# Legal and policy reference

This page indexes Ethen's legal policies. **It does not replace, summarise, or interpret the authoritative legal documents.** Always refer to the linked pages for current terms and policies.

## Available policies

| Policy | Description | Link |
|---|---|---|
| Privacy Policy | How Ethen collects, uses, and protects personal data | [/legal/privacy](/legal/privacy) |
| Terms of Service | Terms governing use of the Ethen platform | [/legal/terms](/legal/terms) |
| Additional policies | Other legal documents (per-surface policies, DPA, etc.) | [/legal/[slug]](/legal/cookie-policy) |

## Privacy and data processing

For questions about data processing, data retention periods, and data subject rights, see Ethen's [Privacy Policy](/legal/privacy).

## Terms of service

For questions about acceptable use, service levels, limitations of liability, and governing law, see Ethen's [Terms of Service](/legal/terms).

## Enterprise agreements

Enterprise customers should refer to their executed Master Services Agreement (MSA) or Enterprise Agreement for governing terms. The publicly available [Terms of Service](/legal/terms) serve as the default terms unless superseded by a signed agreement.

## Reporting a security issue

To report a security vulnerability or incident, contact Ethen's security team through the channel described in the [Security overview](/docs/security/overview).

## Review-required statement

All links and descriptions on this page must be reviewed by legal counsel before publication. Nothing on this page constitutes legal advice or an official policy interpretation.