Privacy Policy

Effective October 2, 2026

Endata is a product of Feedsoft, Inc. ("we", "us"). This policy explains what personal information we collect when you use Endata, how we use and share it, how long we keep it, and the choices you have.

1. Who we are and what this covers

This policy covers:

• our website at endata.com, including its chat widget;
• the Endata platform at app.endata.com, and the Endata API, MCP server and webhooks;
• the publications we host for our customers, on endata.com addresses or their own domains.

For our customers' accounts and workspaces, Feedsoft is responsible for the information. For information about a customer's readers and newsletter subscribers, the customer is responsible and we process it on their behalf (see section 3). Questions about a publication's own practices should go to the organization that runs it.

2. Information we collect

Information you give us

• Account details: your name, email address, time zone, and a mobile number if you add a recovery phone.
• Sign-in and security details: if you create a password, a one-way hash of it; if you turn on two-step verification, your encrypted authenticator setup, passkey public keys and device names, and hashes of your recovery codes.
• Workspace content: organizations, projects, articles, drafts and revisions, sources, topics, images, author names and biographies, settings and team invitations.
• Billing details: the billing owner's email, plan, currency, subscription and invoice history, and redeemed credits. Card and bank details are collected and stored by Stripe, never on our servers.
• Communications: messages you send to support or through the chat on endata.com, including the name and email address you give there.

Information from services you connect

• Google, LinkedIn or Facebook sign-in: your account identifier, name, email address, whether the email is verified, and profile photo. For LinkedIn, we also keep an access token so you can later share without signing in again.
• Social accounts you connect for sharing (LinkedIn, Facebook, Instagram, Threads, X, Bluesky, TikTok, YouTube, Pinterest): account or Page identifiers, names, profile images, access tokens, and the identifiers and links of posts we publish for you. For Pinterest, we also keep the name and identifier of the board you choose to save Pins to.
• Integrations: the API keys, list IDs, webhook URLs and settings you enter for services such as email platforms, team chat and analytics tools, and the results of deliveries we make to them.
• Payments: Stripe tells us whether payments succeed and what your subscription covers.

Information collected automatically

• Sessions and logs: IP address, browser and device information, sign-in times, pages visited and actions taken in the platform, used to run and secure the service.
• Team addresses: the network address you use while signed in, so your own visits to your publication are left out of its audience statistics.
• Cookies, described in section 4.

3. Publication readers and subscribers

When you visit a publication hosted on Endata, we act on behalf of the organization that runs it.

• Audience statistics: we count page views, article views and outbound link clicks. We store the page path and the referring or destination domain. We do not set cookies for this, and we do not store IP addresses, visitor identifiers or full URLs in these statistics.
• Newsletter sign-ups: if you enter your email in a publication's sign-up form, we pass it to the email services the organization has connected, such as Mailchimp or HubSpot, and then delete it from our systems. We keep a record of the sign-up for 30 days to prevent abuse and duplicates, and a hash of your IP address to enforce rate limits. Your subscription is then managed by that organization and its email service.
• Reader accounts: where a publication offers them, you can sign in to it with Google, LinkedIn or Facebook through Endata. That publication's organization sees your name, profile photo and what you do on its site: articles you save, sections and authors you follow, articles you mark helpful, and your comments, which show your name publicly. It sees the articles you read only if you turn on reading history (from then on, plus the few you opened on that site on the same device in the month before), which you can turn off at any time (that also deletes it), and your email address only if you agree to be emailed; before that, it sees at most your email's company domain, and company counts only in aggregate. Each publication sees only its own readers: no organization learns what you do on another publication, and your reader identifier differs on each. We keep a session cookie on the publication's own domain to keep you signed in, and on your device only, a count of recent articles, used to decide when to invite you to sign in. You can remove everything a publication keeps about you from its Your reading page.
• Tags the organization adds: a publication may add tools such as Google Analytics, Google Tag Manager, Microsoft Clarity, the LinkedIn Insight Tag or the Meta Pixel. These set cookies only after you choose Accept in the publication's cookie banner, and you can change your choice from the Cookie preferences link in its footer. Cookieless tools such as Plausible and Fathom may run without a banner.

To exercise your rights over this information, contact the organization that runs the publication. If you contact us, we will forward your request to them where we can.

4. Cookies and analytics

• Essential cookies keep you signed in, protect sign-in and two-step verification, and remember preferences such as theme, currency and cookie choices. The service does not work without them.
• Chat cookies on endata.com let you return to your conversation for up to 30 days.
• Google Analytics runs on endata.com, app.endata.com and hosted publications to help us understand how the service is used. It sets its own cookies, and Google processes the data under its own terms. You can block it with browser settings or Google's opt-out add-on.

We do not use advertising cookies on endata.com or app.endata.com. Your browser may send a "Do Not Track" signal; because there is no common standard for it, we do not respond to it.

5. How we use information

• To create and secure your account, and verify who you are.
• To provide the service: research topics, generate drafts, publish your publication, share to the networks you choose, run your integrations and report your analytics.
• To send service messages, such as verification links, sign-in codes, security alerts, notifications you have chosen, and receipts.
• To process payments and enforce plan limits, including one Free workspace per person.
• To provide support, answer chat messages, and improve the service.
• To detect and prevent fraud, abuse and security incidents, and to meet legal obligations.

We never use your recovery phone number for marketing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. AI processing

When you ask Endata to research, draft, verify or write social copy, carousels or video scripts, the relevant workspace content and source material are processed by AI models hosted on Amazon Bedrock by Amazon Web Services. Search queries for your topics are sent to Exa, and image searches to Openverse. These providers process the data to return results to us. We do not use your private workspace content to train AI models, and our providers do not use it to train theirs.

7. How we share information

We share information only as described here:

• Your team: members of your organization can see its workspace content, and owners can see who belongs to it.
• The public: anything you publish to your publication or share to a social network is public by design.
• Service providers who process information for us under contract:
  • Amazon Web Services: hosting, database, file storage, email delivery and AI models;
  • Stripe: payments and billing;
  • Twilio: phone number verification codes;
  • Exa: web research on the topics you choose;
  • Google: sign-in and Google Analytics.
• Services you connect: the social networks, email platforms, team chat, analytics and search tools you connect receive the information needed for the action you ask for. Their own privacy policies apply to what they receive.
• Endata staff: authorized staff may access your account to provide support you request, secure the service or comply with law.
• Legal and business reasons: when required by law or legal process, to protect the rights, safety or property of our users, the public or us, or as part of a merger, acquisition or sale of assets, subject to this policy.

8. Retention

We keep account and workspace information while your account is active and as needed to provide the service. Some information has shorter, fixed limits:

• Sign-in sessions end after 30 days, or 14 days of inactivity.
• Sign-in codes expire after 10 minutes, and verification links after 24 hours.
• Publication audience statistics are deleted after 90 days.
• Team network addresses are deleted 30 days after last use.
• Newsletter sign-up addresses are deleted once delivered, and sign-up records after 30 days.

Articles you move to the trash can be recovered until you delete them. When you close your account or ask us to delete information, we delete or anonymize it within a reasonable period, except for what we must keep for legal, tax, accounting or security reasons, and copies in backups, which expire on their normal schedule. Records of past editorial actions may keep your account identifier after your account is deleted.

9. Security

We encrypt information in transit. Sign-in session tokens, verification codes and API keys are stored only as hashes, passwords with a slow one-way function, and social network tokens and integration secrets are encrypted. Access to production systems is restricted. You can protect your account further with two-step verification using an authenticator app or passkey. No system is perfectly secure, so please keep your sign-in methods and email account secure, and contact us if you suspect a problem.

10. Your choices and rights

• You can update your name, email, time zone, recovery phone, sign-in methods and notification preferences in your account settings.
• You can disconnect social accounts and integrations at any time from your project settings, and revoke Endata's access from the network's own settings.
• You can sign out of every session from your account page.
• Removing Facebook sign-in:under Account › Sign-in & security, choose Remove next to Facebook. We then delete your Facebook account identifier and stop accepting Facebook sign-in for your account. You can also remove Endata in Facebook under Settings › Apps and websites. To delete everything else, choose Delete account on the same page, or email help@endata.com.
• Pinterest: when you connect Pinterest, we read your username and the list of your boards so you can choose one, and keep an access token so we can save the Pins you ask for to that board. We do not read your other Pins or anyone else's, and never see your Pinterest password. Disconnect Pinterest in Distribution to stop all use of the token, and remove Endata in Pinterest under Settings › Security and logins › Apps to revoke it.
• Depending on where you live, including California and other U.S. states with privacy laws, you may have the right to know what personal information we hold about you, to access it, to correct it, to delete it, to receive a portable copy, and to opt out of sale, sharing or targeted advertising (which we do not do). We will not discriminate against you for using these rights.

To make a request, email help@endata.com from the address on your account. We may need to verify your identity before acting. An authorized agent may make a request for you with your written permission. If we decline your request, you may appeal by replying to our decision.

11. Where we process information

We store and process information in the United States. Some service providers may process information in other countries under their own safeguards.

12. Children

Endata is a business service and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy. If we make material changes, we will notify you through the platform or by email before they take effect. The date at the top shows when it last changed.

14. Contact

Feedsoft, Inc. (Endata), 701 Brazos St, Austin, TX 78701, United States. help@endata.com · (888) 960-2853.