Privacy Policy

Effective October 9, 2026 · Last updated October 18, 2026 · Peas Solutions LLC

1. Who we are

Eno’niva (“Eno’niva”, “we”, “us”) is operated by Peas Solutions LLC, a limited liability company registered in Colorado, United States. For members, visitors and people in members’ networks, Peas Solutions LLC is the controller of personal data. For company workspaces it is a processor acting for the company (see section 8).

Postal address: Peas Solutions LLC, PO Box 19651, Boulder, CO 80308, United States.

Privacy questions and requests: privacy@enoniva.com.

EU and UK representative. Because we are not established in the EU or UK, we are appointing representatives under Article 27 of the GDPR and UK GDPR. Their names and addresses will be listed here. Until then, please write to privacy@enoniva.com.

2. Who this policy covers

• Members: people with an Eno’niva account.
• People in members’ networks who are not members. There is a short summary for you at If you’re in someone’s contacts.
• Visitors to enoniva.com.
• Employees and contacts of companies that use a company workspace. For connector data, the company decides how its data is used; this policy describes what Eno’niva does with it.

3. What we collect, and where it comes from

• Account data you give us at registration: name, company, title, personal and work email, cell phone. We confirm emails (and, when enabled, phone numbers) with one-time codes.
• Relationship data that the collector (the Eno’niva Collector app, the iPhone app, or your own Claude) uploads from your devices at your instruction. Sources can include your Contacts, WhatsApp, iMessage and SMS, call history, email headers (Apple Mail, Outlook, Gmail) and the data exports you download from LinkedIn, Facebook and Instagram. We get contact records (names, phone numbers, emails, postal addresses (private to you), organizations, titles, locations, public profile links, contact photos), the groups you share with people, and interaction metadata (channel, direction, time, counts). With Apple Mail on a Mac, the collector also reads the signature block of mail people send you, on your device, and uploads only the phone numbers and the job title / company line found there (to recognize that an email address and a phone contact are the same person); the message text is never uploaded. We merge records of the same person into one.
• Contact files you import (CSV, Excel or vCard): processed and then deleted; the file itself is never stored. To match columns, Eno’niva may send only the column headers and up to five sample rows to Anthropic (Claude); known formats are matched without AI. The parsed rows are deleted 24 hours after the import finishes; the people you imported stay in your contacts.
• The iPhone app uploads your iPhone’s contacts (names, phone numbers, emails, company, title, LinkedIn and social links, postal addresses (street, city, region, postal code, country); never the notes field) only after an in-app explanation and only once you allow contacts access in iOS. With your permission (Settings › Update my contacts) it can also add missing details to your iPhone’s contacts (company, title, LinkedIn link, city, a photo, emails); you see each change before it is made and can undo it. Its sign-in token is kept in the iOS Keychain. If you turn on caller ID for archived contacts, the names and numbers of contacts you archived are stored on your iPhone for iOS to show when they call; iOS never shows the app your calls. The app has no ads and no analytics or crash-reporting SDKs.
• The Android app uploads your phone’s contacts (names, phone numbers, emails, company, title, LinkedIn and social links, postal addresses (street, city, region, postal code, country); never the notes field) only after an in-app explanation and only once you grant Android’s contacts permission. With your permission it can also add missing details to your phone’s contacts (company, title, LinkedIn link, city, a photo, emails); you see each change before it is made and can undo it. Its sign-in token is encrypted on the device and is not included in backups. The app has no ads and no analytics or crash-reporting SDKs.
• Your last few messages with each person: the text of up to 4 of the most recent messages per person per channel, each cut to 140 characters, so you can see where you left off. They are visible only to you. You can turn this off or lower the number, exclude people, groups and keywords, or turn on longer snippet history (still 140 characters per message) in the collector’s privacy settings. Full message bodies and attachments are never uploaded.
• Connected accounts, only if you connect them in Settings → Connected accounts (sign-in with your own Microsoft or Google account; you can disconnect at any time):
  • Outlook / Microsoft 365 (permissions: User.Read, Contacts.Read, Mail.ReadBasic, offline_access): your Outlook contacts (names, emails, phone numbers, company, title) and, for your mail of the last 12 months and then every 6 hours, the sender and recipient addresses, display names and dates. From these we keep, per person, how many emails you sent and received and the first and last date.
  • Google Contacts (permissions: contacts.readonly, contacts.other.readonly, plus your Google account’s email address): your Google Contacts (names, emails, phone numbers, organization, title) and Google’s “other contacts” (people you emailed). We don’t read Gmail. A small test group we invite may also allow gmail.metadata, which gives the same sender, recipient and date headers as for Outlook.
  • We never read subjects, message text, previews or attachments, contact photos, calendars or files, and we never send, change or delete anything in your account. Junk, newsletters, automated senders and people you never wrote to are dropped. The result is your own private data, like your phone’s address book: circles see only business cards. Access is kept as an encrypted refresh token.
  • Eno’niva’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use it only to build your own network view, never for advertising, never to train AI models, and no person reads it except when you ask us to, for security, or when the law requires.
• Your inputs in the app: ratings, categories, notes, relationships you record (for example “wife: Yael”), pins, sharing choices, asks and introduction requests. Notes and relationships are visible only to you.
• Public information to keep cards accurate: we search the public web for a person’s current title, company, location and LinkedIn profile (and its profile photo). See section 6.
• Billing data if you buy a paid plan: Stripe, our payment processor, collects your card details directly; we never see or store your full card number. We keep your Stripe customer ID, plan, billing interval, subscription status and renewal date.
• Company workspace data, only if your company connects its systems (see section 8).
• Technical data: sign-in sessions, passkeys (we store only the public key), API token usage (we store only a hash of each token), security and audit logs, and web server logs with IP addresses.

We do not collect full message bodies, attachments, email subjects, call recordings or face data, and we don’t use facial recognition.

4. Three layers of data

Private: messages, snippets, interaction timeline, notes, relationship category, rating and strength, and contacts’ postal addresses from your address book. Visible only to you, never to circle members, circle admins or your employer.

Shared card: name, title, organization, industry, city, country, LinkedIn and social links, photo. Shared with members of circles you belong to, unless you hide that contact. Family, service-provider and group-only contacts are hidden by default. Circle-mates can also see that you know the person, with a strong, medium or weak band (never the number), and in the circle’s network view how many shared people each member brings to that circle and who invited whom.

Contact details: phone numbers and emails. Off by default; shared only when you choose to, per contact, or through an introduction you approve.

Service-provider business card: if you register as a service provider (Settings → I offer a service), the business card you enter (business name, services, business phone, email and website, address unless you hide it, service area, hours, languages and license number) is shown, while your listing is active, to members who have you in their contacts and in the circles that you or those members belong to, with the number of members of that circle who know you. A circle lists you through a member’s contact only if that member hasn’t hidden you from circles. When the listing ends, the business card stops showing.

5. Why we use data, and our legal bases

We don’t use your data for advertising, we don’t sell or rent it, and we don’t use it to train AI models.

6. People who are not members

Members’ contact lists include people who have not joined Eno’niva. If that’s you, we may hold what a member’s address book or messages contain about you, plus your public professional details (current title, company, location, LinkedIn profile and photo) found by web search.

• Your phone numbers, emails, the member’s messages with you, notes and ratings are visible only to that member.
• Circles see only your professional card, never your contact details unless a member explicitly chooses to share them.
• We never contact you on a member’s behalf. If a member asks a circle-mate for an introduction, the person who knows you decides whether and how to reach out.
• If a member asks you whether you know someone. A member can send you, from their own phone or email, a private link asking whether you know certain people (shown as business cards: name, title, company). If you answer, we keep your answer (how well you know each person, whether you would introduce them, and any note you write) and show it only to that member. We store no phone number or email for this; the link expires after 30 days. Don’t want to answer? Just ignore it.
• You can see a copy, correct it, object, or ask to be removed. Removal hides your card across every circle, the map, the sphere and search.

Read the full notice: If you’re in someone’s contacts. To act now: Remove me.

7. Ratings, strength and automated processing

Members can rate a contact from 1 to 5 stars and add notes. Eno’niva also computes a tie-strength score from how recently and how often you interact, and on how many channels. Ratings, notes and scores are private to the member who made them. Circles see only a strong, medium or weak band. We use these to sort and suggest within the member’s own view. We make no decisions with legal or similarly significant effects about anyone based on automated processing.

Service ratings. Members can also rate service providers on several aspects (overall, quality of work, showing up on time, price, cleanliness, communication, and whether they would hire them again). Each rating is private to the member who gave it: no one else sees it, including the provider. A circle sees only the average per aspect and how many of its members rated, and only when at least 3 of its members rated. Providers never see ratings in their own settings; a provider who belongs to a circle sees that circle’s averages like any other member.

We use automated tools to clean up machine senders, classify organizations by industry, and match public profiles to cards. Changes from public sources are applied only when the match is very likely, are logged with their source, and can be undone by the member.

8. Company workspaces and connectors

A company workspace admin can connect Google Workspace or Microsoft 365. The connector reads the company directory (names, titles, departments), contacts, calendar event times and attendees, and email metadata only: the sender, recipients and date headers. It never reads message bodies, subjects or attachments. This data belongs to the company and is visible in its workspace; your personal messages, ratings and notes never enter the company space.

Colleagues see that you know a contact (your name, department, a strong, medium or weak band and the month of your last contact), never counts or content. Mail between colleagues, newsletters and large meetings are dropped before anything is stored, and the company can exclude mailboxes and domains. If the company disconnects the connector, everything it brought in is deleted. For this data Eno’niva is the company’s processor under a data processing agreement; questions about it should go to your employer first.

If you use Eno’niva personally too, you choose which of your personal contact cards, if any, are shared with your company circle (Settings → “What I share with your company”). What you bring from your own phone and computer stays yours and leaves with you.

9. Who we share data with

• Other members, only as described in sections 4 and 8.
• Microsoft and Google, only when you connect your account: they are the source of the data, under your own agreement with them. We send them nothing about you beyond the sign-in and the requests for your data.
• Services you connect from the Connectors directory, only when you click Connect for that service and confirm: we send it your name, your verified email address(es) and verified phone number, and a random identifier for you that is different for every service, so it can find your account and send us your contacts from it. We never send unverified details, your contacts, ratings or notes. Each such service is an independent controller under its own privacy policy (linked before you connect), not our subprocessor. When you disconnect, we tell the service (if it supports that) and stop calling it; you can also remove the contacts it brought in.
• Service providers who process data for us under contract: hosting (Hetzner, Finland), email delivery (Bird), payments (Stripe), web search, LinkedIn profile lookups and classification for enrichment (Exa, Treg, TypeSafe), industry classification of organization names and column matching for contact files you import (Anthropic) and news search (Perplexity). The full list, with what each receives and where, is on our subprocessors page.
• Official public-record sources: to show public records on a card (patents, SEC filings, court records and sanctions lists), we send only the person’s name to official sources such as the U.S. Securities and Exchange Commission (EDGAR), the U.S. Treasury (OFAC), the USPTO and CourtListener. Results are labeled as name matches that may be a different person, are visible only to members who have that person in their contacts, and are kept for six months.
• Business contact data (Apollo): on a company page, members can see business contact listings for that company’s employees (name, job title, company, LinkedIn) from Apollo, a licensed business-data provider, through our Treg gateway. A member who pays to reveal one person sees that person’s work email and phone; those details stay private to that member and are never shared with circles. People removed through Remove me are hidden from these lists.
• Searching outside your network: members can look up someone who is not in their network by name. We search public web and LinkedIn profiles (Exa, Treg), Apollo business listings and the official public-record sources above, sending only the name and any company or city the member typed. Results are private to the searching member, never shared with circles, and kept for six months. People removed through Remove me are left out.
• Investor portfolios: to show which founders an investor backed, we read the fund’s public portfolio pages and news (through Exa) and keep only company names. Matching them to people happens inside each member’s own contacts and circles.
• Authorities, when the law requires it and after checking the request is valid.
• A buyer or successor, if Peas Solutions LLC is involved in a merger or sale, under the same protections. We will tell members before their data becomes subject to a different policy.

10. International transfers

Our database and files are hosted in the EU, in Helsinki, Finland. Peas Solutions LLC is a US company, and some of our service providers are in the United States. When personal data from the EEA, UK or Switzerland goes to a country without an adequacy decision, we rely on the EU Standard Contractual Clauses (and the UK addendum), or on the recipient’s certification under the EU-US Data Privacy Framework. We send each provider only what it needs: for example, web searches use names, company names and email domains, never phone numbers or full email addresses. Details per provider: subprocessors.

11. How long we keep data

• Your account: while it is open. When you delete it (Settings › Delete my account, in the apps or on the web), we delete your account and everything you uploaded right away; copies in our server backups expire within 35 days.
• Message snippets: snippets older than 12 months are deleted.
• Archived number-only contacts: kept archived until you delete your account; you can restore them.
• Contacts you delete: hidden everywhere and kept in Settings › Recently deleted so you can restore them, until you delete your account.
• Searches outside your network and public-record results: six months, then searched again only if you ask.
• Sign-in codes expire after 10 minutes; sessions after 30 days.
• Company connector data: deleted when the company disconnects the connector, and within 30 days after the workspace ends.
• Connected accounts: the stored access token and the per-person email counts are deleted the moment you disconnect. When disconnecting you can also remove what the account brought in (people who came only from it, unless you rated, pinned or annotated them); otherwise it stays as part of your network until you delete it or your account.
• Web server logs: 14 days. Audit logs: up to 24 months.
• Backups: rotated, so deleted data leaves our backups within 35 days.
• Removal requests: we keep a record so you stay removed.

We are rolling out automatic deletion jobs for these periods in autumn 2026. Until a job is live, we apply its period on request: email privacy@enoniva.com.

12. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, Israel’s Privacy Protection Law or US state laws), you have the right to:

• access your data and get a copy;
• correct inaccurate data;
• delete it (“right to be forgotten”);
• restrict how we use it;
• receive data you gave us in a portable format;
• withdraw consent where we rely on it, without affecting what happened before.

How to use your rights. Members: Settings → Your data (request an export or delete your account), or email us; step by step: Delete your account. Non-members: see this page. We reply within one month (we may extend by two months for complex requests and will tell you why). We may ask you to confirm you own an email address or phone number before we act. For workspace data, we pass your request to your employer and help them answer.

Complaints. You can complain to a data protection authority, in particular where you live or work. EU and EEA authorities are listed at edpb.europa.eu; in the UK, the ICO; in Israel, the Privacy Protection Authority. We’d appreciate the chance to fix things first.

13. Security

All traffic is encrypted in transit (TLS). Data is hosted in the EU (Helsinki) on a server whose database accepts no outside connections. API tokens, session IDs and one-time codes are stored only as hashes, and company connector credentials are encrypted. A single policy engine decides who can see what, and it is covered by automated tests. Your contact details are never shared without your choice. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

14. Cookies and local storage

We use only what the service needs: a sign-in cookie (enoniva_session, 30 days) and, during Google or Microsoft sign-in, a short-lived security cookie. Your browser also stores small preferences such as the light or dark theme. We use no advertising or analytics cookies and no tracking pixels. Our pages load fonts and code libraries from the jsDelivr content delivery network, which receives your IP address to deliver them.

15. Children

Eno’niva is not meant for anyone under 16, and we don’t knowingly collect their account data. If you think a child has signed up, tell us and we will delete the account. Members’ address books may include children; family contacts are hidden from circles by default.

16. Changes and contact

We will notify members of material changes by email before they take effect, and update the date at the top. Questions or requests: privacy@enoniva.com · Peas Solutions LLC. See also our Terms, subprocessors and notice for people in members’ contacts.

This policy is pending final legal review.