

8. Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at privacy@onlyengage.com. We will respond as required by applicable law and may need to verify your identity first.

9. Age Restriction

The Service is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us at privacy@onlyengage.com and we will take appropriate action.

10. International Users

OnlyEngage is operated from the United States, and your information may be processed in the U.S. and other countries where our providers operate. By using the Service, you understand your information may be transferred to jurisdictions with different data-protection laws than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date above and, where appropriate, by additional notice. Your continued use of the Service after changes take effect constitutes acceptance.