Privacy Policy

Last updated: December 11, 2025

1. Introduction

AILAND Group OU ("we", "us", or "our") operates the Exonli website (exonli.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Company: AILAND Group OU

Address: Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia

Email: info@exonli.com

3. Information We Collect

3.1 Information You Provide

When you join our waitlist, we collect your email address. This is provided voluntarily and with your explicit consent.

3.2 Automatically Collected Information

We use Google Analytics to collect anonymous usage data, including:

  • Pages visited and time spent on pages
  • Referring website addresses
  • Browser type and device information
  • Approximate geographic location (country/city level)
  • Anonymous user interactions

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on:

  • Consent: For waitlist registration and analytics cookies
  • Legitimate Interest: For website functionality and security

5. How We Use Your Information

We use the collected information to:

  • Notify you about product launches and updates
  • Analyze website traffic and improve user experience
  • Respond to your inquiries
  • Prevent fraud and ensure website security

6. Cookies

We use the following types of cookies:

Essential Cookies

Required for basic website functionality. These cannot be disabled.

Analytics Cookies (Google Analytics)

Help us understand how visitors interact with our website. These cookies collect anonymous data and are only set with your consent. Google Analytics data is processed in accordance with Google's Privacy Policy.

You can manage your cookie preferences at any time through the cookie banner on our website or by adjusting your browser settings.

7. Data Sharing

We do not sell your personal data. We may share data with:

  • Google Analytics: For website analytics (anonymous data)
  • Service Providers: Who assist in operating our website
  • Legal Authorities: When required by law

8. Data Retention

We retain your email address until you unsubscribe from our waitlist or request deletion. Analytics data is retained for 14 months in accordance with Google Analytics default settings.

9. Your Rights (GDPR)

Under the GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing activities
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at info@exonli.com

10. International Data Transfers

Google Analytics may transfer data to servers in the United States. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: info@exonli.com

Address: Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.