Privacy Policy
1. Who we are
EcoAccess AI is the data controller for the personal data described in this policy.
Contact: info@ecoaccessai.com
2. What we collect and why
| Data | Why we collect it | Legal basis |
|---|---|---|
| Your email address | To send you one personal invite when EcoAccess AI opens for early access | Your consent — GDPR Article 6(1)(a) |
| Consent timestamp and the exact text you agreed to | To keep a record that consent was given freely and explicitly, as required by GDPR | Legal obligation — GDPR Article 5(2) |
| A one-way cryptographic hash of your IP address | Security only: to prevent automated abuse of the sign-up form. The hash cannot be reversed to identify you. | Legitimate interest — GDPR Article 6(1)(f) |
We collect nothing else. No name, no phone number, no address, no browsing behaviour.
3. What we do with your email
We use your email address for one purpose: to send you a personal invite when we open early access. We will not send newsletters, promotions, or partner offers without first asking for separate, specific consent.
4. How consent works
You gave consent by ticking the checkbox on our sign-up form. The checkbox was not pre-ticked. The consent text was shown in full before you submitted the form.
You can withdraw consent at any time by emailing info@ecoaccessai.com with the subject line "Withdraw consent". We will delete your email address within 5 working days. Withdrawal does not affect anything we processed before that point.
5. How long we keep your data
We keep your email address until one of these happens — whichever comes first:
- You withdraw consent
- We have sent you the launch invite and 30 days have passed with no further action
- 12 months from the date you signed up, if the platform has not launched by then
The consent record (timestamp and text) is kept for 3 years after deletion to demonstrate GDPR compliance.
6. Who can access your data
Only authorised members of the EcoAccess AI team can access the invite list. We use a password-protected admin panel to manage it.
We use an external email provider (SMTP) to send notifications when you sign up and to send your invite. That provider acts as a data processor under GDPR Article 28 and handles your email address only on our instructions. We do not share your data with anyone else.
7. Where your data is stored
Your data is stored on a server within our control. We aim to keep all data within the European Economic Area. If any processor requires a transfer outside the EEA, we ensure that transfer is covered by an adequacy decision or standard contractual clauses.
8. Your rights
Under GDPR you have the right to:
- Know what data we hold about you (right of access, Article 15)
- Correct inaccurate data (right to rectification, Article 16)
- Have your data deleted (right to erasure, Article 17)
- Receive your data in a portable format (right to portability, Article 20)
- Restrict or object to processing (Articles 18 and 21)
- Withdraw consent at any time without penalty
To exercise any of these rights, email info@ecoaccessai.com. We will respond within one calendar month.
9. Complaints
If you are not satisfied with how we handle your data, you have the right to complain to the Data Protection Commission (Ireland):
Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
www.dataprotection.ie
We would appreciate the chance to resolve any concern directly before you contact the DPC.
10. Changes to this policy
If we change how we handle your data, we will update this page and notify everyone on the invite list by email before the change takes effect.