Privacy Policy

Effective date: 9 October 2026 · Last updated: 9 October 2026

1. Who we are

"Eshtrel", "we", "us" and "our" mean the team that builds and operates the Eshtrel website and the Eshtrel desktop app. For this website and the waitlist, we decide why and how your information is used, which makes us the data controller under laws such as the EU and UK General Data Protection Regulation (GDPR).

You can contact us about privacy at privacy@eshtrel.com.

2. What this policy covers

This policy covers the website at eshtrel.com (including its pages and the waitlist form) and the Eshtrel desktop app while it is in preview. It does not cover websites or services run by others, such as the AI providers you choose to connect. Those services have their own privacy policies.

3. Information we collect

3.1 Information you give us

• Your email address, when you join the waitlist.
• Which form you used (for example "hero" or "footer"), so we know which part of the page works.
• Anything you write to us, if you email us. We keep it only as long as we need to answer and follow up.

3.2 Information collected automatically

• Technical data from our service providers. When you visit the site or submit the form, Cloudflare (which hosts the site) and Formspree (which receives the form) process technical information such as your IP address, browser type, the time of the request and the page requested. They use it to deliver the service, keep it secure and prevent abuse.
• Small items stored in your own browser. This site saves a few values in your browser's local storage: your light or dark mode choice, a count of recent form submissions (to limit repeated sign-ups), and a one-way fingerprint (a SHA-256 hash) of the email addresses already joined from this browser, so the same email is not added twice. These values stay on your device. They are not sent to us, and you can delete them at any time by clearing your browser's site data.

3.3 What we do not collect

We do not use analytics tools, advertising pixels, social media trackers or fingerprinting scripts on this website. We do not ask for your name, phone number, location or payment details on the waitlist.

4. How we use your information and why we are allowed to

• To manage the waitlist and tell you when access opens. Our legal basis is your consent, which you give when you submit the form. You can withdraw it at any time.
• To send a small number of launch updates closely related to Eshtrel, such as the opening date or early access invitations. Same basis: your consent.
• To keep the site and the form secure and to stop spam and abuse. Our legal basis is our legitimate interest in running a safe service.
• To meet legal obligations, for example if we are required by law to keep or disclose certain records.

We do not use your information for automated decisions that have legal or similarly significant effects on you, and we do not build advertising profiles.

5. Who we share it with

We share information only with service providers that help us run the website and the waitlist, and only for that purpose:

• Formspree, Inc. receives and stores waitlist submissions on our behalf. Formspree is based in the United States. See Formspree's privacy policy.
• Cloudflare, Inc. hosts the website and protects it from attacks. See Cloudflare's privacy policy.
• Our email provider, when we send you waitlist emails or answer your messages.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case this policy would continue to protect your information. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

6. International transfers

Our service providers may process your information in the United States and other countries whose data protection laws may differ from those where you live. Where the law requires it, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism offered by the provider.

7. How long we keep it

• Waitlist emails: until Eshtrel opens to you and for up to 24 months after the public launch, or until you ask us to remove you, whichever comes first.
• Emails you send us: for as long as needed to answer you, and then up to 12 months.
• Technical logs held by Cloudflare and Formspree: according to their own retention periods.
• Values in your browser: until you clear your browser's site data.

8. Your rights and choices

Depending on where you live, you may have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct it;
• ask us to delete it;
• withdraw your consent at any time (this does not affect anything we did before you withdrew it);
• object to, or ask us to restrict, certain uses;
• receive your information in a portable format;
• complain to your local data protection authority.

To use any of these rights, write to privacy@eshtrel.com from the email address you joined with, or reply to any email we send you. We may need to confirm that the request comes from you. We aim to answer within 30 days. We will not treat you differently for using your rights.

Residents of California and other US states with privacy laws have similar rights to know, delete and correct their information, and the right not to have it sold or shared. We do not sell or share personal information as those laws define it.

9. How we protect it

The website is served only over HTTPS with strict security headers, including a content security policy that blocks third-party scripts. The waitlist form sends data directly to Formspree over an encrypted connection. We limit who can access the waitlist to the people who need it to run Eshtrel. No method of transmission or storage is completely secure, so we cannot promise absolute security, but we will tell you and the relevant authorities about a breach where the law requires it.

10. The Eshtrel desktop app

• Your data stays on your computer. Company Brain, memory, chats and documents are stored locally on your device. You can see, edit and erase what Eshtrel remembers.
• Your keys. If you add an API key for an AI provider, it is encrypted on your device using your operating system's secure storage.
• AI providers. When you ask Eshtrel something, the relevant text and context are sent directly from your computer to the AI provider you chose (for example Anthropic, OpenAI, Google, xAI, DeepSeek, Mistral or OpenRouter) so it can produce an answer. That provider handles the data under its own terms and privacy policy. If you use a local model, the text stays on your computer.
• Approvals. Commands, file changes and web access ask for your permission before they run.
• Account and updates. If a future version adds accounts, sync, payments or crash reporting, we will update this policy and tell you before it applies to you.

11. Children

Eshtrel is a tool for running a business and is not directed to children. We do not knowingly collect personal information from children under 13, or under 16 in the European Economic Area and the United Kingdom. If you believe a child has joined the waitlist, contact us and we will delete the information.

12. Changes to this policy

We may update this policy as Eshtrel grows. When we do, we will change the "Last updated" date above. If a change is significant, we will tell people on the waitlist by email before it takes effect.

13. Contact

Questions or requests about privacy: privacy@eshtrel.com.

Back to Eshtrel