Your privacy matters.

Privacy and cookies policy · version of 17 September 2026.

1. Who looks after your data

Enew is an AI conversation platform in development. Privacy and support contact: contact@enew.ai. The full identity of the controller must be published by the administration before a commercial launch.

2. What we store and why

We process name, email and protected credentials to manage access. Conversations, projects and files stay tied to your account to provide the service. Plan data, balances, token use, transactions and security events let us bill correctly, operate the system and investigate abuse.

Date of birth is collected to place the account in an age band required by Brazilian child-protection law (ECA Digital, Law 15.211/2025). We store an encrypted date and a reusable assertion from an automated provider (Kids Web Services, a CPF bureau, a parental link, or a future gov.br age signal). We do not keep copies of identity documents on this server and we do not accept a simple “I am 18” checkbox. Data collected only to assess age is not reused for marketing.

Tax identification (CPF, CNPJ or a foreign tax ID) is a separate purpose: invoices and accounting. Completing a tax profile for billing does not reuse age-only data. Adolescent accounts do not provide a tax ID and cannot become Stripe customers; purchases stay with the verified adult guardian.

The admin panel shows usage metrics and operational events. It does not offer reading of conversations or personal files. Operational logs do not include message text, attachments or credentials. Administrators with direct server access have additional confidentiality and access-control responsibilities.

3. Providers and sharing

When you send a message, the conversation history and compatible attachments are sent to the provider of the selected model. Switching models may send that history to another provider. These services may process data in other countries. Retention and use conditions depend on the provider and must be assessed by the controller.

Payments are processed by Stripe. Enew receives identifiers and transaction status; it does not store full card numbers. Adult age verification may be processed by Kids Web Services (KWS). KWS may collect the email address and verification data on its own systems (for example a CPF, payment-card details, an identity document or a face scan). Enew stores a reusable assertion and identifiers, not copies of those documents. We do not use the KWS Age Gate product as a substitute for that verification. Files may be stored on the server or in a private S3 bucket. Transactional email uses the service configured by the administration.

4. Legal bases and rights

Performance of the service, legal obligations and, when applicable and justified, legitimate interest may support processing. Metrics and abuse controls must respect purpose, necessity and proportionality. Consent for optional cookies is independent of providing the service.

You may request access, correction, information about sharing and deletion, subject to legal requirements and exceptions. Export your data in settings or write to contact@enew.ai. Closing your account removes chats and files; necessary financial records may be retained for the legally applicable period.

5. Retention and security

Conversations and files remain until deleted by you or until the account is closed. Operational logs have a default retention of 90 days, adjustable by the administration. Financial and access-log retention periods must follow the obligations that actually apply. Backups must have their own retention and deletion cycle.

We use hashed passwords, protected sessions, account data isolation, access control and encryption for stored content and credentials. You must also protect your password and API keys.

6. Language, cookies and browser storage

To show the first page in your language we read the Accept-Language header that your browser already sends. English is the default when no supported language is indicated. We do not use your IP address or geolocation to infer a country. The /en/ and /pt/ addresses always keep their own language. Selecting a language updates the URL without requiring optional cookies. Signed-in accounts also store an explicit language choice in the profile for emails.

Necessary: the enew_session cookie keeps authentication and session protection. enew-consent in local storage records your cookie decision. Optional: with permission for preferences, the first-party enew_locale cookie remembers your language for up to 12 months, and enew-theme in local storage remembers appearance until you withdraw permission or clear browser data. Refusing or withdrawing preferences deletes both from this device; it does not change your account email language. We do not use analytics, advertising or third-party trackers in this version. No page content is sent to external translation services.

You may accept, refuse or withdraw authorization for preferences at any time. When you refuse, you can still change appearance during the visit without optional persistence.

7. Updates

Relevant changes must be communicated and reflected on this page. A commercial launch depends on completing controller details, operator contracts, legal bases and applicable retention periods.