Legal
Privacy Policy
Last updated: 30 July 2026
1. Who we are
Elaan ("we") provides notification infrastructure at elaan.io: our customers ("Customers") use Elaan to send notifications to their own users ("End Users"). This policy explains what personal data we handle, in which role, and what your rights are.
2. Two roles
- For Customer account data we are the controller — the data you give us when you sign up and operate an account.
- For End-User data we are a processor — recipient lists, attributes and message content belong to the Customer that submitted them; we process them only to deliver that Customer's notifications, on their instructions. If you are an End User, the organization that sends you notifications is the controller — contact them about your data; we will assist them in fulfilling your rights.
3. Data we collect as controller
- Account data — name of your account, email address, hashed password, team membership and roles.
- Billing data — handled by our Merchant of Record, Paddle, which collects your payment details and billing address under its own privacy policy; we receive only subscription status and non-card metadata, never full card numbers.
- Operational data — API request logs, delivery logs and security logs (IP addresses, timestamps), used to run and secure the Service.
4. What we use it for
To provide and secure the Service, to bill subscriptions, to communicate service messages (verification, password reset, billing notices), and to comply with legal obligations. We do not sell personal data, and we do not use Customer or End-User data for advertising.
5. Where data lives and who helps us
The Service runs on Amazon Web Services in the EU (Frankfurt, eu-central-1). We share data only with subprocessors needed to run the Service — hosting (AWS), payment (Paddle), and email delivery providers used to transmit messages — under data-processing terms, and where a transfer leaves the EEA it is protected by appropriate safeguards such as the EU Standard Contractual Clauses.
6. Retention
Account data is kept while your account exists and deleted or anonymized after closure, subject to legal retention duties. Delivery logs are kept for operational history and can be limited on request. End-User data is retained under the sending Customer's instructions and deleted when they delete it or close their account.
7. Cookies
The marketing site sets no tracking cookies. The console uses only what is necessary to keep you signed in. We use no third-party advertising or analytics cookies.
8. Your rights
If you are in the EEA/UK you may have rights to access, rectify, erase, restrict or port your personal data, to object to processing, and to lodge a complaint with a supervisory authority. To exercise them, email support@elaan.io. If your request concerns notifications sent by one of our Customers, we will refer it to that Customer as controller.
9. Changes
We will post any changes to this policy here and, for material changes, notify account holders by email or in the console.