Privacy Policy

← Back to Support

Introduction

Welcome to Echo ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Echo (the "App").

Information We Collect

Information You Provide

• Account Information: Username, email address, password (encrypted), profile photo, bio, date of birth, and nationality
• Profile Content: Answers to profile questions, posts, and personal information you choose to share
• Messages: Content of messages you send and receive through the App
• AI Agent Data: AI agents you create, including names, descriptions, system prompts, and configurations
• Connected Service Data: Data made available when you choose to connect a third-party account or service to an agent or automation, which may include account identifiers, messages, emails, files, calendar items, contacts, metadata, and other content permitted by the scopes or permissions you approve
• Agent Activity Records: Prompts, commands, summaries, results, execution logs, and other records describing actions requested by you or performed by agents on connected services
• Calendar Data: Events you create and manage in the integrated calendar
• Voice Calls: Metadata about voice calls (duration, participants, timestamps) but not call content
• Media: Photos, videos, documents, and audio files you upload or share

Automatically Collected Information

• Device Information: Device model, operating system version, unique device identifiers
• Usage Data: App features you use, interactions with AI agents, time spent in the App
• Log Data: IP address, access times, error logs, and diagnostic information
• Performance Data: Crash reports and performance metrics to improve the App

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App's functionality
• Enable messaging, voice calls, and group conversations
• Connect user-authorized third-party accounts and services to agents or automations
• Access, process, and act on data from connected services within the permissions granted by the user
• Process and deliver AI agent responses using third-party AI services
• Generate summaries, logs, and results of agent actions performed in Echo or on connected services
• Personalize your experience and provide relevant content
• Send you notifications about messages, friend requests, and app updates
• Maintain the security and integrity of the App
• Analyze usage patterns to improve features and performance
• Respond to your support requests and communications
• Enforce our Terms of Service and prevent fraud or abuse

How We Share Your Information

With Other Users

• Profile Information: Your username, profile photo, and bio are visible to everyone
• Messages: Messages are delivered to intended recipients (individuals or group members)
• Posts: Posts you publish are visible to your connections
• AI Agents: If you share an agent to the marketplace, its name, description, and functionality are visible to all users

With Service Providers

We share information with third-party service providers who perform services on our behalf:

• AI Providers (including Mistral AI): AI agent messages, voice inputs, connected-service context, and related task data may be sent to AI providers to interpret requests, generate responses, and produce summaries or results. These providers process data according to their own applicable terms and privacy policies
• Connected Third-Party Services Authorized by the User: When you connect a third-party account or service, Echo and its agents may exchange data with that service to read, create, modify, send, organize, or delete content, or perform other actions within the permissions you approved
• Firebase: For push notifications and authentication services
• LiveKit: For voice call infrastructure and real-time communication
• Cloud Hosting: For data storage and app infrastructure (Railway)

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as court orders or government investigations.

Business Transfers

If Echo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Retention

• Account Data: Retained until you delete your account
• Messages: Stored indefinitely unless you delete them
• AI Agent Responses: Response metadata, summaries, and task results may be stored; actual AI-generated or third-party-derived content may also be stored when needed to provide the feature you used
• Connected Service Data: Depending on the feature, Echo may store linked account identifiers, selected synced content, action logs, and summaries of actions performed on connected services
• Deleted Data: Deleted data is removed from active systems within 30 days but may persist in backups for up to 90 days

Your Rights and Choices

Access and Control

• Profile Settings: Update your profile information, photo, and bio at any time
• Privacy Controls: Control who can see your profile and send you messages
• Block Users: Block users to prevent them from contacting you
• Archive Conversations: Archive conversations to hide them from your main list
• Connected Accounts: Disconnect third-party accounts or services from within the App when that option is available, and revoke access from the third-party provider's settings if needed
• Delete Content: Delete messages, posts, and AI agents you've created

Data Portability

You can request a copy of your data by contacting us at echosocialaimarketplace@gmail.com.

Account Deletion

You can delete your account at any time through the App settings. This will permanently delete your:

• Profile information and posts
• Messages and conversation history
• AI agents you created
• Calendar events
• All associated data

Note: Account deletion is irreversible.

Security

We implement industry-standard security measures to protect your data:

• JWT (JSON Web Token) authentication for secure access
• Encryption in transit using HTTPS/TLS
• Encrypted password storage using industry-standard hashing
• Regular security audits and monitoring
• Access controls limiting employee access to user data

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Echo is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at echosocialaimarketplace@gmail.com.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Connected Third-Party Services and AI Providers

Echo allows users to connect third-party accounts and services to agents or automations they choose to enable. Echo also integrates artificial intelligence features powered by third-party providers, including Mistral AI (based in France/EU). To provide these features, Echo may access, process, exchange, and store certain data within the permissions granted by the user.

How Connected Services Work

When you connect a third-party service, you authorize Echo to access that service through APIs, OAuth, or similar authorization mechanisms initiated by you. Depending on the permissions you approve, an agent may read data from the connected service, create, modify, send, classify, or delete content, or perform other actions on your behalf within the scope of your authorization.

What Data May Be Accessed or Exchanged

Depending on the connected service and the permissions you approve, Echo and its agents may access or exchange account identifiers, emails, messages, files, calendar items, contacts, metadata, prompts, instructions, execution logs, summaries, and task results.

What Data May Be Sent to AI Providers

When you use AI features, Echo may send to AI providers: (1) text messages you send to Jarvis or AI agents, (2) voice messages you send to Jarvis (audio + transcription), (3) limited conversation context required to generate a relevant response, and (4) selected data from connected services when necessary to complete a user-requested task, produce a summary, or return a result in Echo. Your account registration data (name, email, password, profile photo) is not sent to AI providers unless explicitly required for a disclosed feature.

Who the Data is Sent To

Data may be exchanged with: (1) the third-party services that you explicitly choose to connect and authorize, and (2) AI providers used by Echo, including Mistral AI.

How the Data is Used

This data is used to authenticate connected accounts, execute tasks you request, generate AI responses, perform actions on connected services within your authorization, and produce summaries, logs, and results in Echo. Mistral AI processes relevant AI data within the European Union in compliance with the GDPR and applies a level of data protection equivalent to ours.

User Consent

Echo requests your explicit, in-app permission through the CGU/EULA flow before AI-related data is sent to Mistral AI. For new users, this happens during account creation. Existing users are only asked again if they have not yet accepted the CGU/EULA or if the CGU/EULA is materially updated. If you do not grant permission, access to AI features remains disabled.

When you connect a third-party service, that service may also present its own consent or authorization screen describing the permissions you are granting. You should review those permissions carefully before authorizing the connection.

You can withdraw consent by contacting us at echosocialaimarketplace@gmail.com. After withdrawal, we disable AI features for your account until consent is granted again.

Learn more about Mistral AI's data practices: Mistral AI Privacy Policy

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through the App or via email for significant changes
• Post the updated policy on our support website

Your continued use of Echo after changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: echosocialaimarketplace@gmail.com
• Support: echosocialaimarketplace@gmail.com
• Support Page: support.echo.social

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at echosocialaimarketplace@gmail.com.

Consent

By using Echo, you consent to this Privacy Policy and agree to its terms.