Privacy policy
Last updated:
Dec 9, 2025
This Privacy Policy describes how Etcetera, Inc. (“elly.fit,” “Elly,” “we,” “our,” or “us”), a Delaware corporation, collects, uses, and protects limited information in connection with its website and omni-channel conversational AI services that handle calls, text messages, and chat communications (the “Services”).
Elly’s guiding principle is data minimization. We collect only the information necessary to operate the Services.
1. Information We Collect
We intentionally limit data collection.
a. Information You Provide
We collect only information you voluntarily provide, which may include:
Name
Business name
Email address
Phone number
Account login credentials
Support communications
b. AI Communication Data (Customer-Directed)
When you route calls, text messages, or chats through Elly:
Elly processes communication content solely to deliver the Services
By default, calls are not recorded
By default, Elly does not use communications to train or improve general AI models
You control what data is routed through the platform
Customers’ communications remain your responsibility as the business using Elly
c. Automatically Collected Technical Information
We collect limited technical information necessary for system operation and security, which may include:
IP address
Device and browser type
Session identifiers
Basic usage logs and timestamps
This information is used strictly for security, performance monitoring, and service reliability.
2. How We Use Information
We use information solely to:
Provide and operate the Services
Authenticate users and secure accounts
Deliver communications on your behalf
Provide customer support
Detect, prevent, and address security issues
Comply with legal obligations
We do not use personal data for advertising, behavioral marketing, or data brokerage.
3. Data Processing Roles
Depending on the context:
Elly acts as a data processor for customer communications you direct through the platform
You act as the data controller for your customers’ personal data
You are responsible for providing all legally required notices and obtaining all required consents from your customers.
4. Cookies and Essential Tracking
Elly uses only essential cookies and similar technologies required for:
Authentication
Network security
Core system functionality
We do not use third-party advertising cookies or cross-site tracking technologies.
5. Data Sharing
Elly does not sell personal information.
We may share limited data only with:
Cloud infrastructure and hosting providers
Telecommunications carriers and messaging vendors
Security and compliance service providers
Government authorities when legally required
All service providers are contractually obligated to protect information and use it solely to provide services to Elly.
6. Data Retention
Account information is retained while your account remains active
Communication data is retained only as necessary to provide the Services or as configured by you
You may request deletion of your data at any time, subject to legal retention obligations
7. Your Privacy Rights
Subject to applicable law, you may have the right to:
Access your personal information
Correct inaccuracies
Request deletion
Restrict or object to certain processing
Requests may be submitted to:
support at elly.fit
8. Call, Text, and Chat Consent
You represent and warrant that you have obtained all legally required consent from your customers for:
Automated calling or messaging
Text communications
Use of AI-powered communication tools
Call recording or monitoring, if you explicitly enable it
Elly relies solely on your representations regarding compliance with consent and communications laws.
9. Data Security
Elly maintains administrative, technical, and physical safeguards designed to protect personal information. However, no security system can be guaranteed to be completely secure.
10. Children’s Privacy
The Services are not directed to individuals under the age of 13. Elly does not knowingly collect or process personal data from children.
11. International Data Transfers
Elly is based in the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where Elly or its service providers operate.
12. Policy Updates
Elly may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.
13. Contact Information
Email: support at elly.fit
GDPR DATA PROCESSING ADDENDUM
This Data Processing Addendum (“DPA”) forms part of the agreement between Etcetera, Inc. (“Processor”) and the customer (“Controller”) who uses Elly’s Services involving the processing of Personal Data subject to the EU General Data Protection Regulation (GDPR). This DPA is included for EU-readiness, even though Elly does not currently target EU users.
1. Roles of the Parties
The Customer is the Data Controller
Etcetera, Inc. is the Data Processor
Elly processes Personal Data only on documented instructions from the Customer and solely to provide the Services.
2. Scope of Processing
Elly may process:
Names
Phone numbers
Message content (calls, texts, chats)
Communication metadata
Purpose: To route, manage, and deliver omni-channel customer communications on behalf of Customer.
3. Processing Instructions
Elly processes Personal Data solely to:
Provide the Services
Provide customer support
Maintain security
Meet legal obligations
Elly does not process Personal Data for its own independent commercial purposes.
4. Confidentiality
All authorized personnel are bound by confidentiality obligations and receive privacy training.
5. Security Measures
Elly maintains appropriate safeguards including:
Access controls
Encryption in transit
Infrastructure monitoring
Incident response procedures
6. Subprocessors
Customer authorizes Elly to use subprocessors for infrastructure, telecom, and security services. Elly remains contractually responsible for subprocessors’ compliance.
7. International Transfers
Transfers outside the EU, including to the United States, are governed by:
Standard Contractual Clauses (SCCs)
Other lawful transfer mechanisms where applicable
8. Data Subject Requests
Elly shall reasonably assist Customer with GDPR requests for:
Access
Correction
Deletion
Restriction or objection
9. Data Breach Notification
Elly will notify Customer without undue delay after becoming aware of a Personal Data breach.
10. Deletion or Return of Data
Upon termination, Elly will delete or return Personal Data upon request, unless legally required to retain it.
11. Audits
Elly will make available information reasonably necessary to demonstrate GDPR compliance, subject to security and confidentiality protections.
12. No Model Training on Controller Data
Customer communication data is not used to train or improve general AI models, unless explicitly authorized in writing.
CALIFORNIA CONSUMER PRIVACY ACT (CCPA / CPRA) PRIVACY NOTICE
This section applies solely to California residents.
1. Categories of Personal Information Collected
Elly may collect:
Identifiers (name, email, phone number)
Internet activity (usage logs)
Customer communication content (calls, texts, chats)
Elly does not collect sensitive personal information for independent purposes.
2. Purpose of Collection
Information is collected solely to:
Provide and operate the Services
Secure accounts
Deliver customer communications
3. Sale or Sharing of Data
Elly:
Does not sell personal information
Does not share personal information for behavioral advertising
Does not engage in targeted advertising
4. Data Retention
Data is retained only:
As long as required to provide Services
Or as required by law
5. Consumer Rights
California residents may request:
Disclosure of collected information
Deletion
Correction
Limitation of sensitive data use
Opt-out of sale or sharing (not applicable)
6. How to Exercise Rights
Submit requests to:
support at elly.fit
Identity verification is required.
7. Non-Discrimination
Elly will not discriminate against users who exercise privacy rights.
8. Authorized Agents
Authorized agents may submit requests on your behalf with proper documentation.