Legal
Privacy Policy
Last updated: 3 May 2026
This page explains what personal data Rhooa Labs ("we", "us") collects when you use rhooalabs.com, why we collect it, and the choices you have. We aim to keep this short, plain, and accurate.
1. Who we are
Rhooa Labs is an AI solutions studio based in Greece. We are the data controller for personal data collected through this website. You can reach us at admin@rhooalabs.com.
2. What we collect
• Information you give us through forms (name, email, business details, message content); for example via the AI Audit wizard, the request-a-proposal form, or the newsletter signup. • Limited technical data automatically collected by our hosting provider (IP address, browser type, request timestamps) for security and operational logs. • If you accept analytics cookies, anonymous usage data via Google Analytics 4 (pages visited, approximate location, device type, referrer).
3. Why we collect it (lawful basis)
• To respond to enquiries and deliver services you have asked for; basis: performance of a contract or steps prior to a contract. • To send you information you have subscribed to (such as the newsletter); basis: your consent, withdrawable at any time. • To understand how the website is used and improve it; basis: your consent (analytics cookies). • To keep our systems secure and detect abuse; basis: our legitimate interests.
4. Cookies & similar technologies
We use a small number of cookies. Strictly necessary cookies (e.g. your language preference) are always on because the site cannot function correctly without them. Analytics cookies (Google Analytics 4) only run if you have given consent through the cookie banner. You can change your choice at any time:
5. Sharing with third parties
We do not sell your personal data. We share limited data with service providers who help us run the site: • Hosting & infrastructure providers; to serve the site. • Supabase; our database provider, where form submissions and account data are stored. • Brevo (Sendinblue); our newsletter and transactional email provider. • Google Analytics; only when analytics consent is granted. These providers act as data processors under contract and may process data outside the EU/EEA where appropriate safeguards (such as Standard Contractual Clauses) are in place. You can review each provider's own privacy policy below:
6. How long we keep data
Form submissions and conversations are kept for as long as needed to handle your request and fulfil related contracts, then archived for a reasonable period for legal and accounting requirements. Analytics data is retained according to Google Analytics defaults (typically up to 14 months) and is not personally identifiable on our end.
7. Your rights
Under the GDPR you can ask us to: access the personal data we hold about you, correct it, delete it, restrict or object to certain processing, and receive a copy in a portable format. You can also withdraw consent at any time (this does not affect prior processing). To exercise any of these rights, email us at admin@rhooalabs.com. You also have the right to lodge a complaint with your national data protection authority; in Greece, this is the Hellenic Data Protection Authority (dpa.gr).
8. Security
We use commonly accepted technical and organisational measures (encryption in transit, restricted access, hardened hosting) to protect personal data. No system is perfectly secure, but we work to keep risks low and to respond quickly to incidents.
9. Changes to this policy
If we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, prompt you again through the cookie banner.
10. Contact
Questions about this policy or your data? Email us: