Privacy

We keep what we need to run your page and your account. We don't sell data, we don't run ads, and there are no tracking scripts on EnsembleIt or on the pages we host. You can delete your account yourself, from your Profile, at any time.

Your account. Your name, business name, email address, an optional backup email, your time zone, and the date you agreed to these terms and this policy. Your password is stored only as a scrypt hash, which means we cannot read it and neither could anyone who copied our database. If you sign in with Google, Microsoft or Yahoo we receive your name and verified email address from them and nothing else, and we keep no access to that account. If you switch on two-step sign-in, we store the secret your authenticator app uses and your backup codes, and switching it off deletes them.

Your page. Everything you put on it: text, links, images you upload, your theme, your media kit. Uploaded images are public, because a page has to be able to show them.

Your numbers. Follower, subscriber and view counts for the accounts you connect, by date, whether you typed them in or we read them for you.

Your billing status. Which plan you are on, when your trial ends, and the reference numbers Stripe gives us for you and your subscription. We never see or store your card, because you type it into Stripe's own page.

Things you send us. Support tickets and our replies, and if you asked for a website quote, the details and any file you attached.

We use what we hold to run your account and your page, to take payment for your plan, to answer you when you write to us, to keep the service secure and to email you about your account. Most of that rests on your agreement to our terms. Some of it rests on a consent you gave, such as signing up to a newsletter or connecting an account, and you can take that back. The rest rests on our need to keep the service safe and working. We do not use any of it to build advertising profiles.

Connecting by link stores your handle and nothing more. We then read the public numbers anyone could see on that profile, about twice a day. Where the service has a public API we ask that (Bluesky, Discord, YouTube and Twitch). Otherwise we read the profile's own public page, the way a link preview does (Instagram, Threads, Facebook, Spotify, TikTok and Snapchat), naming ourselves as EnsembleIt when we ask. All we send those services is the handle.

For YouTube we use YouTube API Services to read a channel's public subscriber, view and video counts. What Google does with a request made to it is covered by the Google Privacy Policy.

Connecting Instagram, Facebook or Threads with one click sends you to that platform to approve it, and it then gives us an access token for your account. With it we read your username, your follower count, how many posts you have, and the likes, comments, views, saves and shares on your recent posts. Those numbers are shown to you in your dashboard and, if you choose, on your media kit. For Facebook we also read the list of Pages you chose to share on Facebook's own screen, and connect the first of them.

We do not read your messages, your followers' names or anything else on the account. We do not sell what we read or pass it to anyone, and we do not use it for advertising. Nothing is published to your account unless posting is switched on and you press the button yourself. Disconnecting deletes the token and the numbers, as described under Deleting your data.

Signing in with X works the same way. With its token we read your username and your follower count, and nothing else. We do not post to X.

If you link your own Stripe account, that one link is how buyers pay you on your page and how we read your balance and your payments (amounts, dates, fees, refunds and payouts). The money goes to your Stripe account and never to ours, card numbers are never shown to us or to you, and we show you those figures, or hand them to you as a CSV download, without storing any of them.

When someone buys from a creator's page, or gives an email address for a free download, we keep their name, email address, what they got and what they paid, so the creator can see their orders and send the file. For something that is shipped, we also keep the delivery address the buyer gave at checkout, and the carrier and tracking number the creator adds. The payment itself happens on Stripe, in the creator's own Stripe account, and card details never reach us.

When someone books a creator's time, we keep the name and email address they gave, their phone number if they chose to add one, any note they wrote, the time they picked and their time zone, so the creator knows who is coming and both of them can be emailed about it. A booking that is paid for as it is made, and is left at checkout without being paid for, is deleted within two days. A request the creator accepted that was never paid for is kept as a cancelled booking until the creator deletes it.

When someone asks a creator for a refund from that creator's Refunds and help page, we keep the email address and name they gave and what they wrote, so the creator can answer it. Both of them are emailed the outcome.

Access tokens, app passwords, stream keys and API keys you give us are encrypted before they are stored, and disconnecting deletes them.

We count how many times a page was viewed each day, and which website the visitor came from (the site name only, such as "instagram.com", never the full address), and that is the whole of it. We do not record a visitor's IP address, device or browser against a view, and we cannot tell one visitor from another. The only cookie a page ever sets is the one that keeps someone in a chat they chose to join, described below. Your own visits are not counted.

If a visitor picks light or dark mode, their browser remembers that choice without sending it to us.

Newsletter signups. We store the email address and the date, for the creator whose list it is. The visitor gets an email asking them to confirm, and nobody is added to a list or sent anything until they do. Someone buying or downloading from a creator can tick a box to join that creator's list, and is asked to confirm in the same way; buying alone never adds anyone. Every newsletter has a working unsubscribe link. The list belongs to the creator: they can export it, remove people from it, and, if they choose, have new addresses copied to their own Mailchimp, Kit, beehiiv, MailerLite or Buttondown account.

Chat. A creator's chat is a private room that someone joins by giving a name and an email address, then typing back a code we send to it, or by opening a personal invite from the creator. We store that name and address, and each message with the name, but no IP address. The creator can see the name and address of everyone in their room, and can delete messages, mute, remove or ban a member. We keep a knock that was never finished for one day, and the mailed code and the session are stored only as hashes.

Videos and booking widgets. If a creator adds a YouTube or Vimeo video, a Twitch or Facebook player, or a booking calendar, that part of the page is loaded from that company, which may set its own cookies and sees the visitor's IP address, exactly as it would on any other website.

One when you log in: fs_session, which keeps you signed in for 30 days. One if you join a creator's chat: ens_chat_ followed by a number, which keeps you in that one room on that browser for 90 days, or until you press Leave. While you are signing in with Google, Microsoft or Yahoo, or connecting a social account, a second short-lived cookie makes sure the person who comes back from that site is the person who left. There are no advertising or analytics cookies anywhere on EnsembleIt.

Like every web server, ours writes a line for each request: the time, the address asked for, the visitor's IP address and browser. We use these to find faults and stop abuse, and they are deleted after 30 days without ever being joined to your analytics. IP addresses are also held in memory for a few minutes to limit how fast anyone can try passwords, post in chat or sign up; those are never written to disk.

We use a small number of companies to run the service, and each gets only what its job needs.

• DigitalOcean hosts our server, database and backups.
• Stripe takes payment for your plan. It receives your email address, business name and card details.
• Resend delivers email: password resets, notices about your account, and the newsletters creators send. It receives the recipient's address and the message.
• Google, Microsoft or Yahoo, only if you choose to sign in with them.
• The platforms you connect: YouTube, Twitch, Bluesky, Meta, X, Discord, your email service. Only the ones you connect, and only to do what you connected them for.

We do not sell or rent data to anyone, and we do not share it for advertising. We would hand data to authorities only if the law required it.

Our server is with DigitalOcean, and the companies listed above run their services from several countries, including the United States. Your information may therefore be stored and handled outside your own province or country, where the law, and what the authorities there can ask for, may be different.

Connections to EnsembleIt are encrypted. Passwords are stored only as hashes, access to the server is limited to the people who run it, and the database is backed up every night. No system is perfectly secure. If a breach of our security puts you at real risk of significant harm, we will tell you and report it to the Privacy Commissioner of Canada, as the law requires.

EnsembleIt is not for children. You must be at least 16 to hold an account, and we do not knowingly collect information from anyone younger. If you believe a child has given us theirs, write to support@ensemble-it.com and we will remove it.

• Your account and page: until you delete them.
• Page view counts: 400 days, then deleted automatically.
• Chat messages: 180 days, then deleted automatically.
• Orders and bookings made on a creator's page: until that creator deletes their account.
• Login sessions: 30 days. Password reset links: 45 minutes. Email verification links: 24 hours.
• Server logs: 30 days.
• Backups: replaced on a rolling basis, so anything you delete is gone from them within 30 days.
• Someone who unsubscribes from a newsletter stays on record as unsubscribed, so that they are not added and emailed again. The creator can remove the record entirely.

Disconnect an account you connected (Instagram, Facebook, Threads or any other) from Socials in your dashboard, with the Disconnect button beside it. That deletes the access token and every number we read from that account, straight away, and we stop reading it. You can also remove EnsembleIt from the platform's own settings, under the apps and websites you have given access to, which ends our access from their side. Do both if you want nothing left in either place.

Delete your account from Profile in your dashboard, which works even if your trial has ended or your subscription has lapsed. It cancels your subscription straight away and removes your account, your page, your uploads, your subscriber list, your chat, your numbers, your tickets and every connected account and key.

What is left afterwards, and why:

• A scrambled fingerprint of your email address (a SHA-256 hash, which cannot be turned back into the address), kept so that the free trial is given once per address.
• Stripe's own record of your payments, which they are required to keep.
• Backups and server logs, until they roll over as described above.

Delete collected data, also on Profile, keeps your account and page but clears what has been gathered on it: view counts, subscribers, chat, sent newsletters, your numbers and your connected accounts.

If you cannot log in, or you are a visitor who wants your email address or chat messages removed from a creator's page, write to support@ensemble-it.com and we will do it.

Wherever you live, you can ask us what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. Write to support@ensemble-it.com and we will answer within 30 days. If you are in the EU, the UK or another place with a data protection authority, you can also complain to them.

In Canada, the law that covers us is the Personal Information Protection and Electronic Documents Act. The person responsible for privacy answers at support@ensemble-it.com. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

If you live in the EU or the UK, you can also object to how we use your data, ask us to restrict it, and ask for a copy in a form you can take elsewhere. If you live in California or another US state with a privacy law of its own, we do not sell your personal information or share it for advertising, and we will not treat you differently for using your rights.

For a creator's subscriber list and chat, the creator decides what happens to that data and we hold it on their behalf, though we will still act on a request sent to us.

If we change what we collect or who handles it, we will update this page and the date at the top, and email account holders about anything that matters before it takes effect.