Privacy Policy

This policy explains what information Conto Finance, Inc. ("we", "us") collects when you use the Enchant service at askenchant.com, how we use it, who we share it with, and the choices you have. Enchant is a product of Conto Finance, Inc., a Delaware corporation. The policy applies to the website, the guest trial, and automated access through the agent API, the hosted MCP endpoint, and OAuth-authorized clients.

The short version: we collect what we need to run your jobs, bill you accurately, and keep the service safe. Your job content goes to the tool that executes it. We do not sell your personal information, and we do not run third-party advertising.

• Account information. Your email address when you sign up with a verification code. If you sign in with Google, we receive basic profile information from your Google account (your email address and account identifier). We never see your Google password.
• Prompts and job content. The prompts and inputs you submit and the results that come back. Your chat history and settings are stored in your own browser. On our servers we store content you choose to keep or share, such as saved prompts and shared results, and our internal usage records keep a short preview and a hashed fingerprint of prompts for billing, support, and abuse prevention rather than a full transcript.
• Payment information. Card payments are handled by Stripe. We do not store your card number; we keep transaction records such as amounts, timestamps, and your credit balance. If you top up with stablecoins, we record the wallet address and transaction details, and note that blockchain transactions are public by design.
• Guest trial usage. If you try Enchant without an account, we generate a random identifier stored in your browser and count the prompts you have used against the free allowance. On our servers we store that identifier with usage counts, timestamps, and a one-way hash of your IP address (not the address itself) to enforce the limit and prevent abuse.
• Usage and diagnostics. Server logs, aggregated page analytics through Vercel Analytics, and error and performance reports through Sentry. Our Sentry setup scrubs cookies and authorization headers from reports before they are sent.

We use the information above to:

• run your jobs: route each prompt to the right tool and return the result;
• show accurate prices, charge your credit balance, and process refunds for failed runs;
• operate accounts, sign-in, and saved or shared content;
• enforce guest limits, rate limits, and spending controls, and detect fraud and abuse;
• respond to support requests;
• monitor errors and performance and improve the service;
• comply with legal obligations.

We do not sell your personal information, and we do not use your data for third-party advertising.

This is the most important thing to understand about Enchant: when you run a job, the content of that job is sent to the third-party provider that executes it. That is how the work gets done.

• The providers vary by job type. They include image, video, and voice generation services, web search and research tools, document and data extraction tools, and other paid APIs from the Enchant catalog.
• Browser automation jobs run in cloud browser sessions provided by Browserbase, which visit websites at your direction. What you type into a browser job is visible to the websites the session visits.
• Each provider processes job content under its own terms and privacy practices. The product shows which tool handled a job, so you can see where your content went.

A practical tip: do not put sensitive personal information into a prompt unless the job actually needs it.

Beyond the job providers described above, we rely on a small set of companies to run the service itself:

• Stripe: card payment processing and checkout.
• Vercel: hosting and aggregated page analytics.
• Neon: the Postgres database where account and transaction data lives.
• Sentry: error and performance monitoring.
• Resend: transactional email, such as sign-in verification codes.
• Conto: the payment rails that move money between your credits and the tools that run your jobs.
• Browserbase: cloud browser sessions for browser automation jobs.

These providers process data on our behalf to deliver their part of the service. We may also disclose information if required by law, to protect the rights and safety of users or the public, or as part of a corporate transaction such as a merger or acquisition, with notice where required.

Enchant uses a deliberately small set of cookies and browser storage:

• Session cookie. When you sign in, we set an essential, httpOnly session cookie that keeps you signed in for up to 7 days.
• Sign-in flow cookies. Google sign-in uses short-lived cookies to protect the sign-in handshake.
• Browser storage.Your chat history, settings, and the guest trial identifier are stored in your browser's local storage. Clearing site data removes them.
• Analytics. Page analytics run through Vercel Analytics, which is designed to work without cross-site tracking cookies. We do not use advertising cookies or third-party trackers.

• Account information is kept for the life of your account. After your account is deleted, residual copies can persist in backups for up to 90 days before they are removed.
• Transaction and billing records are kept for up to 7 years, as required for tax and accounting purposes.
• Chat history and settings stored in your browser stay there until you clear them; we do not control that copy.
• Saved prompts and shared results are kept until you delete them or your account is deleted.
• Guest trial records, including the guest identifier, usage counts, and hashed IP addresses, are kept for up to 12 months and then deleted or aggregated.
• Server logs, diagnostics, and telemetry are kept for up to 13 months and then deleted or aggregated.

Wherever you live, we want you to be able to see and control your information. You can:

• ask for a copy of the personal information we hold about you;
• ask for that copy in a portable, machine-readable format;
• ask us to correct inaccurate information;
• ask us to delete your account and associated personal information;
• object to or ask us to restrict certain processing;
• clear your local chat history and guest identifier from your browser at any time.

These rights are available to everyone who uses Enchant, wherever you live. To exercise them, use the support form in the product or contact support@conto.finance. We may need to verify that a request comes from you before acting on it.

If you are in the European Economic Area or the United Kingdom, Conto Finance, Inc. is the controller of your personal data, and we process it on these legal bases:

• Contract: running your jobs, managing your account, and processing payments.
• Legitimate interests: keeping the service secure, preventing abuse of the guest trial, and improving the product.
• Legal obligation: tax and accounting records.
• Consent: where we ask for it, which you can withdraw at any time.

You also have the rights to object to or restrict processing and to data portability, described in Section 9, and you can lodge a complaint with the supervisory authority where you live. To exercise any of these rights, contact us as described in Section 9.

If you are a California resident, you have the right to know what personal information we collect (described in Section 2: identifiers such as your email address, commercial information such as transactions, and internet activity such as usage records), to delete it, to correct it, and to not be discriminated against for exercising those rights.

• We do not sell personal information, and we do not share it for cross-context behavioral advertising.
• To exercise your rights, use the support form or contact support@conto.finance. An authorized agent may submit a request on your behalf with proof of authorization.

Questions about privacy are welcome. Use the support form in the product, or reach us at:

• Conto Finance, Inc.
• support@conto.finance