EnkiLabs · Legal
Privacy Policy
Effective Date: June 1, 2026 · Last Updated: August 19, 2026
Gambit is a competitive intelligence platform operated by EnkiLabs. We collect minimal data,
use it only to operate the service, and never sell it. This policy explains what we collect,
why, and what rights you have.
1. Who We Are
Gambit is operated by EnkiLabs ("we," "us," or "our"). If you have questions about this policy,
contact us at privacy@enkilabs.io.
2. Information We Collect
Account and billing information
- Company name, contact name, and business email address (collected at signup)
- Industry and company description (used to personalize your intelligence briefs)
- Payment information, processed by Stripe; we do not store card numbers or bank details
Usage data
- Competitor domains you add to your watchlist
- Win/Loss entries you log manually
- Intelligence briefs, Counterplay cards, and Watchdog reports generated for your account
- Your Slack webhook URL (if configured for alerts)
- Email addresses you configure for digest delivery
Technical data
- IP address (used for admin brute-force protection; not stored long-term)
- Server logs retained for up to 30 days on Railway's infrastructure
- No cookies beyond the session cookie required for admin authentication
Contact email
- If you create an account, request a demo, or contact us, we store your email to operate the product, send transactional messages (welcome, weekly digest, billing), and respond to you — not to announce a future launch
3. How We Use Your Information
- To provision and operate your Gambit account
- To generate AI-powered competitive intelligence briefs using Anthropic's Claude API
- To send transactional emails (welcome, weekly digest, payment receipts) via Resend
- To process payments and manage subscriptions via Stripe
- To send Watchdog alerts to your configured Slack webhook
- To monitor service health and investigate errors via Sentry
- To respond to support requests
We do not use your data to train AI models, sell it to third parties, or use it for advertising.
4. AI-Generated Intelligence
Gambit uses Anthropic's Claude API to generate competitive intelligence briefs. The competitor
domains and industry context you provide are sent to Anthropic's API to produce analysis.
Anthropic's data handling practices are governed by
Anthropic's Privacy Policy.
We do not send your personal contact information or billing data to Anthropic.
AI accuracy disclaimer: Intelligence briefs are generated from publicly available
information using AI. They may contain inaccuracies. Always verify material claims before acting
on them. Gambit intelligence is not legal, financial, or strategic advice.
5. Data We Collect About Third Parties (Competitors)
Gambit scrapes publicly accessible web pages, job postings, and review sites of competitor
companies you specify. This data is used solely to generate your intelligence briefs and is not
shared with other customers. We use a declared user agent and endeavour to respect
robots.txt directives.
6. Third-Party Services
7. Data Retention
- Active account data is retained while your subscription is active
- Upon cancellation, your data is retained for 30 days, then permanently deleted from our systems
- Server logs are retained for up to 30 days
8. Your Rights
Depending on your location, you may have the right to:
- Access a copy of the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (right to erasure)
- Object to or restrict processing of your data
- Data portability, receive your data in a machine-readable format
To exercise any of these rights, email privacy@enkilabs.io. We will respond within 30 days.
9. Security
We use industry-standard security practices including HTTPS encryption in transit, signed session
cookies, and access-token-based client authentication. Stripe handles all payment card data and
is PCI-DSS compliant. We do not store credit card numbers.
10. Children's Privacy
Gambit is a B2B service intended for business users. We do not knowingly collect data from
individuals under 18 years of age.
11. Changes to This Policy
We may update this policy from time to time. We will notify active customers by email at least
14 days before material changes take effect. The "Last Updated" date at the top of this page
will always reflect the current version.