Privacy Policy | EFRION

1. Who we are

EFRION is a B2B SaaS platform that provides vertical-specific automation software for HoReCa, HealthTech, Enterprise, and Beauty & Wellness businesses. References to "EFRION", "we", "us", or "our" in this policy refer to the EFRION platform and its operating entity.

2. Information we collect

We collect information you provide directly when creating an account, submitting a demo request, or contacting support. This includes: business contact details (name, email, company name, job title), product usage data and event logs, technical information (IP address, browser type, device identifiers), and any content you upload or generate within the platform.

3. How we use your information

We use collected information to: provide, operate, and improve the EFRION platform; respond to your inquiries and requests; send service-related communications (onboarding, support, critical updates); analyze usage patterns to improve product performance; comply with legal obligations in each country of operation.

4. Legal bases for processing

We process personal data on the following legal bases: performance of a contract (to deliver the services you subscribed to), legitimate interest (improving and securing the platform, fraud prevention), legal obligation (compliance with applicable local laws), and consent (where explicitly obtained, e.g. marketing communications).

5. Data sharing and disclosure

We do not sell personal data. We may share data with: trusted service providers who process it on our behalf under strict confidentiality agreements; regulatory authorities where required by law; professional advisors (lawyers, auditors) under confidentiality obligations. All third-party processors are bound by Data Processing Agreements (DPAs).

6. Data retention

We retain personal data for as long as your account is active or as needed to provide services. After account termination, data is deleted or anonymized within 90 days unless longer retention is required by applicable law. Audit logs may be retained longer for compliance purposes.

7. Security

EFRION uses AES-256 encryption at rest and TLS 1.3 in transit. Access is controlled via role-based permissions (RBAC). All critical system actions generate immutable audit logs. Tenant data is fully isolated — no cross-contamination between accounts.

8. AI and automated processing

EFRION AI does not train on customer data. All AI models run on isolated infrastructure. No automated decisions with legal or similarly significant effects are made solely by AI without human oversight. All AI-generated recommendations are auditable and reversible.

9. Your rights

Depending on your location, you may have rights to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; receive a copy of your data in a portable format; withdraw consent at any time. To exercise any of these rights, contact us at [email protected].

10. International data transfers

EFRION operates a full compliance regime for personal data across all countries of operation — covering collection, storage, processing, and cross-border transfers. Where data is transferred internationally, we apply appropriate safeguards in accordance with applicable local law.

11. Cookies

We use privacy-first analytics (Plausible Analytics) that does not set tracking cookies and does not collect personally identifiable information. Functional cookies may be used to maintain session state. We do not use third-party advertising cookies.

12. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-product notification at least 30 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

13. Contact us

For privacy-related inquiries, data subject requests, or to report a potential data breach, contact: [email protected]. For security vulnerabilities: [email protected].