Privacy Notice
Eyadera LLC · for eyadera.com, our emails and our services · Version 1.5 · 26 Oct 2026
This notice explains what personal data Eyadera LLC handles, why, for how long, and your choices.
1. Who we are
Eyadera LLC, a Wyoming limited liability company, 1021 E Lincolnway Suite #8477, Cheyenne, WY 82001, USA. Contact for privacy questions: info@eyadera.com.
Eyadera LLC is the controller of the personal data described in sections 2 to 5. When we process personal data inside files a client gives us for a paid engagement, we act for the client as its processor / service provider under our Data Processing Addendum (/legal/dpa); the client's own privacy notice then applies to those people.
Our Managing Member works from Spain. We therefore apply the EU General Data Protection Regulation (GDPR) and Spain's data-protection law to the personal data we handle as controller, and we offer the rights in section 7 to everyone, wherever they live.
2. What we collect, why, and the legal basis
| Who you are | What we collect | Why | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|---|
| Website visitor | Standard technical logs kept by our hosting provider (Vercel): IP address, browser and device type, pages requested, time | To deliver and secure the Site | Legitimate interest in running a secure website | For the period set by Vercel's standard log retention; we do not copy or export these logs |
| Questionnaire (at /questionnaire) | Your work email (to send you a one-time sign-in link); your answers about your company and its operations; any files you choose to upload; a sign-in session cookie (section 9) | To decide with you whether our Diagnostic suits your business and to prepare an offer; and, after removing your name, contact details and anything that identifies you or your company, to improve our methods (section 3a) | Steps you ask for before a contract; legitimate interest in answering a business enquiry | Up to 24 months after our last exchange (files you upload: 90 days), unless you become a client (then the client-contact row applies). You can ask us to delete it sooner at any time |
| Business contact we email (owners and managers of US manufacturers) | Name, job title, work email, company, company website and public information about the company | To send a short, relevant business email about our services | Legitimate interest in offering a relevant service to a business contact in their professional role | Until you ask us to stop, or 24 months after our last exchange if you never reply; after an opt-out, we keep only your email address and the date, on a do-not-contact list, so we never email you again |
| Someone who writes to us | Your email and what you write | To reply and keep a record | Legitimate interest; or steps you asked for before a contract | Up to 24 months after the last exchange |
| Client contact (you or your company buys from us) | Name, title, work email, phone; contract and project correspondence; intake answers; meeting notes; e-signature records | To deliver the service, sign contracts, invoice and keep business records | Contract; legitimate interest; legal obligation (tax records) | For the engagement, then as long as the law requires for contracts and tax records. Files and answers a client gives us for a paid engagement are deleted within 90 days after the report is delivered (see DPA §8.1), or sooner as the DPA and the client's Order Form provide |
| Payer | Name, email, billing details. Card details go directly to Stripe; we never see full card numbers. If you pay by bank transfer, we see the payer name and the bank details shown on the transfer | To take payment and issue receipts | Contract; legal obligation | As long as tax law requires |
| Referral partner | Name, email, company, bank details for the fee, US tax form | To pay referral fees and meet tax reporting | Contract; legal obligation | As long as tax law requires |
Where business-contact data comes from. Business contact details come from a B2B contact database (Apollo.io), public company websites, public announcements and professional profiles. We do not buy consumer lists.
3. AI tools
- Clients: our Diagnostic is AI-powered: AI use on client files is a condition of signing the order form, only on accounts we own and with providers whose terms bar training on client data, and a person reviews everything. See our AI Use Disclosure (/ai).
- We use only AI service providers engaged under business/API terms that prohibit training on Client data, listed on Eyadera's Approved AI Provider List (available on request, updated with notice). We do not use your data, or our clients' data, to train any AI model, and we never give it to anyone else to train theirs.
- We do not make decisions about you that have legal or similarly significant effects by automated means only.
3a. What we learn
We get better at our work by learning from what we see. Before anything is kept as a lesson, we remove names, contact details, interview quotes and anything else that identifies a person or a company. What remains contains no personal data. We commit publicly not to try to re-identify anyone from it, and we require the same of anyone we share it with. We store these lessons separately from your data and may use them to develop our own tools and models, including to train them in future, on accounts we own; we never give them to anyone else to train theirs. Removing the identifying detail is processing of your personal data, which we do on the basis of our legitimate interest in improving our services; you can object to it at any time (section 7). This does not change how long we keep your data: uploaded files are still deleted after 90 days and other data follows the periods in section 2. Your right to ask us to delete your personal data (section 7) is not affected.
4. Emails from us
We may email business contacts about our services. Every email shows who we are, our postal address and an easy way to opt out (reply "no", or write to info@eyadera.com). We act on opt-outs promptly and always within 10 business days.
5. Who we share data with
We share personal data only with service providers that help us run the business, under contracts that limit their use of it:
| Provider | Purpose |
|---|---|
| Google (Workspace) | Email, documents and file storage |
| HubSpot | Customer relationship management (contacts, deals); our meeting-booking page |
| Stripe | Payments |
| Vercel | Website hosting, including the questionnaire (US region) |
| Supabase | Database and file storage for the questionnaire and our Diagnostic intake application (US region) |
| Resend | Sending the one-time sign-in emails for the questionnaire |
| Apollo.io | B2B contact data and enrichment |
| Smartlead | Sending outreach emails and managing replies and opt-outs |
| Zoho (Zoho Sign) | Electronic signature of contracts |
| AI service providers on our Approved AI Provider List (available on request) | AI model processing (client work, where AI use is a condition of signing the Order Form, with no opt-out) |
We do not sell personal data, we do not "share" it for cross-context behavioural advertising, and we do not use advertising cookies or pixels. We disclose data when the law requires it, to protect our rights, or in a sale or merger of our business (the buyer would be bound by this notice).
6. International transfers
Our Managing Member works from Spain and our main service providers are US companies. When personal data moves from the EU to the US, we use providers that offer a transfer mechanism recognized under the GDPR, such as certification under the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses in their data-processing terms.
7. Your rights
You can ask to access, correct, delete or receive a copy of your personal data, to restrict our use of it, or to object to our use of it (including any marketing, at any time, at no cost). Where we rely on consent, you can withdraw it at any time. Write to info@eyadera.com. We reply within one month. You can also complain to a data-protection authority; in Spain this is the Agencia Española de Protección de Datos (www.aepd.es).
US residents: we honour the same requests. We do not sell or share personal information as those terms are defined in US state privacy laws.
8. Security
We use established cloud providers that encrypt data in transit and at rest, limit access to the people who need it, and use multi-factor authentication on accounts that hold personal data. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
9. Cookies and similar technologies
The Site does not use cookies or similar technologies for analytics, advertising or tracking, and our fonts are served from our own servers. We use only the following, which are strictly necessary for services you ask for, so they do not require consent:
| Name | Type | Purpose | Duration |
|---|---|---|---|
eq_session |
First-party cookie (HttpOnly, Secure) | Keeps you signed in to your questionnaire after you use your sign-in link | Until you close your browser |
eyadera_intake_<id> |
Your browser's local storage | Saves the answers you type into an intake form so you don't lose them | Until you clear it or submit the form |
Our booking link (eyadera.com/book) opens our scheduling page, which we run on our own HubSpot account, with HubSpot acting as our service provider. The cookies set on that page are Eyadera's cookies, and we are responsible for them. Strictly necessary security cookies are always set so the page works; analytics cookies are set only if you accept them in the banner shown there. Payments are handled on Stripe's own site under Stripe's privacy policy. If we ever add non-essential cookies or similar technologies, we will update this notice first and ask for your consent where the law requires it.
10. Changes
We will post any update here with a new version number and date. If a change materially affects current clients, we will tell them by email.
Version 1.5 · 26 Oct 2026