Privacy Policy

The data controller responsible for your personal data is:

We collect the following categories of personal data:

• Account information — name, email address, phone number, VAT number
• Usage data — how you interact with our services, features used, pages visited
• Device information — browser type, operating system, IP address, device identifiers
• AI conversation data — messages exchanged with EvE, our AI assistant, to improve service quality

We process your personal data for the following purposes:

• Service delivery — providing, maintaining, and improving our products
• Personalization — tailoring the experience to your preferences and usage patterns
• Analytics — understanding how our services are used to make improvements
• Communication — sending service updates, support responses, and (with consent) marketing
• Legal compliance — fulfilling our legal and regulatory obligations

We process your data under the following legal bases as defined by the GDPR:

• Contract performance — processing necessary to deliver the services you have subscribed to
• Legitimate interests — improving our services, preventing fraud, and ensuring security
• Consent — for marketing communications, which you can withdraw at any time

We share data with the following trusted third-party providers, each operating under their own privacy policies:

Your data is stored on servers located within the European Union. We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption at rest and in transit (TLS 1.2+)
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure backup procedures

We retain your personal data for the following periods:

• Account data — for the duration of your active account plus 3 years after closure
• Financial records — 7 years as required by applicable tax and accounting regulations
• AI conversation data — retained for service improvement and deleted upon account closure

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to restriction — restrict the processing of your data
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at hi@elvalue.com. We will respond within 30 days.

We use minimal, functional cookies only. These are essential for the operation of our services (e.g., session management, authentication). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or the relevant supervisory authority in your country of residence.