This Privacy Policy explains how Eliro ("we," "us," or "our") collects, uses, stores, and shares your personal data when you use our platform, website, and related services (collectively, the "Service").
By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
Questions? Contact us at hello@eliroapp.com.
1. Information We Collect
Information you provide
When you register or use the Service, we collect information you provide directly, such as:
- Name and email address
- Company name
- Phone number (optional)
- Payment information (processed by Stripe; we do not store full card details)
- Any content you upload or create on the platform
Information collected automatically
When you access the Service, we automatically collect certain technical data, including:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and features used
- Referring URL and UTM parameters
- Cookies and similar tracking technologies (see Section 6)
Information from third parties
If you connect third-party services to the Platform (e.g., email, messengers, file storage), we may receive data from those services in accordance with the permissions you grant.
2. How We Use Your Information
We use the information we collect to:
- Provide the Service — create your account, process orders, and deliver core functionality
- Process payments — manage billing and subscriptions
- Communicate with you — send transactional emails (confirmations, reminders, service updates) and, with your consent, marketing communications
- Improve the Service — analyze usage patterns, fix bugs, and develop new features
- Ensure security — detect and prevent fraud, unauthorized access, and abuse
- Comply with legal obligations — respond to lawful requests and enforce our Terms
3. Legal Basis for Processing (EEA/UK Users)
If you are in the European Economic Area or the United Kingdom, we process your personal data under one or more of the following legal bases:
- Contract — processing is necessary to perform our contract with you (e.g., providing the Service)
- Legitimate interest — processing is necessary for our legitimate business interests (e.g., improving the Service, preventing fraud), provided those interests are not overridden by your rights
- Consent — you have given consent for a specific purpose (e.g., marketing emails); you may withdraw consent at any time
- Legal obligation — processing is necessary to comply with applicable law
4. How We Share Your Information
We do not sell your personal data. We may share information with:
- Service providers — third parties that help us operate the Service (e.g., hosting, payment processing, analytics, customer support). These providers are contractually obligated to protect your data and may only use it on our behalf.
- Legal and regulatory authorities — when required by law, court order, or to protect our rights and safety.
- Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
We do not share your data with third parties for their own marketing purposes.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for a limited period as necessary to:
- comply with legal or regulatory obligations;
- resolve disputes and enforce agreements;
- prevent fraud.
Anonymized or aggregated data that can no longer identify you may be retained indefinitely.
6. Cookies and Tracking
We use cookies and similar technologies to:
- Authentication — keep you signed in across pages
- Analytics — understand how the Service is used (we use privacy-respecting analytics tools)
You can manage cookie preferences in your browser settings. Disabling cookies may limit certain features of the Service.
7. International Data Transfers
Your data may be processed in countries outside of your country of residence, including countries within the European Economic Area. Where we transfer data outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
8. Data Security
We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS/SSL), access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request that we limit processing of your data
- Portability — request your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at hello@eliroapp.com. We will respond within 30 days (or as required by applicable law). If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
10. Children's Privacy
The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be communicated via email or an in-app notice at least 30 days before they take effect.
Contact
If you have questions, comments, or complaints about this Privacy Policy, contact us at: hello@eliroapp.com