Back to home Legal

Privacy Policy

Last updated: September 2026

This Privacy Policy explains how eathri, Inc. ("eathri", "we", "us") collects, uses and shares personal data when you use eathri.com and our Services. We are committed to handling your data in accordance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA) and other applicable privacy laws.

1. Controller and contact

Data Controller: eathri, Inc., 8 The Green, Suite #5198, Dover, DE 19901, USA. Data Protection Officer: privacy@eathri.com. For EU residents, our EU representative can be reached at eu-privacy@eathri.com.

2. Data we collect

  • Account data: name, email, password (hashed), company, role.
  • Billing data: billing address, tax ID, payment method details (processed by Stripe; we never see full card numbers).
  • Usage data: IP address, browser, device, pages visited, timestamps.
  • Communications: emails you send us, support tickets, survey responses.
  • Project data: code, datasets, prompts and documentation you share with us in the course of an engagement.

3. Purposes and lawful bases

  • Contract (Art. 6(1)(b) GDPR): providing the Services you requested, billing, support.
  • Legitimate interest (Art. 6(1)(f) GDPR): improving our Services, preventing fraud, ensuring platform security.
  • Consent (Art. 6(1)(a) GDPR): marketing emails, non-essential cookies. You can withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c) GDPR): tax records, responding to lawful requests.

4. Recipients and processors

We share data only as needed to run our business:

  • Cloud infrastructure: AWS, Google Cloud Platform (US, EU regions available).
  • Payments: Stripe (PCI-DSS Level 1).
  • Email and analytics: Postmark, Plausible Analytics (privacy-friendly, no cross-site tracking).
  • Customer support: Linear, Intercom.
  • Professional advisors: accountants, lawyers, insurers under confidentiality.

5. International transfers

eathri is based in the US. When we transfer your data outside your country of residence (including from the EU/UK to the US), we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and equivalent UK/EU mechanisms, plus additional technical safeguards (encryption in transit and at rest, access controls).

6. Retention

We retain your data for as long as your account is active and for up to 3 years after closure for billing, audit and legal purposes. Marketing data is deleted within 30 days of opt-out. Anonymized usage statistics may be retained indefinitely.

7. Your rights

Depending on your jurisdiction, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Port your data in a machine-readable format.
  • Withdraw consent at any time, without affecting prior processing.
  • Lodge a complaint with your local supervisory authority (in the EU) or the California Attorney General (in California).

To exercise any of these rights, email privacy@eathri.com. We respond within 30 days (15 for California residents).

8. Security

We protect your data with TLS everywhere, AES-256 encryption at rest, hashed passwords (Argon2), role-based access control, mandatory MFA for employees, regular third-party penetration testing and continuous monitoring. We are ISO 27001 certified and SOC 2 Type II audited. Despite our efforts, no system is 100% secure; please protect your account credentials.

9. Children

Our Site and Services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have, contact us at privacy@eathri.com.

10. Do Not Track / Global Privacy Control

We honor Global Privacy Control (GPC) signals. If your browser sends GPC, we treat it as a request to opt out of "sale" or "sharing" under CCPA/CPRA.

11. Changes to this policy

Material changes will be notified via the Site or email at least 30 days in advance. The "Last updated" date reflects the current version.

12. Contact

privacy@eathri.com · DPO · eathri, Inc., 8 The Green, Suite #5198, Dover, DE 19901, USA.