Privacy

What this website collects, and what happens to it.

One form, one field, one email. This page says who holds it, on what basis, for how long, and how to make us delete it.

Last updated August 29, 2026

Who and what

Who is responsible, and what this covers

The controller for the data described here is [TODO: registered company name], [TODO: registered address] (registration number [TODO: company registration number]). Reach us at hello@eflios.com.

This policy covers this website – the waiting list, and the requests your browser makes to load these pages. It does not cover data you will one day collect from your own visitors through an Eflios form. For that data you are the controller and we are the processor, and the terms are set by a separate data processing agreement rather than by this page.

What we collect

An email address, and the ordinary traces of loading a page

Waiting list: your email address, the page you signed up from, and the time you did. Nothing else is asked and nothing else is stored.
Legal basis: your consent, given by submitting the form. You can withdraw it at any time and the entry is deleted.
Purpose: a single message when accounts open. Not a newsletter, and never sold or shared.
Server logs: our hosting providers record the ordinary details of a web request – IP address, timestamp, page, user agent – to serve the site and defend it from abuse. Legal basis: our legitimate interest in a working, secure website.
No analytics: no analytics product, no advertising pixels and no tracking cookies run on this site. We do not know who you are until you type your address into the form.
Local storage: your light or dark preference is kept in your own browser. It never reaches us, and it is the only thing this site keeps there.

How long

Until it has done its one job, or until you ask

Waiting-list entries are kept until accounts open and the launch message has been sent, and deleted within three months of that – sooner if you ask. An entry deleted on request is removed from the database, not flagged as hidden.

Server logs are held for as long as our hosting providers retain them under their own policies, which is a matter of days to weeks rather than years.

Who else touches it

Our processors

Named rather than summarized. Several of these only ever see product data and never touch the waiting list; they are listed anyway, so the picture is the whole picture.

Supabase: Postgres database, authentication, file storage
Vercel: website, dashboard and API hosting
Cloudflare: the embed script CDN and the high-volume ingest endpoints
Hetzner: the job runner for long crawls and prompt runs
Resend: email delivery
Anthropic: lead scoring and extraction, where those features are enabled
LLM search engines: Visibility only – the engines being measured receive your prompt text

Where a provider processes data outside the European Economic Area, that transfer relies on the European Commission’s standard contractual clauses or on an adequacy decision.

Your rights

What you can ask us to do

Email us and we will do it. There is no form to fill in and no account to log into.

Access: a copy of what we hold about you
Rectification: correction of anything wrong
Erasure: deletion of your entry
Restriction: we hold it but stop using it
Portability: your data in a machine-readable form
Objection: you can object to processing based on legitimate interests
Withdraw consent: at any time, without affecting what came before

Write to hello@eflios.com and we will answer within one month. If you think we have handled your data badly you can complain to [TODO: data protection authority, e.g. Valstybinė duomenų apsaugos inspekcija], or to the supervisory authority where you live.

Changes

If this page changes

The date at the top is the date this policy last changed. If a change affects what we do with data already collected, we will email everyone on the list before it takes effect rather than relying on you to re-read this page.