Privacy Policy
Last updated: 24 October 2026
In short: we collect what we need to run your account and store your files. Your files are stored and backed up in Singapore. They are read by you, the people you share with, and the AIs you connect. We never train AI models on them, never sell them and never use them for advertising. This website uses no cookies, analytics or trackers.
1. Who is responsible
Elephant Trunk is run by Johannes Moll, an individual in Singapore ("we", "us"). He is responsible for your personal data under Singapore's Personal Data Protection Act 2012 (PDPA), and is our Data Protection Officer. Contact: support@elephanttrunk.ai, subject "Privacy". We answer every email within 12 hours.
Payments are handled by Paddle.com, the Merchant of Record for our orders. Paddle processes your payment details as an independent controller under its own privacy policy.
2. What we collect, and why
Account details
Your name, email address and, if you sign in with Google, your Google account ID and profile picture. We use them to create your account, sign you in, and send you emails about your account. Those emails cover sign-in codes, invites, receipts and trial reminders, security notices such as a new AI connection, and changes to these policies.
Your files
Everything you, your members and your AIs store: files and their contents, folder names, versions and file details (size, type, times). We store these to provide the service. We also derive from them what the service needs to work: text from PDFs and Office files, search indexes, outlines, short descriptions, previews. Your files may contain personal data about other people. You decide what goes in, and should have the right to store it. In a business plan, we process the files members store on behalf of the account owner's organisation.
Activity and connections
Which person, AI connection, key or device made each change, when, and the reason the AI gave. We also record which AI apps you connected and the calls they made, with technical details (app name, IP address, time). This record is part of what you use: versions, undo and the Agents view. We also use it for security and to fix problems.
Billing
Paddle collects your card and billing details. We receive from Paddle your name, email, country, the plan, its status and dates, and amounts, but never your full card number. We use this to give you the plan you paid for.
Support
What you write to us, kept to answer you.
This website
The pages at elephanttrunk.ai use no cookies, analytics, trackers, external fonts or scripts. Like any web server, ours keeps standard logs (IP address, page, time, browser) for security and fixing problems, for up to 30 days. The web app uses one cookie to keep you signed in, and no others.
3. AIs you connect
When you connect an AI, such as Claude or ChatGPT, it reads and changes your files on your instruction. What it reads goes to that AI's provider, such as Anthropic or OpenAI, and is handled under your agreement with them and their privacy policy, not ours. You choose which AIs to connect, and you can disconnect them at any time.
We do not use your files to train AI models, and we do not let anyone else do so. We run AI models ourselves only for the optional AI add-on, when it is switched on. It uses the Anthropic API under commercial terms that do not allow training on the data.
4. Consent and legal basis
Under the PDPA, we collect, use and disclose your personal data for the purposes above, with your consent. You give consent when you create an account and use the service, and you can withdraw it at any time by deleting your account or writing to us. Without it we cannot run your account.
If the EU or UK GDPR applies to you, our legal bases are: performing our contract with you (account, files, billing); our legitimate interests in keeping the service secure and preventing abuse; and legal obligations (for example, keeping records).
5. Who else handles your data
We use these providers to run the service. Each processes data only on our instructions and under contract.
- DigitalOcean — servers, database and file storage, in Singapore.
- Wasabi — backups, in Singapore.
- WorkOS — sign-in and AI-connection authorisation, United States.
- Google — "Sign in with Google", if you use it, and our support mailbox.
- Postmark — account emails, United States.
- Paddle — checkout, payments, tax and receipts, as Merchant of Record, United Kingdom.
- Anthropic — only for the AI add-on, when switched on, United States.
We will keep this list current and tell account owners before adding a provider that handles files. We do not sell or rent personal data. We disclose it to others only when you ask (for example by sharing a file), or when the law requires it.
6. Transfers outside Singapore
Your files and the database stay in Singapore. Some providers above are in the United States or the United Kingdom, mainly for sign-in, email and payment. When personal data leaves Singapore, we make sure it is protected to a standard comparable to the PDPA, through contracts with those providers, including standard contractual clauses where they apply.
7. How long we keep it
- Files and versions: while your account is active. Old versions are kept for a year. Deleted files stay in Trash for 30 days, then are removed with their versions.
- Deleted account: a 30-day hold, during which every member can export their files. Then live data is deleted within 7 days, and backups within 30 days after that.
- A removed member's "only me" folders: 30 days for export, then deleted. Their changes in shared folders stay, under their name.
- Activity records: as long as the files they describe.
- Billing records: as long as the law requires (in Singapore, generally five years).
- Support emails: up to two years after the last message.
8. Security
Data is encrypted in transit (TLS) and at rest by our storage providers. Accounts are kept apart at every layer, and we test for this. Sign-in uses Google's protections or single-use email codes. You can see and revoke every session, AI connection and key. We email you when a new AI or key is connected. Files are not end-to-end encrypted, because the AIs you connect must be able to read them.
9. Your rights
- Access and correction: ask what personal data we hold about you and how it has been used, or ask us to correct it. We complete the request within 30 days. If we need longer, we tell you when to expect it.
- Export: download all your files as a zip at any time from Settings.
- Deletion: delete your account in Settings, or ask us to.
- Withdraw consent: as in section 4.
- Under the GDPR you also have rights to restriction, objection and portability, and to complain to your data protection authority.
Write to support@elephanttrunk.ai. If you are not satisfied with our answer, you can contact Singapore's Personal Data Protection Commission (pdpc.gov.sg).
10. Data breaches
If a breach affects your data, we assess it promptly. Where the PDPA requires, we notify the Personal Data Protection Commission within 3 calendar days of deciding that the breach is notifiable, and tell affected people as soon as we can.
11. Children
Elephant Trunk is for people aged 13 and over. Where the law of your country sets a higher age for consenting to the use of your personal data (16 in some EU countries), that age applies. We do not knowingly collect personal data from anyone younger. If you think a child has given us personal data, write to us and we will delete it.
12. Changes
If we change this policy in a way that matters, we will email account holders at least 30 days before the change takes effect. The date at the top shows the latest version.