Privacy Policy

1. Who we are and what this covers

This policy explains how ELRO ("we", "us") handles personal data when you visit our website (www.elro.ie) or use the ELRO app, which creates brand identities from the choices you make. We are the controller of the personal data described here, except where we say we act for you.

Contact us about anything in this policy at hello@elro.ie. Our Cookie Policy explains cookies and similar technologies in more detail, and our Terms of Use set out the rules for using the service.

2. The data we collect

• Account data: your email address, a password (stored in protected form, never in plain text) and sign-in activity.
• Project content: your business name and description, the styles you like or dislike, optional details you add, reference images you upload, the concepts you choose and the changes you request.
• Collaborator responses: feedback and votes from people you invite, and any details they choose to give.
• Payment data: payments are handled by Stripe. We receive confirmation, the amount, the status and the billing details Stripe passes on. We do not receive or store your full card number.
• Messages: your name, email address and message when you use the contact form or email us.
• Usage and device data: pages and screens viewed, features used, clicks and other actions, referring page, device and browser type, language, approximate location derived from your IP address, and technical logs (IP address, timestamps, errors).
• Cookie and consent choices: your analytics choice, stored in your browser.

We collect this from you directly, from people you invite to give feedback, from Stripe, and automatically from your device when you use the site or app.

3. How we use it, and our legal bases

We do not use your personal data to make decisions that have legal or similarly significant effects on you.

4. Analytics

We use analytics on the website and in the app to understand traffic and behaviour: how people find us, which pages and features they use, where they stop, and how the service performs. We use Google Analytics for this. It sets cookies or similar identifiers and sends usage data to Google.

Where the law requires it, we ask for your consent first. Nothing is sent to Google for analytics until you accept, and you can change your choice at any time using "Cookie settings" in the footer of the website. Declining does not stop you using the site or app. Analytics data is used in aggregated form to improve the service, and we keep it for no longer than 14 months. See the Cookie Policy for the cookies involved.

5. Artificial intelligence processing

To create concepts, critique and refine designs, and write the design brief, the content you provide (including your business description, choices and reference images) is processed by artificial intelligence services that we use as processors, acting on our instructions. The results are generated automatically and are not reviewed by a person before you see them.

You are responsible for what you choose to give us. Do not upload personal data about other people, or confidential or sensitive material, unless it is necessary and you have the right to share it.

6. Who we share data with

• Service providers (processors) that help us run the service: cloud hosting and storage, payment processing (Stripe), analytics (Google), email delivery, our contact form service (Formspree), and the artificial intelligence services described above. They may only use the data to provide their service to us.
• People you invite as collaborators, who can see what you choose to show them.
• Professional advisers, authorities and courts where we must, or where needed to protect our rights.
• A buyer or successor if our business is sold or reorganised, who must keep to this policy.

We do not sell your personal data.

7. Transfers outside the European Economic Area

Some of our providers are based, or process data, outside the European Economic Area, including in the United States. Where that happens we rely on an adequacy decision (such as the EU–US Data Privacy Framework for certified providers) or on the European Commission’s standard contractual clauses, with other safeguards where needed.

8. How long we keep data

• Account and project content: while your account is open and as needed to keep your brands available to you, then deleted or anonymised within a reasonable time after you ask us to delete them, unless we must keep it.
• Payment and invoicing records: as long as tax, accounting and other laws require.
• Contact messages: as long as needed to deal with your request and any follow-up.
• Analytics data: up to 14 months.
• Technical logs: for a short period needed for security and troubleshooting.

9. Security

We use measures suited to the risk, including encrypted connections, access controls and protected storage of passwords. No online service is completely secure. You are responsible for keeping your password and your devices secure and for telling us promptly if you think your account has been misused.

10. People you invite and content you upload

If you invite collaborators or upload material that includes other people’s personal data, you are responsible for having the right to do so, for telling those people how their data will be used, and for the content you share. You are responsible for anything you share with a collaborator after they have seen it.

11. Your rights

You may have the right to access your personal data, correct it, have it erased, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time (without affecting earlier use). To use any of these rights, email hello@elro.ie. We may need to confirm who you are first.

You also have the right to complain to the Data Protection Commission (Ireland): www.dataprotection.ie.

12. Children

The service is for adults and is not intended for anyone under 18. We do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.

13. Other websites

Our site may link to other websites. We are not responsible for their privacy practices, and you use them at your own risk.

14. Changes to this policy

We may update this policy. We will change the date at the top and, if the change is significant, tell you in a suitable way, such as a notice on the site or an email.

15. Contact

Questions or requests: hello@elro.ie.