Your data, and what Enso does with it

1. Who we are

Enso is run by Aberdeen Experience Labs, a sole proprietorship that does business as Sundays. In this policy "we" and "us" means Aberdeen Experience Labs, doing business as Sundays. This policy covers the Enso app at enso.study and its subdomains, the Enso desktop app, and the Enso connector that AI tools such as Claude and ChatGPT use.

Each team in Enso works in a room. The organization that owns a room decides what goes into it, so for room content that organization is the controller and we process it on their behalf. For your own account, your desk and your connections, we are responsible for your data.

2. What Enso is

Enso is a shared workspace. Your team's files, messages and notes live in private rooms, and an assistant answers questions about them and shows where each answer came from. You also get a private desk of your own.

Enso is an early beta. It may change, break or be unavailable, and the assistant can be wrong. Do not use it as your only copy of anything, or as professional, legal, medical or financial advice.

3. What we collect

Your account and profile

• Your email address, name and role in each room you belong to.
• What you choose to add to your profile: pronouns, field, position, a one-line bio, a phone number and your working hours. Only people in your rooms can see these.
• The face you pick. It is a drawn shape and colour, not a photo.
• Your password, stored only as a one-way hash.
• A record that you accepted these terms, with the version and date.

What you put into rooms

• Documents and files you upload or sync, and the text we pull out of them (including transcripts of audio and video, and text read from images) so they can be searched.
• Messages you send to other people, and your chats with the assistant.
• Share links you make, and who made them.

Your desk

Your desk belongs to you, not to a room. It holds your notes, tasks, desk files, your chats with Enso on the desk, and your answers to the first-day questions. No room and no room admin can read it.

Enso on your desk can also answer from the rooms you belong to, for you only. It reads only what you can already see in each room: documents (never ones a room keeps private to admins, even if you are an admin, and never locked file contents), what is asked of you, and your list there. It reads the conversations you are in only when "Let my AI tools read my messages" is on, the same switch as in section 5. What it reads is sent to Anthropic to write the answer, as the room's own assistant does, and nothing from your desk goes into any room.

Connections

• When you connect an AI tool: which tool you allowed, when, when it was last used, and a log of what it added and read (see section 5).
• When your room connects Notion or Buffer: the access token for that service, encrypted, and the content that moves between them.

Support and fixing problems

• Feedback you send, thumbs up or down on answers, and your support thread with Enso.
• A short diagnostic trail when something breaks, or when you write to us about a problem. It records which version you were running, which screen you were on, which named buttons you used, which of our own addresses answered and how, and the error. It never holds content: no messages, documents, file names, search terms or anything you typed. This is on by default, because a fault that only reports itself when someone remembers to switch on a recorder never gets fixed.
• If you turn on notifications, your browser's push address for that device.

What we do not collect

We do not use advertising trackers or third-party analytics, we do not ask for your precise location, and we do not take payments.

4. How we use it

• To sign you in, keep each room private to its members, and show you what you are allowed to see.
• To make your files searchable and let the assistant answer from them, with sources.
• To send the mail you need: invites, password resets and notices about your account or a problem you reported.
• To find and fix problems, and keep Enso secure.

Daily report. A room can turn on a daily report for a message conversation. It is off by default and set for each conversation. When it is on, Enso summarizes that day's messages in the conversation into one report (overview, topics, decisions, action items, people) and saves it into the room's own Notion, where the room can search it. People are named, never shown by email address. Chats with the assistant are not included.

We do not sell your data, and we do not use it to advertise to you.

5. AI tools and connectors (MCP)

You can connect an AI tool you use, such as Claude or ChatGPT, to Enso. You sign in to Enso and agree on a consent screen first. After that the tool acts as you.

What it can read and write

• Your desk. It can read and add to your own notes, tasks and desk files. When it opens a file it gets the file itself: an image as an image, a document as its text, and a recording as its transcript when there is one, plus a link to the file that works for ten minutes.
• Rooms you belong to. It can search and read only what you can see there. Documents a room keeps private to admins, and locked file contents, are never sent to an AI tool, even for an admin. Files open the same way as on your desk, with the same rules.
• Your messages, only if you turn it on. This is off until you switch on "Let my AI tools read my messages" in Connections, then Your AI tools. When it is on, the tool can list, read and search the conversations you are in, in the rooms you belong to. That includes what the other people in those conversations wrote there, so they are shown to the AI tool you chose. It never sees anyone else's conversations, and being a room admin gives it no extra access. It cannot send, change, delete or mark any message as read. People are named, not shown by email. Enso's own notices and deleted messages are left out, and a file in a message is shown only as "a file in" that room. One switch covers every AI tool you connect, and Enso on your desk too, and turning it off stops access at once.
• Adding to a room. It can add or update documents in a room only if you are an admin of that room and the room has "let AI tools add to this room" switched on.

Your access is checked again on every request. If you leave a room or lose admin rights, the tool loses that access straight away.

What Enso keeps

• A log of what each AI tool added, with the time and size of each item.
• A log of what each AI tool read for you (messages and files), shown only to you in Connections, then Your AI tools, under "What your AI tools read".
• When each connection was last used.
• Access codes for the connection, stored only as one-way hashes. An access code lasts one hour and is renewed while the connection is in use.

Enso does not ask an AI tool for your chat history, memory or other files. It only receives what the tool sends in a request to Enso.

Switching it off

Go to Connections, then Your AI tools, and revoke any connection. It stops working at once. You can also remove Enso from inside the AI tool.

Once data reaches the AI tool

Anything Enso sends to an AI tool you connected is then handled by that tool's provider under its own privacy policy and settings, for example Anthropic or OpenAI. Check those settings if you care whether your chats are used to train their models.

6. AI models and training

We do not train any AI model on your content. Not on your documents, messages, desk or chats.

Enso's assistant, document sorting and reading text from images run on Anthropic's Claude through Anthropic's commercial API. Under Anthropic's commercial terms, it does not use what we send it to train its models. Audio and video are transcribed by AssemblyAI.

7. Who helps us run Enso

Your data passes through these providers only so we can run Enso:

• Vercel: hosts the app and runs it.
• Supabase: our database and file storage, for accounts, rooms, desks and files.
• Cloudflare R2: storage for large media files.
• Anthropic: the AI model behind the assistant, sorting and image reading.
• AssemblyAI: turns audio and video into text.
• Resend: sends Enso's email.
• Your browser's push service (Apple, Google or Mozilla): delivers notifications if you turn them on. The message is encrypted for your device.
• Notion, only if your room connects it: the room's own Notion, as a source of documents and where daily reports are saved.
• Buffer, only if your room connects it: schedules the social posts your room chooses to send.
• GNews, only if your room uses the news feed: receives the search words your room sets. No personal data is sent.

These providers may store data in the United States and other countries. We keep this list current and will update this page before adding a new provider that handles your content.

8. How long we keep things

Room content, desk and account

While your account or the room is active, or until you or the room delete it.

Diagnostic trails

Deleted automatically after 14 days.

News feed text from outside sources

The original text is cleared after 30 days. Your team's own notes on it stay.

Sign-in sessions

30 days, then you sign in again.

AI tool connections

Access codes last 1 hour. A connection stays live while used and ends 30 days after its last use, or when you revoke it.

Password reset links

1 hour, single use.

Invite links

7 days.

Share links

24 hours, 7 days, 30 days or no end date, as the sharer picks. The sharer can turn a link off at any time.

File links in the app

A few minutes each.

9. How we protect it

• Passwords, connector keys, AI tool access codes and reset links are stored only as one-way hashes, so a copy of our database would not let anyone sign in.
• Tokens for connected services such as Notion are encrypted (AES-256).
• Your browser never reads our database directly. Every request goes through our server, which checks who you are and which room you are in before it answers.
• Rooms are kept apart. Desks belong to one person and no room can reach them.
• Files are private and served through short-lived links. All traffic uses HTTPS, and stored data is encrypted at rest by our providers.
• No security is perfect, especially in a beta. We work hard at it, and you accept some risk (see section 12).

10. Your choices and rights

• See and change your profile at any time in the app.
• Revoke AI tools in Connections, then Your AI tools.
• Turn notifications off in the app or in your browser.
• Get a copy of your data, correct it, or delete your account: email admin@enso.study. We will reply within 30 days. Room content belongs to the organization that owns the room, so we may need to check with them first.

Depending on where you live, you may have other rights, such as to object or to complain to your data protection authority. Email us and we will help.

Where you live

We try to meet the strictest privacy rules our users are likely to be under, so everyone gets the same protection, wherever they are.

• Canada. We follow the principles of PIPEDA: we collect only what Enso needs, tell you what it is for, keep it secure, and let you see and correct it. If you are in Quebec, the same rights apply, and you can also ask us how your information is used.
• European Economic Area, the United Kingdom and Switzerland. We process your data to run the service you asked for (to carry out our agreement with you), to keep it secure and fix faults (our legitimate interests), and where you tell us to, such as turning on notifications (your consent, which you can withdraw at any time). You have the right to access, correct, delete, restrict or object to our use of your data, to move it to another service, and to complain to your data protection authority. Our providers may handle data in the United States and other countries; where they do, they are bound by their own data protection terms.
• United States. We do not sell your personal information and we do not share it for advertising. If you live in a state that gives you rights over your data, such as California, you can ask us to tell you what we hold, correct it, or delete it, and we will not treat you differently for asking.
• Everywhere else. You can use the choices above, and email us if your local law gives you more.

You can send any of these requests to admin@enso.study. We may need to confirm it is you before we act on it.

11. Children

Enso is a work tool. It is not meant for anyone under 16, and we do not knowingly collect their data. If you think a child has an account, email us and we will delete it.

12. Beta terms of use

What you must not upload

To keep everyone safe during the beta, do not upload:

• Health records or other protected health information.
• Payment card numbers, bank logins or full account numbers.
• Government ID numbers, such as social security or passport numbers.
• Passwords or secret keys for other services.
• Anything you do not have the right or consent to share, or anything unlawful.

If you are not sure you are allowed to put something in, leave it out.

Your content stays yours

You keep all rights to your content. You give us only the permission we need to store it, process it and show it to you and the people you share it with, and to keep Enso running.

No warranty, and limits on our liability

Enso is provided "as is" and "as available", without warranties of any kind, including accuracy, fitness for a purpose, or that it will always work.

As far as the law allows, we are not liable for indirect or consequential losses, or for lost data, profits or content, from using the beta. Our total liability for any claim is limited to the greater of what you paid us in the last twelve months or US $100. The beta is free, so that is expected to be zero.

You agree to cover us for claims about content you uploaded without the right to.

Ending your use

You can stop using Enso at any time and ask us to delete your data. We may pause or end access if we need to protect the service or follow the law.

13. Changes

When we change this page in a way that matters, we raise the version, update the date at the top, and ask you to accept the new version in the app. We record which version you accepted and when.

14. Contact

Questions about your data or this policy: admin@enso.study. You can also write to us in your Enso support thread.

Acceptance. By ticking the box and choosing "I agree" in the app, you confirm you have read and agree to this policy and these terms (version above). If you accept for an organization, you confirm you may do so.