Privacy Policy

Scope

This Privacy Policy applies when you:

• visit ee-aero.com
• use the Endeavor Elements platform
• request onboarding, demos, or information
• create an account
• submit forms
• interact with marketplace or profile functionality
• upload files or other content
• communicate with us
• purchase or request services from EE

Personal Information We Collect

We may collect the following categories of personal information.

A. Information you provide directly

• name
• email address
• phone number
• company name
• job title
• mailing or billing address
• account and login information
• profile information
• marketplace listing information
• communications with us
• onboarding and support information
• payment-related information
• files, documents, and other content you provide

B. Information collected automatically

• IP address
• browser type and version
• device information
• operating system
• session and usage data
• date and time of access
• referring URLs
• page views and feature interactions
• approximate location inferred from technical signals

C. Information from third parties

We may receive information from:

• payment processors
• analytics providers
• hosting and infrastructure providers
• communication and email providers
• scheduling providers
• identity or authentication providers
• publicly available websites or sources when you ask us to analyze or draft business profile information based on them

How We Use Personal Information

We may use personal information to:

• provide, operate, and improve ee-aero.com and the Endeavor Elements platform
• create and manage accounts
• authenticate users and maintain sessions
• process onboarding requests and account approvals
• operate marketplace and profile features
• provide direct services, support, and communications
• process transactions, refunds, and credits
• analyze submissions and uploaded materials
• generate or assist with drafts, summaries, classifications, and other outputs
• monitor usage, performance, and security
• detect, prevent, and investigate fraud, abuse, or unlawful conduct
• comply with legal obligations
• enforce our agreements and protect our rights

Legal Bases for Processing

Where required by law, we process personal information on one or more of the following bases:

• performance of a contract
• legitimate interests
• compliance with legal obligations
• consent, where required
• establishment, exercise, or defense of legal claims

Cookies and Similar Technologies

We may use cookies, local storage, pixels, and similar technologies to:

• keep you signed in
• remember preferences
• measure usage and performance
• support analytics and attribution
• maintain security and session integrity

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

Marketplace and Profile Information

If you create or request a company profile, service offering, listing, or similar marketplace content, some information may be visible to other users depending on the feature and intended workflow.

You are responsible for ensuring that any personal information you submit about yourself or others is accurate and that you have the right to provide it.

ChatGPT and Codex Plugin

Connecting the Endeavor Elements plugin authorizes read-only access within the organization you select. We receive the tool requests sent by ChatGPT or Codex, including search text, filters and selected record identifiers. We process your connected profile, organization, membership and product-access information, and return permitted regulatory evidence, source citations, existing watch information, Marketplace records and assigned request status. The connection does not give us access to conversations that the host does not send to our tools.

We retain tool inputs and results, outcomes, errors, timestamps, network information and user, organization, request and release identifiers for service delivery, regulatory audit, security, reliability and support. Authorized platform administrators, support personnel and data-governance personnel can access this information for their governed duties. Our hosting providers and PostHog process the corresponding operational and analytics data. Tool results are delivered to OpenAI as the host you connected; OpenAI processes them under the terms and settings applicable to your ChatGPT or Codex account.

Our own web and native application journeys can also record interactions, entered content and session replay. This does not mean we record the ChatGPT or Codex interface. Passwords, session credentials and other access capabilities are replaced with non-authorizing metadata at our governed telemetry boundary. Operational capture does not itself authorize browser-automation training: training export requires an effective, purpose-specific agreement or recorded terms tied to the organization and actor. An ordinary organization agreement or paid entitlement alone is insufficient.

Retention follows the applicable organization agreement and regulatory retention policy; there is no single global deletion period. You can stop new plugin access by revoking the connection in Endeavor Elements Settings and removing the connection in your host. Your organization administrator controls membership and access. Disconnecting does not delete existing audit records or copies already delivered to OpenAI. Ask your organization administrator or contact support@endeavor-elements.com to request access, correction, deletion, restriction, or review of purpose-specific training authorization. We evaluate requests under applicable law, the organization agreement and any required record-retention obligations; requests concerning OpenAI-held copies must also be addressed through OpenAI.

AI-Assisted and Automated Processing

We may use automated systems, machine learning, and large language models to process content and generate or assist with:

• summaries
• profile drafts
• data extraction
• categorization
• workflow support
• search and matching
• operational outputs

This processing may involve uploaded files, profile information, communications, and website information you instruct us to analyze.

Automated outputs may not always be accurate or complete. Human review remains important.

How We Share Personal Information

We may share personal information:

• with service providers that help us operate the Services
• with payment processors to process transactions
• with infrastructure, storage, communications, and analytics providers
• with advisors, auditors, insurers, investors, or financing counterparties as reasonably necessary
• with affiliates in connection with operations
• with other users where necessary to provide marketplace or profile functionality
• in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction
• where required by law, regulation, subpoena, court order, or governmental request
• where necessary to protect rights, safety, security, or property
• with your consent or at your direction

Data Retention

We retain personal information for as long as reasonably necessary to:

• provide the Services
• maintain business records
• comply with legal obligations
• resolve disputes
• enforce agreements
• support security, fraud prevention, and audit needs

Retention periods vary depending on the type of information, the context in which it was collected, and legal or operational requirements.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information.

No security measure is perfect, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and using appropriate safeguards when transmitting information.

International Data Transfers

We may process and store personal information in the United States and other jurisdictions where we or our service providers operate.

By using the Services, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your home jurisdiction.

Your Rights

Depending on your jurisdiction, you may have rights to:

• access personal information
• correct inaccurate personal information
• request deletion of personal information
• object to or restrict certain processing
• receive a portable copy of certain information
• withdraw consent where processing is based on consent
• lodge a complaint with a regulator

To exercise these rights, contact us using the contact information below. We may need to verify your identity and authority before acting on a request.

California Privacy Notice

If California law applies to you, you may have rights to know, access, correct, and delete personal information, and to be free from unlawful discrimination for exercising privacy rights.

EE does not sell personal information for money in the ordinary sense. EE also does not knowingly sell or share personal information of individuals under 16 years of age.

Children's Privacy

The Services are intended for business and professional use and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

Third-Party Services

The Services may link to or integrate with third-party services. Those third parties have their own privacy policies and practices, and EE is not responsible for them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version becomes effective when posted unless a later date is stated.

Contact