legal

GDPR notice

Last updated 24 June 2026

Who we are

awelume is the data controller for the personal data described here. For any data question or to exercise a right, email hello@awelume.com.

The personal data we process

  • Contact details you give us (work email, optionally your name and what you sell).
  • Your brand URL and the competitor you name on the audit form.
  • A one-way hash of your IP address for abuse prevention (never the raw IP).
  • Privacy-respecting usage analytics.

Our research draws on public competitor ads and public customer language; quotes are stripped of personal identifiers before they enter our systems.

Lawful bases

  • Consent — when you submit the audit form to receive your angle audit.
  • Contract — to deliver a paid engagement you have entered into.
  • Legitimate interests — to secure the site, prevent abuse, and improve our service, balanced against your rights.
  • Legal obligation — to meet tax and accounting requirements.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, and to object to processing, as well as the right to withdraw consent at any time and to lodge a complaint with your supervisory authority. To exercise any of these, email us and we will respond within one month.

Processors and international transfers

We use a small set of processors — hosting (Vercel), database (Supabase), and email delivery — each under a data-processing agreement. Where data is transferred outside the EEA, it is covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Retention

We keep audit-request data only as long as needed to respond and, where you engage us, for the life of the engagement plus the legally required period. After that it is deleted or anonymized.

Contact

Data requests and questions: hello@awelume.com.