Privacy Policy
How endlayer collects, uses, stores, and protects your personal information — and the rights you have over it.
last updated
The short version
We collect as little as we can get away with: an email address if you subscribe, whatever you type into the contact form, and aggregate analytics that don't identify you. We don't sell your data. You can ask us to delete anything we hold about you at any time by emailing hello@endlayer.com.
This summary is for convenience only — the full text below is what governs.
1.Who we are
Holistic AI ("we", "us") operates www.endlayer.ai. For the purposes of data-protection law we are the data controller for the personal information described in this policy. Our registered address is 95 Third Street, 2nd Floor, San Francisco, CA 94103, US and you can reach our privacy contact at hello@endlayer.com.
2.Information we collect
Information you give us directly. If you submit the contact form we receive your name, email address, chosen subject, and message. If you subscribe to the newsletter we receive your email address and, optionally, your first name.
Information collected automatically. Like almost every website, our hosting provider records standard server logs: IP address, user agent, referring URL, and the pages requested. We use aggregate analytics to understand which articles are read and how people arrive, in a form that does not identify individual readers.
Information we do not collect. We do not ask for payment details, we do not run advertising networks that build cross-site profiles of you, and we do not attempt to identify you across other websites.
3.Why we process it, and our legal basis
To answer you. When you contact us we use your details to reply and to keep a record of the correspondence. Legal basis: legitimate interests, and performance of a contract where you are a client.
To send the newsletter. Only if you asked for it. Legal basis: consent, which you can withdraw at any time via the unsubscribe link in every email.
To keep the site working and secure. Server logs help us diagnose faults and identify abuse. Legal basis: legitimate interests.
To understand what to publish. Aggregate analytics inform editorial decisions. Legal basis: legitimate interests, using measurement configured to minimise personal data.
5.International transfers
Our providers may process data outside your country, including in the United States. Where we transfer personal data out of the UK or EEA we rely on the UK IDTA, EU Standard Contractual Clauses, or an adequacy decision, as applicable.
6.How long we keep it
Contact form correspondence: up to 24 months after our last exchange, then deleted.
Newsletter subscriptions: until you unsubscribe, plus a suppression record so we don't accidentally re-add you.
Server logs: retained by our hosting provider on a rolling short-term basis, typically 30 days.
7.Your rights
Depending on where you live you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to our processing, receive it in a portable format, and withdraw consent. Californian residents additionally have the right to know, delete, correct, and opt out of sale or sharing — we do not sell or share personal information as those terms are defined by the CCPA/CPRA.
To exercise any of these, email hello@endlayer.com. We respond within one month. You are also entitled to complain to your local data-protection authority if you are unhappy with how we've handled things, though we'd appreciate the chance to fix it first.
8.Cookies
We use the minimum necessary. Details are in our Cookie Policy, including how to refuse non-essential cookies.
9.Children
This site is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us data, contact us and we will delete it.
10.Security
The site is served over HTTPS. Access to the systems holding contact and subscriber data is limited to people who need it, and protected by strong authentication. No system is perfectly secure, and we will notify you and the relevant regulator without undue delay if a breach affects your rights.
11.Changes to this policy
When we change this policy we update the date at the top. If a change materially affects how we use your information we will say so prominently on the site, and by email where we hold your address for that purpose.
Related documents
Take control of the AI already in your company.
It is already installed on the laptops. You can see all of it by this afternoon.