Privacy Policy
How EndLayer collects, uses, stores, and protects your personal information — and the rights you have over it.
last updated
The short version
We collect as little as we can get away with: an email address if you subscribe, whatever you type into the contact form, a record of your cookie choice, and analytics only if you accept it. We don't sell your data. You can ask us to delete anything we hold about you at any time by emailing hello@endlayer.com.
This summary is for convenience only — the full text below is what governs.
1.Who we are
Holistic AI ("we", "us") operates www.endlayer.ai. For the purposes of data-protection law we are the data controller for the personal information described in this policy. Our registered address is 95 Third Street, 2nd Floor, San Francisco, CA 94103, US and you can reach our privacy contact at hello@endlayer.com.
2.Information we collect
Information you give us directly. If you submit the contact form we receive your name, email address, chosen subject, and message. If you subscribe to the newsletter we receive your email address and, optionally, your first name.
Information collected automatically. Like almost every website, our hosting provider records standard server logs: IP address, user agent, referring URL, and the pages requested.
Your cookie choice. When you answer the cookie banner, or change or withdraw your answer, we keep a record of it: a random consent ID (also stored in your consent cookie), the time, what you chose, the version of the Cookie Policy, how you chose, the page you were on, your browser type, your country, and your IP address with its last part removed. It holds no name, email or account.
Analytics, only if you accept it. With your consent, Google Analytics sets `_ga` cookies holding a random identifier and records the pages you view and how you interact with them, so we can see which parts of the site are read and how people arrive. Without your consent it sets no cookies; see the Cookie Policy.
Information we do not collect. We do not ask for payment details, we do not run advertising networks that build cross-site profiles of you, and we do not attempt to identify you across other websites.
3.Why we process it, and our legal basis
To answer you. When you contact us we use your details to reply and to keep a record of the correspondence. Legal basis: legitimate interests, and performance of a contract where you are a client.
To send the newsletter. Only if you asked for it. Legal basis: consent, which you can withdraw at any time via the unsubscribe link in every email.
To keep the site working and secure. Server logs help us diagnose faults and identify abuse. Legal basis: legitimate interests.
To understand what to publish. Analytics inform editorial decisions. Legal basis: your consent, given in the cookie banner and withdrawable at any time from "Cookie settings" on every page.
To show that consent was given. The law requires us to be able to demonstrate that you consented before we set optional cookies, so we keep the record of your cookie choice described above. Legal basis: compliance with a legal obligation (UK and EU GDPR Article 7(1) with Article 6(1)(c)); it is used for nothing else.
5.International transfers
Our providers may process data outside your country, including in the United States. Where we transfer personal data out of the UK or EEA we rely on the UK IDTA, EU Standard Contractual Clauses, or an adequacy decision, as applicable.
6.How long we keep it
Contact form correspondence: up to 24 months after our last exchange, then deleted.
Newsletter subscriptions: until you unsubscribe, plus a suppression record so we don't accidentally re-add you.
Server logs: retained by our hosting provider on a rolling short-term basis, typically 30 days.
Records of cookie choices: 3 years from the choice, so we can answer a question or a complaint about it, then deleted automatically. The consent cookie in your browser expires after 180 days.
Analytics: for the retention period set in our Google Analytics property, no longer than 14 months.
7.Your rights
Depending on where you live you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to our processing, receive it in a portable format, and withdraw consent. Californian residents additionally have the right to know, delete, correct, and opt out of sale or sharing — we do not sell or share personal information as those terms are defined by the CCPA/CPRA.
To exercise any of these, email hello@endlayer.com. We respond within one month. For your cookie choice, include the consent ID shown on the Cookie Policy page so we can find its record; you can withdraw the choice itself at any time without asking us. You are also entitled to complain to your local data-protection authority if you are unhappy with how we've handled things, though we'd appreciate the chance to fix it first.
8.Cookies
We use the minimum necessary. Details are in our Cookie Policy, including how to refuse non-essential cookies.
9.Children
This site is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us data, contact us and we will delete it.
10.Security
The site is served over HTTPS. Access to the systems holding contact and subscriber data is limited to people who need it, and protected by strong authentication. No system is perfectly secure, and we will notify you and the relevant regulator without undue delay if a breach affects your rights.
11.Changes to this policy
When we change this policy we update the date at the top. If a change materially affects how we use your information we will say so prominently on the site, and by email where we hold your address for that purpose.
Give AI room to work.And clear boundaries.
See the Guardian Agent Platform on your own fleet. Find every AI tool, understand what it reaches and costs, and apply the controls your team needs.