Engero Privacy Policy

1. Who We Are

Engero is a platform that helps artists, creative professionals, organisers, and audiences connect, build professional profiles, manage bookings, and generate booking-related documents.

For questions about this Privacy Policy, contact us at legal@engero.art.

2. What Information We Collect

Information you provide directly

• Legal name (used only for booking agreement/contract generation, never displayed publicly)
• Display name (shown publicly)
• Email address
• Phone number
• Profile details (bio, art form, location, portfolio content)
• Account login credentials
• Booking and package details
• Messages and communications sent through the platform
• Photos, videos, audio, and other content you upload
• Parent or guardian contact details, if required for users aged 13-17

Information collected automatically

• Device information, browser type, IP address
• Login session data (see Cookies section below)
• Pages viewed and actions taken on the platform

Information from third parties

• Google (if you sign in or interact with Google One Tap authentication)
• Content you submit to our AI-assisted drafting tools, which is processed by our AI service providers (see Section 4)

We do not currently use third-party analytics or advertising tools. If this changes, this policy will be updated first.

3. How We Use Your Information

We use personal data to:

• Create and manage accounts
• Display public profiles and packages
• Help artists, organisers, and audiences discover and connect with each other
• Coordinate booking requests
• Generate booking agreement documents
• Provide AI-assisted drafting tools (package descriptions, bios)
• Communicate with users about accounts, bookings, and platform updates
• Maintain platform security and prevent fraud
• Enforce our Terms and this Policy
• Comply with legal obligations

Legal names are used only for booking agreement generation and are never included in public profile data or public API responses.

4. AI-Assisted Features

Engero offers optional AI-assisted tools, including package description drafting and profile bio generation. These tools use Google Gemini as the primary AI provider, with Groq used as a fallback if Gemini is unavailable.

When you use these features:

• The plain-language description you enter, along with limited profile context (display name, art form, city, existing package titles) is sent to Gemini or Groq for processing
• Your legal name, email, and phone number are never included in this AI processing
• AI-generated suggestions are a starting point only. You are responsible for reviewing and editing generated content before publishing it
• We design these tools to avoid generating pricing suggestions or fabricated claims about your experience, but we do not guarantee AI output will always be accurate

Important: Do not enter sensitive personal information into AI-assisted tools beyond what's needed to describe your creative work.

5. Cookies and Similar Technologies

Engero currently uses cookies only for essential functionality, specifically to keep you logged in via secure, HTTP-only authentication session cookies (managed through our authentication provider, Supabase). We do not currently use cookies for advertising or third-party analytics tracking.

If this changes, this Policy will be updated and, where required by law, we will request your consent first. You can control cookies through your browser settings, though disabling essential authentication cookies will prevent you from staying logged in.

6. How We Share Your Information

With other users

Your display name, profile photo, bio, portfolio, and public packages are visible to other users and visitors, as you choose to publish them.

With service providers

We share limited data with the providers that operate our platform:

• Supabase (authentication and database hosting)
• Vercel (application hosting)
• Cloudinary (image and media storage)
• Resend (transactional email delivery)
• Google Gemini and Groq (AI-assisted drafting features, see Section 4)

These providers process data on our behalf and are not permitted to use it for their own independent purposes.

For legal reasons

We may disclose information if reasonably necessary to comply with the law, respond to lawful requests, protect our rights, investigate fraud or abuse, or protect users or the public.

Business changes

If Engero is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to applicable law.

7. Public Profiles and User Content

The following is public by default once you complete your profile: display name, profile photo, bio, portfolio items, and published packages.

Your legal name, email, and phone number are never made public.

You are responsible for ensuring you have the right to upload and share any content you post, including consent from any other individuals shown in your content.

8. Payments

Engero does not process, hold, or store payment transactions between artists and clients. Payment is arranged and completed directly between artists and clients, outside the platform.

We may still store booking details (package, price agreed, dates) to support the booking agreement and platform experience, but we do not collect card numbers, mobile money PINs, or other sensitive payment credentials, because we do not process payments.

If payment processing features are introduced in the future (e.g. optional escrow), this Policy will be updated first.

9. Data Retention

We retain personal data for as long as your account is active, and for a limited period of 90 days after account deletion to comply with legal obligations, resolve disputes, and prevent fraud. When data is no longer needed, we delete or anonymise it where reasonably possible. Some data may persist briefly in backups after deletion, for security and operational reasons.

10. Security

We take reasonable technical and organisational measures to protect personal data, including secure authentication practices and access controls. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and notifying us if you believe your account has been compromised.

11. International Data Transfers and Local Data Protection Rights

Engero is based in Uganda. Our service providers (Supabase, Vercel, Cloudinary, Resend, Google, Groq) may process and store data in countries outside your own.

Regardless of where Engero or its service providers are based, if you are located in a country with its own data protection law, nothing in this Privacy Policy limits or overrides the rights and protections you're entitled to under that law. This includes, but is not limited to:

• Uganda: rights under the Data Protection and Privacy Act, 2019
• Kenya: rights under the Data Protection Act, 2019
• Rwanda: rights under Law No. 058/2021 on the Protection of Personal Data and Privacy

If you are located in a country not listed above, your local data protection law, if one exists, applies in the same way. Where a conflict exists between this Policy and mandatory local law, local law governs your data protection rights.

Where required by applicable law, we take reasonable steps to ensure appropriate safeguards are in place when your data is transferred outside your country.

12. Children and Under-18 Users

Engero allows users aged 13 to 17 only with the consent of a parent or legal guardian. Users must be 18 or older to use the platform without parental consent.

If we learn that a child's data was collected without required consent, we will delete it or restrict the account. Report concerns to legal@engero.art.

13. Your Rights

Depending on your location and applicable law, you may have the right to access, correct, delete, restrict, or receive a portable copy of your personal data, or to withdraw consent where processing is based on consent.

To exercise these rights, contact legal@engero.art. We may need to verify your identity before responding.

14. Marketing Communications

We currently send only service-related messages: account notifications, booking updates, and policy changes. We do not currently send promotional marketing emails.

If this changes, any marketing communications will include an unsubscribe option.

15. Third-Party Links

Engero may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies separately.

16. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated by email or a platform notice. Continued use after changes take effect means you accept the updated Policy.

17. Contact Us

Questions, requests, or complaints about this Privacy Policy: legal@engero.art