1. Data Controller
EA Engine is a product of Deploq Ltd, a company registered in England and Wales under company number 17168322, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. The website is located at https://eaengine.ai. For privacy enquiries, contact us at support@eaengine.ai.
2. Data We Collect
- Account data: Your email address and name when you create an account.
- Usage data: EA generation jobs submitted, revision requests, quota usage, and session activity.
- Video content: YouTube URLs submitted and video files uploaded for processing. Video files are deleted immediately after frame extraction. YouTube URLs are retained as part of job records.
- Payment and card-verification data: Stripe stores your full payment details. EA Engine does not store full card numbers or security codes, but retains the Stripe customer and payment-method identifiers plus the card fingerprint, brand, last four digits, funding type, country, and wallet type where available. We use these limited identifiers for billing, fraud prevention, and free-trial abuse prevention.
- Analytics data: Anonymized product usage events collected via PostHog.
- Creator affiliate program data:EA Engine stores an applicant's name, email address, creator-channel URL and type, audience size, application notes, submitted content URLs and notes, review decisions, Founding reservation deadlines, and program status history. For approved affiliates, Refgrow processes the affiliate email and referral mapping, referral codes, referred page URLs, link-click and signup events, subscription conversion and cancellation status, commissions, payout details, and the signup email used to match a referred customer to a creator.
- Error data: Application error events and stack traces collected via Sentry for debugging purposes.
3. How We Use Your Data
- To provide and operate the EA Engine service;
- To process billing and card verification through Stripe;
- To prevent one payment card from claiming multiple free trials;
- To send service-related email notifications (e.g., EA ready, billing);
- To improve the product using aggregated analytics;
- To attribute eligible subscriptions to creator partners, calculate commissions and administer affiliate payouts;
- To debug and fix errors via Sentry monitoring.
4. Third-Party Processors
We share your data with the following third-party processors as necessary to provide the service:
- Stripe, Payment processing, card storage, and card verification. Privacy Policy
- Supabase, Database storage and authentication. Privacy Policy
- Anthropic, AI processing of video transcripts and chart frames to generate EA code. Privacy Policy
- OpenAI, Audio transcription via Whisper API (fallback when YouTube captions unavailable). Privacy Policy
- Vercel, Application hosting and edge network. Privacy Policy
- PostHog, Product analytics. Privacy Policy
- Sentry, Error monitoring. Privacy Policy
- Resend, Transactional email delivery. Privacy Policy
- Refgrow, Affiliate link tracking, creator portal, conversion reporting and payout administration. Privacy Policy
5. Data Retention
- Uploaded video files: Deleted immediately after frame extraction completes.
- Extracted frames: Deleted after the Claude API call completes.
- Output .ex5 and .mq5 files: Retained for 90 days from creation, then automatically deleted.
- Account data: Retained while your account is active and for 30 days after account deletion.
- Card abuse-prevention identifiers: The limited card identifiers listed above may be retained after account deletion as a fraud and free-trial abuse-prevention record. When final account deletion completes after the 30-day grace period, EA Engine deletes the linked Stripe Customer and its saved card details.
- Job records: Retained indefinitely (metadata only, after output files are deleted after 90 days).
- Affiliate attribution:The referral cookie and supporting attribution timestamp are limited to 60 days from the last valid affiliate-link click. Creator, conversion, commission and payout records may be retained for the program's operation, accounting, fraud prevention and legal obligations.
6. Your Rights
Under the UK GDPR and the Data Protection Act 2018, and the EU GDPR (if you are in the EU/EEA), you have the following rights:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object to processing (Article 21 GDPR)
To exercise any of these rights, contact us at support@eaengine.ai.
7. GDPR Lawful Basis
- Contract performance: Processing necessary to deliver the EA Engine service to you.
- Legitimate interests: Analytics (PostHog) and error monitoring (Sentry) to improve service reliability, plus fraud and free-trial abuse prevention.
- Consent: Non-essential analytics and affiliate referral tracking where consent is required by applicable law.
8. Cookies
EA Engine uses session cookies for authentication, PostHog analytics technologies to understand how users interact with the service, and Refgrow referral technology to attribute eligible subscriptions to creator partners. Refgrow tracking is not loaded before consent when consent is required. See our Cookie Policy for names, purposes and retention periods.
9. International Data Transfers
Some of our third-party processors are located in the United States (Stripe, Supabase, Anthropic, Vercel, PostHog, Sentry, Resend and Refgrow). Data transfers to the United States are covered by standard contractual clauses and applicable data transfer mechanisms where required.
10. Contact for Privacy Requests
For all privacy-related enquiries and data subject requests, please contact us at support@eaengine.ai. We aim to respond to all requests within 30 days.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on this page with a revised “Last updated” date.