Privacy policy

Who is responsible

For your account and everything you do inside Esorii, the controller under the GDPR is:

• ·Armin Dacik
• ·Franz Gruber-Gasse 21
• ·2331 Vösendorf
• ·Austria
• ·support@esorii.com

The one distinction that matters

Esorii holds two kinds of data, and they are not the same in law.

Your data — your account, the funnels you build, your subscription. Here we are the controller and this policy applies in full.

The contacts your funnels collect — the people who fill in your questions. Here you are the controller and we act as your processor under Art. 28 GDPR: we store and process those contacts on your instructions and for no purpose of our own. You decide what you ask, how you use the answers, and how long they stay. Anyone who wants their entry removed should turn to you; if they write to us, we forward the request to you.

Your account

• ·Email address and, if you enter one, your name — needed to create an account and sign in.
• ·Password, stored only as a hash by our authentication provider. We never see it.
• ·Your plan, billing period and payment status.
• ·Legal basis: Art. 6 (1) (b) GDPR — performance of the contract you entered into with us.

What you build

• ·Funnels, questions, result types, texts, your logo and colour.
• ·The description you give us to generate a funnel from. It is sent to Anthropic for that purpose.
• ·Legal basis: Art. 6 (1) (b) GDPR.

The contacts your funnels collect

When someone completes one of your funnels, we store their email address, the answers they gave, the result type they were assigned, their score, and the time of submission. If your plan includes it, the answers are also sent to Anthropic to produce the rating and the personalised result.

We use this data for nothing else. We do not sell it, we do not use it to train models, and we do not combine it across accounts.

Page views

We count how often each funnel page is opened. The count is per funnel and carries no visitor identifier — no IP address, no cookie, no fingerprint. Two views cannot be linked to the same person.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in showing you whether your funnel is being seen at all.

The demo on the start page

The start page lets you try the funnel generator without an account. To stop the same visitor from running it a hundred times, we store a SHA-256 hash of the IP address together with a daily counter. The IP address itself is never written to the database, and the hash cannot be turned back into it.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in not paying for automated abuse of a free demo.

Cookies

Esorii sets exactly one kind of cookie: the session cookie that keeps you signed in. It is strictly necessary for the service to work and is not used to track anything.

There are no analytics cookies, no advertising pixels and no third-party trackers on this site. That is why you are not asked to accept anything.

Who processes data for us

All of them act as processors under Art. 28 GDPR, bound by a data processing agreement.

Supabase

Database and authentication. Stores your account, your funnels and your contacts.

Vercel

Hosting and delivery of the application and your funnel pages.

Anthropic

Generates funnels and rates incoming contacts. Receives the description you enter and the answers a contact gives. Anthropic does not use API data to train its models.

Resend

Sends emails — result emails to your contacts, notifications to you.

Stripe

Payments and subscriptions. Card details go to Stripe directly and never reach our servers.

Transfers outside the EU

Some of these providers process data in the United States. Those transfers rest on the EU standard contractual clauses and, where the provider is certified, on the EU-US Data Privacy Framework.

How long we keep things

• ·Account data: for as long as your account exists.
• ·Funnels and contacts: until you delete them, or until you delete your account.
• ·Deleting a funnel deletes the contacts collected through it. That cannot be undone — export them first if you still need them.
• ·Demo counters: reset daily.
• ·Invoices and payment records: kept for seven years, as Austrian tax law requires.

Your rights

You have the right to access your data, to have it corrected or deleted, to have its processing restricted, to receive it in a portable form, and to object to processing based on legitimate interests. Write to support@esorii.com and we will act on it.

You can export your contacts as CSV at any time from inside the application, and you can delete your account yourself.

If you believe we are handling your data wrongly, you can complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at).