Privacy policy

The controller of your personal data is Donnovan Rinomhota, a sole trader based in Poland, who runs Elliot ("we", "us").

You can contact us about anything in this policy through the contact form on this website or by leaving a message in the chat.

This policy covers this website, including the demo request form and the Elliot chat on this site.

It does not cover Elliot when an estate agency uses it on its own website. In that case the agency decides how your data is used and is the controller; we process the data on the agency's behalf under a data processing agreement. Please read that agency's privacy policy.

• Demo request form: your name, company, email address, website, industry, company size and the message you write.
• Chat: the messages you type and anything you choose to include in them (for example your name, phone number, email address or what property you are looking for), plus a conversation identifier and the time of each message.
• Technical data: our hosting provider records your IP address, browser type and the pages you request, to keep the site running and secure.

Please do not share sensitive information in the chat, such as health data, bank details or passwords.

• To answer your demo request and arrange a demo, which are steps you ask us to take before a possible contract (Article 6(1)(b) GDPR).
• To answer your questions in the chat and, if you ask us to, get back to you (Article 6(1)(b) GDPR where you ask about our services, otherwise our legitimate interest in replying to enquiries, Article 6(1)(f) GDPR).
• To keep the website secure, prevent abuse and fix problems (our legitimate interest, Article 6(1)(f) GDPR).
• To establish, exercise or defend legal claims, if that is ever needed (our legitimate interest, Article 6(1)(f) GDPR).

We do not send newsletters and we do not sell your data.

Giving us your data is voluntary, but without an email address we cannot reply to a demo request.

Replies in the chat are written by an AI model, based on information we have given it. They can occasionally be wrong or incomplete. If something matters to you, ask to speak to a person and we will get back to you.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

We use the following service providers to run the website and Elliot. They process data only on our instructions, under data processing agreements:

• Vercel Inc. (website hosting)
• n8n GmbH (workflow automation that receives form and chat submissions)
• Supabase Inc. (database where submissions and conversations are stored)
• Anthropic PBC (the AI model that writes the chat replies)
• Google (email notifications and calendar, where used)

We may also disclose data where the law requires it, for example to a court or public authority.

Some of these providers are based in the United States or may process data there. Where that happens, the transfer relies on the EU-US Data Privacy Framework (for providers certified under it) or on the European Commission's Standard Contractual Clauses. You can ask us for more information about these safeguards.

• Demo requests and chat conversations: up to 12 months after our last contact with you. If we start working together, for as long as the contract lasts and then for as long as the law requires or claims could be brought.
• Technical logs: for the short period set by our hosting provider, usually no more than 30 days.

After that, the data is deleted or anonymised.

You have the right to:

• access your data and get a copy of it,
• have inaccurate data corrected,
• have your data deleted,
• restrict how we use it,
• receive your data in a portable format,
• object to processing based on our legitimate interest.

To use any of these rights, contact us through the contact form or the chat. We may need to confirm your identity, and we will reply within one month.

You also have the right to lodge a complaint with the supervisory authority in Poland: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

We do not use analytics or advertising cookies. The website stores one thing in your browser's local storage: your light or dark theme choice. You can clear it at any time in your browser settings.

If we change this policy, we will publish the new version here with a new date. If the change is significant, we will say so on the website.