1. Scope and our role
The Services are designed for businesses and authorized business users, not for personal, family, or household use. By using the Services, you acknowledge this Policy. If you use the Services for an organization, that organization is the “Customer.”
Customer Data
When a Customer submits or connects information about its leads, prospects, customers, employees, creators, audiences, or other third parties, the Customer determines why and how that information is used. For that information, Customer is the controller or business and Engine acts as its processor, service provider, or contractor. Engine processes that information only to provide, secure, support, and improve the Services as authorized by the Customer and our Data Processing Addendum.
Engine Business Data
Engine acts as an independent controller or business for information used to administer accounts, bill Customers, prevent fraud, secure the Services, communicate with users, comply with law, and understand use of our websites and Services.
Third-party services
Customers may connect third-party telephony, email, social-media, calendar, CRM, AI, storage, payment, and other accounts. Those providers process information under their own terms and privacy notices. The Customer is responsible for selecting, configuring, and lawfully using each connected account.
2. Information we collect
Account and business information
Name, business contact details, title, company, login credentials, account roles, preferences, and information supplied during signup, onboarding, support, or sales.
Billing and transaction information
Plan, subscription, invoices, payment status, tax and billing details, and limited payment metadata. A payment processor may collect full payment-card or bank information directly.
Customer content and recipient data
CRM records; lead and customer contact information; lists; notes; qualifications; statuses; prompts; scripts; recordings; transcripts; calls; messages; emails; posts; comments; images; audio; video; and other content a Customer uploads, creates, imports, or directs us to process.
Calendar and workflow information
Appointments, availability, attendees, reminders, task history, campaign settings, routing rules, approvals, and audit events.
Connected-account information
Account identifiers, access tokens, permissions, configuration, and data received from or sent to Customer-authorized integrations.
Device, log, and usage information
IP address, browser and device attributes, identifiers, pages and features used, timestamps, performance, diagnostics, security events, and cookie or similar-technology data.
Communications and support information
Requests, feedback, survey responses, support messages, meeting notes, and communications with Engine.
Information from third parties
Information from connected services, public business sources, service providers, referral partners, and sources the Customer directs us to use.
Do not submit Social Security numbers, government identification numbers, financial-account credentials, payment-card data, protected health information, biometric identifiers, children’s data, or other regulated or highly sensitive information unless Engine has expressly agreed in writing to support that data and the Customer has a lawful basis to provide it.
3. How we use information
- Provide and operate the Services, including AI-assisted research, generation, personalization, qualification, communications, scheduling, publishing, analytics, integrations, and other workflows the Customer configures or authorizes.
- Create and administer accounts; authenticate users; process payments; provide support; maintain service communications; and enforce applicable agreements.
- Protect the Services, Customers, recipients, and others; detect fraud, abuse, security incidents, and unlawful activity; troubleshoot; and maintain reliability.
- Analyze performance and improve the Services. We may use aggregated or deidentified information that cannot reasonably identify a person. We do not use Customer Data to train generalized models for other customers unless the Customer affirmatively opts in or instructs us to do so.
- Send product, operational, security, and business communications. Where permitted by law, we may send marketing communications to business contacts; recipients may opt out of marketing at any time.
- Comply with law, lawful process, regulatory obligations, and valid requests; establish or defend legal claims; and protect rights, safety, and property.
Engine doesn’t independently decide whom a Customer contacts, what a Customer says, or what a Customer publishes through the Services. The Customer is responsible for its campaigns, recipients, lists, consent, content, and instructions.
4. AI-enabled processing
The Services may use artificial intelligence and automated systems to generate, transform, summarize, classify, rank, transcribe, synthesize, or recommend content and actions. Depending on Customer configuration, Customer Data may be transmitted to AI, voice, media, hosting, or communications providers solely to perform the requested function. Outputs may be inaccurate, incomplete, or unsuitable and require Customer review before use.
Engine does not make decisions that produce legal or similarly significant effects about individuals on its own behalf. A Customer that uses the Services to make or support such decisions is responsible for required notices, assessments, human review, opt-outs, appeals, and other legal obligations.
5. How we disclose information
- Service providers and subprocessors that host, secure, support, analyze, or enable the Services, subject to contractual restrictions appropriate to their role.
- Connected services and third parties at the Customer’s direction, including recipients, telephony and email providers, social platforms, calendars, CRMs, AI providers, and publishing destinations.
- Professional advisers, auditors, insurers, financing sources, and corporate affiliates where reasonably necessary and subject to appropriate duties of confidentiality.
- Government authorities, courts, law enforcement, regulators, or other parties when required by law or reasonably necessary to protect legal rights, safety, or the integrity of the Services.
- A buyer, successor, lender, or other participant in a merger, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to appropriate safeguards.
- Other parties with the relevant person’s consent or as otherwise disclosed when information is collected.
Engine does not sell Personal Information for money. Engine does not share Personal Information for cross-context behavioral advertising or process Personal Information for targeted advertising as those terms are defined by applicable U.S. state privacy laws. If our practices change, we will provide required notices and opt-out mechanisms before the change applies.
7. Legal bases for EEA, UK, and Swiss users
Where applicable, Engine relies on performance of a contract, legitimate interests, legal obligations, and consent. Legitimate interests include operating and securing the Services, supporting Customers, improving product reliability, preventing abuse, and communicating with business users. Where we rely on consent, it may be withdrawn without affecting prior processing.
8. Data retention
We retain Personal Information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with law, resolve disputes, enforce agreements, maintain security, and preserve legitimate business records. Retention depends on the data type, Customer configuration, contractual instructions, sensitivity, and legal requirements.
Following termination or a valid deletion request, Engine will delete or return Customer Data as provided in the Data Processing Addendum. Residual copies may remain temporarily in protected backups until they are overwritten in the ordinary course, and information may be retained where lawfully required or necessary to establish, exercise, or defend legal claims.
9. Security
Engine uses administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, acquisition, loss, alteration, or disclosure. No system is perfectly secure. Customers are responsible for safeguarding credentials, restricting user access, enabling available security controls, maintaining secure connected accounts, and promptly notifying Engine of suspected compromise.
10. International data transfers
Engine and its service providers may process information in the United States and other countries. Where required, Engine uses recognized transfer mechanisms and safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, as described in the Data Processing Addendum.
11. Privacy rights and choices
Depending on location and subject to legal exceptions, individuals may have rights to know or access, correct, delete, obtain a copy of, or restrict or object to processing of Personal Information; withdraw consent; and appeal a denied request. Individuals may also have rights to opt out of sale, sharing, targeted advertising, profiling, or certain automated decisions. Engine does not currently engage in sale, sharing, or targeted advertising as described above.
Submit a request to Nick Perry. We may verify identity and authority before acting. Authorized agents must provide proof of authority, and we may confirm the request directly with the individual. We will not discriminate against a person for exercising privacy rights. If Engine holds information solely for a Customer, we may direct the request to that Customer and assist it as required by contract and law.
Marketing choices
Use the unsubscribe link in a marketing email or contact us. Transactional, security, billing, and service messages may continue where necessary.
Google user data
When you connect a Google account to The Engine, we access, use, store, and share Google user data only as described in this section and only to provide or improve The Engine’s user-facing features.
What Google user data we access
With your consent, our application accesses: (a) Google account identity data you have provided, including your name, email address, and profile information; (b) YouTube data needed to operate Content Engine — channel profile details, videos, titles, descriptions, thumbnails, analytics and engagement metrics, and the ability to upload or manage videos you choose to publish; and (c) Google Ads data if you connect advertising — account identifiers and campaign or performance information needed to operate advertising features. We request only the Google API scopes required for these features.
How we use Google user data
We use Google user data solely to provide and improve The Engine’s functionality: authenticating your Google account, connecting and displaying your YouTube channel, publishing content you approve to YouTube, showing channel analytics, and managing Google Ads features you enable. We do not use Google user data for targeted advertising, personalized or interest-based ads, retargeting, credit-worthiness, lending, selling to data brokers, or building unrelated databases. We do not use Google user data, including Google Workspace APIs, to develop, improve, or train non-personalized AI or ML models.
Sharing, transfer, and disclosure of Google user data
We do not transfer or disclose your Google user data to third parties for purposes other than the ones provided in this policy. We do not sell, rent, or share Google user data with data brokers or information resellers. We may disclose Google user data to subprocessors that help us operate The Engine (hosting, storage, and — only when you use an AI-powered feature — analysis of content or metrics you already connected), under contracts that limit use to providing their service to us. We never send Google OAuth tokens, passwords, or payment details to AI services. We may disclose data if required by law.
Data protection mechanisms for sensitive data
Security procedures are in place to protect the confidentiality of your data, including Google user data and other sensitive information such as account credentials, OAuth tokens, payment details, and connected social account data.
Encryption
We use encryption to protect your information. Data is encrypted in transit using HTTPS/TLS. Sensitive data at rest — including Google user data, OAuth tokens, uploaded media, and account records — is stored using encrypted storage on our hosting and cloud providers (DigitalOcean and Amazon Web Services S3).
Access controls
Access to personal and Google user data is restricted to authorized personnel and systems that need it to operate, support, or secure The Engine (least-privilege access). Accounts require authentication. Google OAuth access and refresh tokens are stored securely, are not exposed in client-side application code, and are never sent to AI services. Passwords are stored as one-way hashes, not in plain text.
Operational security
We use industry-standard security procedures to protect the confidentiality, integrity, and availability of your data, including secure hosting, monitoring for unauthorized access, and revoking Google access tokens when you disconnect a Google account or delete your The Engine account.
Mobile Information & SMS Privacy
If you opt in to text messages from The Engine by Want To Sell Now LLC, either one-time sign-in and verification codes (chosen in Profile > Security) or account updates (chosen at theengine.dev/sms-opt-in), we collect your mobile phone number and a record of when and where you opted in or opted out. We use them only to send the messages you asked for, and never for marketing by anyone else.
Message frequency: sign-in and verification codes are sent once each time you sign in or confirm a number; account updates vary based on your account activity. Message and data rates may apply. Reply STOP to any message to opt out at any time, or HELP for help, or email support@theengine.dev.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as the messaging provider that delivers our texts or customer service, is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
AI & data disclosure
TheEngine uses third-party artificial intelligence services to power its features. This section explains exactly what data we collect, what we send to AI services, why we send it, and who receives it.
1. What data we collect
We collect: (a) account information — your name, email address, and login credentials; (b) business profile information you provide during onboarding — company name, description, services, and target audience; (c) content you upload or create — photos for avatar creation, scripts, voice samples, and generated videos; (d) connected social account data — profile details, posts, reels, and engagement metrics from accounts you link (e.g. YouTube, Instagram, Facebook); (e) lead and contact data you manage in the platform — names, phone numbers, email addresses, and conversation history; and (f) product usage data such as features used and performance events.
2. What we send to AI services
Depending on the features you use, we send: text inputs such as your business description, content topics, scripts, and campaign briefs; social content and engagement metrics for trend and audience analysis; lead conversation context (messages or call transcripts) when AI-assisted outreach is enabled; photos you upload for avatar generation; and scripts or voice samples for voiceover synthesis. We never send your password, payment details, Google OAuth tokens, or other authentication tokens to AI services.
3. Why we send it
This data is sent solely to deliver the features you request: generating content ideas, scripts, and captions; creating avatar videos and voiceovers; analyzing trends and segmenting audiences; and drafting and personalizing sales outreach. AI processing happens only when you actively use these features — we do not send your data to AI services for any other purpose. Google user data is not used to train non-personalized AI or ML models.
4. Who receives it
Depending on the feature, data is processed by the following providers: OpenAI and OpenRouter (text generation and analysis), HeyGen (avatar video generation), and ElevenLabs (voice synthesis). Generated assets and uploads are stored on Amazon Web Services (S3), and the platform is hosted on DigitalOcean. These providers process your data only to provide their service to us, under their respective data processing terms. We do not sell your personal data to anyone.
12. Children
The Services are not directed to or intended for anyone under 18, and Engine does not knowingly collect Personal Information from children. Customers must not use the Services to target children or submit children’s data without Engine’s prior written approval and all legally required authorization.
13. Changes to this Policy
We may update this Policy to reflect changes in law, technology, or the Services. We will post the updated version and change the effective date. If a change materially reduces privacy protections, we will provide additional notice when required by law.
14. Contact us
Engine Labs Inc.
16427 North Scottsdale Road, Scottsdale, Arizona 85254, United States
Privacy contact: Nick Perry.
This Policy should be read with the Engine Labs Customer Terms of Service and, for Customer Data, the Engine Labs Data Processing Addendum.