Privacy Policy
Version 1.0 · effective 8 October 2026 · applies to elchi.ai and to requests sent to [email protected]
Elchi is an AI market-entry department: teams of AI agents prepare market studies, positioning, decision-maker maps and outreach drafts for B2B companies entering a new country, and a person checks and signs every deliverable. To do that we need a small amount of personal data from the people who write to us. This page explains what we collect, why, where it goes and what you can ask us to do with it. We wrote it in plain words on purpose; if anything is unclear, write to [email protected].
1. Who is responsible
Elchi is operated by its founders, Diana Boronina (CEO) and Alina Markushina (COO), who act jointly as the controller of the data described here. A company is being incorporated; until then the founders answer personally for this policy. Contact for all data matters: [email protected].
2. What we collect and why
| When | What | Why | Legal basis |
|---|---|---|---|
| You fill in the request form | First and last name, work email, company name, company size, the country you want to enter, whether you want a call | To answer you, scope the Entry Brief, send a proposal and a payment link | Your consent (the checkbox under the form) and steps you ask us to take before a contract |
| You email us or write in Telegram | Your address or handle, the content of the message, attachments you send | To reply and keep the thread of our conversation | Steps you ask us to take before a contract; our legitimate interest in answering mail |
| You become a client | Contract details, invoices, the brief you give us about your product and target market | To deliver the work, invoice and keep accounting records | Contract; legal obligations (accounting) |
| You visit the site | Technical logs of our hosting provider (IP address, browser type, time of request) | Security and keeping the site running | Legitimate interest of the hosting provider and ours |
We do not run advertising trackers, analytics pixels or profiling on elchi.ai. We do not buy data about you. The decision-maker maps we build for clients contain public professional roles of third parties and are covered by section 7.
3. Where your data goes
Elchi is a small team and we use a few well-known services to run the site and the mailbox. They process data on our behalf and under their own security terms:
| Service | What it does | Where |
|---|---|---|
| Tally (Tally.so) | Hosts the request form and stores the submissions | European Union (Belgium) |
| Cloudflare | Hosts elchi.ai and routes mail to [email protected] | Global network; EU and US entities |
| Google (Gmail / Workspace) | The founders' mailbox that receives form notifications and your emails | EU and US data centres |
| Telegram | If you choose to write to us there | Per Telegram's own policy |
| AI model providers (Anthropic, OpenAI, others) | Our agents use language models to prepare studies. Your name and contact details are not needed for that and are not sent to models; a client's product brief may be, under our contract with the client | EU and US |
We do not sell personal data and we do not share it with anyone else, except when the law requires it.
4. International transfers
You may write to us from Kazakhstan, the Gulf, Europe or elsewhere, and the services above run in the EU and the US. Where a transfer leaves the country you are in, we rely on the standard safeguards those providers offer (for EU data, the European Commission's standard contractual clauses). If you need a copy of the safeguards that apply to you, ask us.
5. How long we keep it
- Form submissions and emails that do not lead to a contract: up to 24 months after the last message, then deleted.
- Client records: for the duration of the contract and as long as accounting and tax law in the country of our incorporation requires afterwards.
- Hosting logs: as set by Cloudflare, normally days, not months.
If you withdraw consent, we delete the request-form data earlier (section 6).
6. Your rights
Wherever you are, you can ask us to:
- tell you what data about you we hold and give you a copy;
- correct it;
- delete it, where we have no legal duty to keep it;
- stop processing it or limit how we use it;
- withdraw consent you gave through the form, with effect for the future;
- receive the data you gave us in a machine-readable file.
Write to [email protected] from the address you used with us; we answer within 30 days. If you are in the EU/EEA or the UK you may also complain to your local data-protection authority; in Kazakhstan, to the authorised body for personal data protection; in the UAE, to the UAE Data Office.
7. Data in the studies we deliver
Our decision-maker maps list people in their professional roles (for example, "Head of Sales at a named company") taken from public sources such as company websites and professional networks, with the date we read them. We deliver them only to the client who ordered the study, for the purpose of a B2B introduction. We do not publish them, do not resell them and do not send automated messages to the people listed: every letter is approved and sent by a person. If you appear in such a map and want to be removed from future work, write to us and we will add you to our do-not-contact list.
8. Cookies
elchi.ai sets no tracking cookies of its own. One item is stored in your browser to remember your cookie choice, and the Tally form sets its own technical cookies once you load it. Details and how to change your choice: Cookie notice.
9. Security
The site is served over HTTPS. Access to the mailbox and the form workspace is limited to the two founders and protected by two-factor authentication. We keep as little data as the work needs.
10. Children
Our services are for businesses. We do not knowingly collect data from anyone under 18.
11. Changes
When we change this policy we update the version and the date at the top. For material changes we will tell people who have an open request or contract with us by email.
Elchi · AI market-entry department · Astana · Almaty · Dubai · [email protected]