Privacy policy

Who is responsible

This policy is a draft. Ekho Labs has not yet approved it, and it takes effect only when this notice is removed.

Ekho Labs Inc. runs Horizon at horizon.ekholabs.com and decides how the personal data described here is used. Questions about this policy go to contact@ekholabs.com.

What Horizon collects

Cloudflare delivers every Horizon page and receives each request with its IP address and browser details. Cloudflare uses them to deliver the page and to block abusive traffic. Horizon's own request metrics record the route, the response status, the duration and the Cloudflare location, without IP addresses or other identifiers.

When page analytics are switched on, they run on Cloudflare Web Analytics, which counts page views without cookies. It records the page address, the referring page, the browser, the country and page-load timings, and Ekho Labs sees them only as totals.

WorkOS runs sign-in for Pro accounts and stores the email address, the name if one is given and the sign-in method. Horizon's account database on Cloudflare keeps the email address, the WorkOS account identifier and the plan. Stripe collects payment details on its own pages. Horizon keeps the Stripe customer and subscription identifiers and the subscription status, and never receives a full card number.

Emails to Ekho Labs, such as a correction to a signal, keep the sender's address and the message.

Why Ekho Labs uses this data

Ekho Labs processes account and payment data to provide the Pro subscription a customer asked for. It processes request data and page analytics in its legitimate interest in running Horizon and keeping it secure. It keeps billing records where tax law requires them.

Ekho Labs does not sell personal data, does not use it for advertising and does not share it beyond the processors named on this page.

How long data is kept

Horizon keeps account data while the account exists and deletes it when the account is closed. Billing records stay for the period tax law sets. Cloudflare, WorkOS and Stripe keep their own logs under their published retention periods.

Cloudflare, WorkOS and Stripe process data in the United States and in other countries where they operate.

Your rights

Anyone can ask Ekho Labs for a copy of their personal data, for a correction, for deletion or for a stop to processing based on legitimate interest. Requests go to contact@ekholabs.com from the address on the account. Ekho Labs answers within one month.

Anyone who thinks Ekho Labs mishandled their data can also complain to their data protection authority. Horizon is not directed at children under 16, and Ekho Labs does not knowingly open accounts for them.