Privacy

Who we are

Ethon is being incorporated. Until then, the data controllers are its founders, Lapo Lazzati and Gaspard Voiseau.

Contact for anything in this notice: [email protected].

For visitors in Brazil, our data protection contact (encarregado) is Lapo Lazzati, at [email protected].

What we collect in the map flow

• The website address you enter, the target market, your company stage and, if you add it, the reason you are expanding.
• Public information about your company that our tools read from that website and from public sources on the web.
• If you ask for the full map: your name, work email and role, and the consents you give.
• How you found us: the first page you opened on ethon.io and the kind of site that sent you there, for example a search engine or an AI assistant. Your browser keeps it only for that visit, and we save it only with a map request.
• Your IP address, used only to prevent abuse and to apply usage limits. We store it as a one-way hash and delete it after 24 hours.
• If you unlock the calculator's market data: your work email and, if you add them, your name and company.

Why we collect it, and on what basis

• To produce your map: your consent, given when you submit the form and when you ask for the full map.
• To follow up about working together: a separate, optional consent. You can withdraw it at any time.
• To keep the service secure and prevent abuse: our legitimate interest.

How long we keep it

• Maps that nobody asks to receive: 7 days.
• Requests for a full map, the map itself and the related contact details: 6 months after our last contact with you.
• A link to your private map stops working after 30 days.
• Backups of our database: 30 days, after which they are overwritten.

Who processes it for us

• Cloudflare — network delivery, bot protection (Turnstile) and cookieless analytics.
• Hetzner — hosting of our servers.
• Attio — our customer relationship records.
• Multica — our internal task management, used to review each map by hand.
• Google Workspace — our email.
• Exa and Firecrawl — reading public web pages about your company.
• Levanto Sage and our AI model provider — classifying and summarising public information about your company.
• Some of these providers process data outside the EU/EEA, mainly in the United States. In those cases we rely on the provider's certification under the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

Cookies and analytics

We use cookieless analytics. When you use the map tool, we set one strictly necessary cookie that links your browser to your map, so that only you can ask for the full version. It expires after 7 days.

Your rights

You can ask to access, correct, export or delete your data, withdraw consent, or object to processing by writing to [email protected]. We answer within 15 days. You can also complain to your data protection authority.

In the EU you can contact the authority of your country, or the Italian Garante per la protezione dei dati personali (garanteprivacy.it). In Brazil: the Autoridade Nacional de Proteção de Dados, ANPD (gov.br/anpd).