Privacy

ellul.ai is an AI automation studio operated from the United Kingdom. For anything on this page, contact team@ellul.ai. We answer data questions directly — there is no form, no queue.

This site sets no cookies, uses no localStorage, and runs no third-party analytics or advertising scripts. When a page loads, our own edge service records the page, referrer, country and device class. Visits within a single day are grouped using a salted hash that rotates every day: your IP address is used to compute it and is never stored, and the hash cannot be linked across days, so no profile of you accumulates. We do this under legitimate interests (understanding whether the site works); a legitimate-interests assessment is on file. Raw page events are kept for 13 months, then deleted; only daily aggregate counts are kept longer.

When you send the enquiry form we keep what you wrote, your name and email, the company and phone number if you added them, the page you came from and any campaign tags in the link, your country and your browser type. We use them to reply with a scope and a quote, and to see which pages bring enquiries. Enquiries are stored on Cloudflare and deleted after two years unless they became an engagement; ask us and we will delete yours sooner. Before the form is sent it runs Cloudflare Turnstile, a check that the sender is a person, provided by Cloudflare under its own privacy terms and not used for analytics or advertising. Your IP address is used for that check and, for up to two hours, to limit repeated submissions. It is not kept with your enquiry. Please don't include sensitive personal information: it isn't needed for a quote.

Details you send us on purpose — a form, an email, a consult booking — are used to respond and to run the engagement you're asking about, and are kept while the conversation or engagement is live. We track whether emails we send you are opened and whether links are clicked, so we know what's working.

We sometimes contact people at companies about their work role, using business contact details from public sources and business data providers, under legitimate interests and the UK's corporate-subscriber rules. Every message has a working one-click unsubscribe; opting out puts you on a suppression list we never contact again. Ask and we'll tell you what we hold about you and where it came from.

For businesses we build and operate automations for, we act as a processor of their data, under a written data processing agreement. Every client runs in dedicated, isolated infrastructure — separate accounts, separate storage, separate credentials — never a shared platform, and regulated clients can run entirely inside their own accounts under their own controls. Client data never trains models and is never mixed between clients.

Our infrastructure runs on Cloudflare (hosting, storage, email delivery). Depending on the service, we also use Anthropic (AI processing), Google (email), Stripe (payments) and phone/verification providers — each under their own data processing terms, with UK/EU transfer safeguards (adequacy, SCCs or the UK Addendum) where they process data outside the UK. A current sub-processor list is available on request, and clients are notified before it changes.

You can ask for a copy of what we hold about you, ask us to correct or delete it, or object to our use of it — email team@ellul.ai and we'll respond within a month. If you're unhappy with our answer, you can complain to the ICO at ico.org.uk.