Privacy Policy

This website and the Enriclio platform are operated by Enriclio. Full details are on our Imprint.

For data you submit through your account, we are the data controller. For business contact data you generate using the platform, you are the controller and we act as your processor. Contact for any data protection matter: privacy@enriclio.com.

• Account data: your name, company, email address and hashed password.
• Billing data: handled by our payment provider (merchant of record). We receive subscription status and invoices, not your full card details.
• Consent record: the date you accepted these terms, the version you accepted, your age confirmation, and whether you opted in to marketing email. We keep this because the law requires us to be able to demonstrate consent, not to profile you.
• Server logs: IP address, timestamp and requested path, written by our web server for security and abuse prevention and deleted after 30 days.
• Generated data: business and contact information the platform discovers on your behalf, stored in your workspace.

What we do not collect.We run no analytics and no session-replay tooling: we do not record your screen, your mouse movements or your keystrokes, and we do not build a behavioural profile of you. We ask for no date of birth, no phone number, no postal address and no payment card number — the card is handled entirely by our payment provider. We collect nothing that is not needed to run the account you asked for.

• to provide, secure and maintain the service;
• to process subscriptions and send service-related emails;
• to provide support and respond to your requests;
• to detect abuse and comply with legal obligations.

Our legal bases are performance of a contract, our legitimate interests in running and securing the service, and compliance with legal obligations.

We share data only with service providers that help us operate the platform — hosting, our payment merchant of record, email delivery, and AI/enrichment providers used to process lead data. These providers act under contract and only process data on our instructions. We do not sell your personal data.

Some providers may process data outside the EEA. Where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We keep account data for as long as your account is active and as needed to comply with legal obligations. You can delete generated data at any time, and we delete or anonymize account data after your account is closed, subject to legal retention periods.

Under the GDPR you have the right to access, correct, delete, restrict, and port your personal data, and to object to certain processing. To exercise these rights, email privacy@enriclio.com. You may also lodge a complaint with your local data protection authority.

We protect data with encryption in transit, hashed passwords, access controls and tenant isolation. No system is perfectly secure, but we work continuously to safeguard your information.

We set exactly one cookie: the strictly necessary session cookie that keeps you signed in. No analytics, advertising or session-recording scripts run on this site, and our typefaces are served from our own domain rather than a font CDN, so no third party sees your IP address simply because you visited. The one optional third party is the Cal.com booking calendar, which loads only after you allow it. The full list is in our Cookie Policy.

Enriclio is a paid business tool sold to companies. It is not directed at children and is not available to anyone under 18. Every account holder must confirm at signup that they are 18 or older, and we ask for no data about children at any point.

We do not knowingly collect personal data from a child. If we learn that an account was created by someone under 18, or that a child’s data has reached us in any other way, we delete it and close the account without requiring a request. If you are a parent or guardian and believe a child has given us data, write to privacy@enriclio.com and we will remove it promptly.

This is also why the minimum age is 18rather than 13 or 16: setting the floor above both the COPPA (under 13) and the GDPR Art. 8 (under 16, depending on member state) thresholds means we never have to process a child’s data or seek parental authorisation at all.

You can have everything erased. Use the data deletion request form, or email privacy@enriclio.com from your account address. We confirm within 72 hours and complete the erasure within 30 days. Invoices are kept for the period tax law requires, as GDPR Art. 17(3)(b) permits; everything else goes.

If you received outreach from one of our customers and want that record removed, the unsubscribe link in the email works immediately, and you can also write to us at the address above — we will suppress the record and pass the request to the customer who holds it.

For any privacy question, contact privacy@enriclio.com. See also our Terms of Service, Cookie Policy and data deletion page.