Privacy policy

What we collect, why we collect it, who we share it with, and the rights you have over it — written for people in the United States and the European Union alike.

Effective October 1, 2026 · Applies to enabley.com, the Enabley service, and your conversations with Big Decibel LLC

1. Who we are

Big Decibel LLC ("Big Decibel", "we", "us") operates enabley.com and the Enabley managed cloud service. For the information described in sections 2a and 2c — inquiry details and website data — we are the data controller: we decide why and how it is handled. For the business data our customers load into the Enabley service, we act as a processor acting only on the customer's instructions, as described in section 2b. Questions about this policy or your data go to hello@enabley.com.

2. What we collect

a. When you contact us or request early access

The early-access form asks for your name, work email, company, the plan you want to discuss, your approximate monthly order count, number of active users, number of brands or companies, and when you would like to move. We send that to our customer system, operated by HubSpot, so a person on our team can read it and reply. Anything you send to hello@enabley.com lands in the same place.

b. When you use the Enabley service

We process the business records your organization puts into Enabley — customers, orders, products, inventory, and the rest — to run the service for you: hosting it, backing it up, supporting it, and migrating it when you ask. Your data belongs to you; we handle it under your agreement with us and you can export it whenever you want. We also keep account and billing records for the people who administer your subscription.

c. When you visit this website

Our hosting provider records technical details of every request — IP address, browser and device type, and the page requested — for security and reliability. The site also loads HubSpot's tracking code, which sets an analytics cookie (see section 4) and records pages viewed, referral source, and general location derived from your IP. We use that to understand which pages answer people's questions, nothing more.

3. How and why we use it

To answer you. Replying to an inquiry or support message. For the early-access form this is the use the consent beside the button covers — to reply about early access — and it is also our legitimate interest in responding to people who contact us.
To run the service. Providing, operating, backing up, and supporting Enabley, and migrating your data — performance of our contract with you.
To keep the service safe. Preventing abuse, investigating failures, and protecting against unauthorized access — our legitimate interest, plus legal obligations where they apply.
To understand use of this site. Seeing which pages are read and where visitors come from — our legitimate interest in improving what we publish.
To send service messages. Confirmations and updates about your inquiry or your subscription — our legitimate interest, or the contract. We do not send marketing emails; if that ever changes, we will ask first.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for automated decisions that produce legal or similarly significant effects about you.

4. Cookies and similar technologies

This site loads HubSpot's tracking code, which sets a visitor cookie — hubspotutk and its successor __hstc, the visitor identifier, lasting up to 180 days — plus short-lived session cookies (__hssc and __hssrc) that expire with the visit. Our hosting provider may set strictly necessary cookies to deliver and secure the site.

We set no advertising cookies and no third-party advertising pixels — no Google Ads, no Meta Pixel, nothing that follows you around the web. You can clear or block cookies in your browser settings at any time. We will still record the basic technical request details described in section 2c, but your visits will no longer be tied together by the tracking cookie.

5. Who we share it with

We share personal information only with service providers who handle it for us under contract, with your team inside your own organization, or when the law requires it:

HubSpot — the customer system that holds inquiry details and the analytics that power section 2c.
Vercel — hosting and delivery of this website.
Our email and infrastructure providers — the mailbox behind hello@enabley.com, and the cloud infrastructure the Enabley service itself runs on, including our source-code hosting.
Authorities — when we are legally compelled, and advisors where necessary to protect the service or enforce our agreements.

Every provider is bound to protect what they handle and to use it only for the job we gave them. If we are ever acquired or reorganized, personal information may transfer as part of that transaction, under protections consistent with this policy.

6. International transfers

Big Decibel is based in the United States, so information from the European Union, the United Kingdom, and elsewhere is processed in the United States. Where EU or UK data protection law requires a safeguard for those transfers, we rely on appropriate mechanisms — the EU Standard Contractual Clauses (and the UK addendum) with our providers — and we apply this policy to the data wherever it is held. You can ask us more about the safeguards that apply to your information at hello@enabley.com.

7. How long we keep it

Inquiry details — up to 24 months after our last meaningful exchange about your request, then deleted or anonymized.
Service data — for as long as your agreement runs; after it ends, you export first, and we delete what remains after the export window agreed in writing (see section 5 of the Terms of Service).
Website analytics — the tracking cookie lasts up to 180 days; the page-view records behind it, no longer than 13 months.
Hosting and security logs — for a limited period needed to investigate incidents and keep the service reliable.
Records we must keep — longer only where a law obliges us (for example, tax records), kept only for that purpose.

8. Security

We use reasonable technical and organizational measures suited to the data we hold: encryption in transit, encrypted storage, least-privilege access, row-level isolation between customers, and logging of privileged actions. No system is perfectly secure — if something goes wrong that affects you, we will tell you and act on it.

9. Your rights

If you are in the EU, UK, or EEA

You have the right to access the personal information we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you may withdraw it at any time without affecting earlier processing. To exercise any of these, write to hello@enabley.com — we respond within one month (extendable by two months for complex requests, with notice). You may also complain to your local supervisory authority.

If you are in California or another US state

Depending on where you live, you may have the right to know the categories and specific pieces of personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information for targeted advertising, and we will not discriminate against you for exercising any of these rights. Requests from residents of California and states with similar laws go to hello@enabley.com; we respond within the time the law allows (for example, 45 days under the CCPA, with one permitted extension). We do not knowingly sell the personal information of anyone under 16.

You may use an authorized agent to make a request for you; we will verify that person's authority before acting, and we may still ask you to confirm the request directly.

10. Children

Enabley is a business service, not a product for children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.

11. Changes to this policy

The effective date at the top of this page always shows the current version. Material changes — the kind that affect your rights — will be called out on this page before they take effect, and where we have your contact details we will tell you directly.

12. Contact

Big Decibel LLC is the controller for the information in sections 2a and 2c, and the processor — acting for our customers — for the service data in section 2b. Email hello@enabley.com with any question, request, or complaint — put "Privacy" in the subject and a person will answer. Our Terms of Service are at terms.html.