Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Erold (erold.dev) is a product operated by Yet Another Artificial Intelligence Company (SARL-S), trading as Yet Technologies.

2. Data We Collect

We collect the following categories of personal data:

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Profile Information: Optional profile details you choose to provide
• Communication Data: Messages, feedback, and support requests you send us
• Payment Information: Billing details processed securely through our payment providers

2.2 Information Collected Automatically

• Usage Data: How you interact with our services, features used, and actions taken
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, and referring URLs
• Cookies and Similar Technologies: See our Cookie Policy for details

2.3 Project Data

• Project Information: Tasks, milestones, documentation, and other content you create
• Integration Data: Data from connected services (GitHub, etc.) with your authorization

3. How We Use Your Data

We process your personal data for the following purposes:

• Service Delivery: To provide, maintain, and improve Erold services
• Account Management: To create and manage your account
• Communication: To send service updates, security alerts, and support messages
• Analytics: To understand usage patterns and improve our services
• Security: To detect, prevent, and address fraud and security issues
• Legal Compliance: To comply with applicable laws and regulations

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contract Performance (Art. 6(1)(b)): Processing necessary to provide our services to you
• Legitimate Interests (Art. 6(1)(f)): For analytics, security, and service improvement
• Consent (Art. 6(1)(a)): For marketing communications and optional cookies
• Legal Obligation (Art. 6(1)(c)): To comply with legal requirements

5. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records for 10 years)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

6. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Right to Restriction (Art. 18): Limit how we process your data
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise your rights, contact us at privacy@yet.lu. We will respond within 30 days.

7. Data Sharing and Third Parties

We may share your data with:

• Service Providers: Hosting, analytics, and payment processing partners who assist in providing our services
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We require all third parties to respect the security of your data and process it in accordance with applicable law. We do not sell your personal data.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• End-to-end encryption for data in transit
• Encryption at rest for stored data
• Regular security audits and penetration testing
• Access controls and authentication measures
• Employee training on data protection

10. Cookies

We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

11. Children's Privacy

Erold is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our services. The "Last updated" date at the top indicates when changes were made.

13. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with a supervisory authority. In Luxembourg, this is:

14. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@yet.lu
• Phone: +352 621 436 580
• Address: 15 Avenue Dr Klein, 5630 Mondorf-les-Bains, Luxembourg

We aim to respond to all inquiries within 48 hours.