1. Who We Are
GBC Studios, LLC (Teloris), a Delaware limited liability company (“Teloris,” “we,” “us”), is the data controller for personal data processed through teloris.ai and the Teloris platform, unless otherwise stated. Registered office: 131 Continental Drive, Suite 305, Newark, Delaware 19713, United States. Contact: privacy@teloris.ai. Our representative in the European Union is identified in section 15.
2. What Data We Collect
Account and contact data (name, work email, phone, company name) submitted via forms such as our contact/scheduling form; usage data (log data, device/browser information, interaction data) collected automatically; on our website, visitor measurement only with your consent, as described in section 11; Customer Data processed on behalf of customers through integrations, which is governed by our written agreement with that business customer rather than by this policy.
3. Legal Basis for Processing (Article 6 GDPR)
Where the EU General Data Protection Regulation (“GDPR”) applies, we process personal data on the following bases: contract performance, where necessary to provide the Service you’ve requested; legitimate interests, for security, product improvement, and direct marketing to business contacts, balanced against your rights; consent, where required (e.g., certain cookies or marketing communications), which you may withdraw at any time; and legal obligation, where processing is required to comply with applicable law.
4. How We Use Data
To provide, maintain, and secure the Service; to respond to inquiries submitted through our contact form; to send product updates or marketing communications (with opt-out in every communication); and to analyze aggregated, de-identified usage trends to improve the product.
5. Data Sharing and Sub-processors
We do not sell personal data, and we do not share personal data for cross-context behavioral advertising. We share data with sub-processors who support hosting, infrastructure, analytics, and communications, under written contracts requiring them to protect it. Details of the sub-processors engaged are available on request at privacy@teloris.ai.
6. International Data Transfers
Teloris is based in the United States, and personal data you provide to us is processed in the United States and in the other countries where our sub-processors operate. Where the GDPR applies and personal data is transferred to a sub-processor outside the EEA, we rely on an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework, where the recipient is certified under it) or on the Standard Contractual Clauses approved by the European Commission, together with supplementary technical and organizational measures where required.
7. Data Retention
We retain personal data only as long as necessary for the purposes described above, or as required by law. Account and Customer Data are retained for the duration of the customer relationship plus 30 days post-termination for export, after which they are securely deleted, unless a longer period is required for legal, tax, or dispute-resolution purposes.
8. Your Rights under the GDPR
If the GDPR applies to the processing of your personal data, you have the right, subject to its conditions, to access the personal data we hold about you; rectify inaccurate data; request erasure (“right to be forgotten”); restrict or object to processing; receive your data in a portable format; withdraw consent at any time where processing is consent-based; and lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. To exercise these rights, contact privacy@teloris.ai or our EU representative (section 15). We will respond within the timeframes required by the GDPR (generally one month).
9. Automated Decision-Making (Article 22 GDPR)
Teloris generates recommendations and, where configured by the customer, may execute predefined automated actions. We do not use automated processing to make decisions producing legal or similarly significant effects on individuals without human involvement. Business customers configuring autonomous actions are responsible for ensuring appropriate human oversight where such decisions could affect individuals (e.g., employment, credit, or similar decisions).
10. Security
We implement technical and organizational measures appropriate to the risk, including encryption in transit and at rest, access controls, and regular security review. No system is 100% secure, and we encourage prompt reporting of any suspected vulnerability to security@teloris.ai.
11. Cookies
We use essential cookies required for the site to function. Only if you select “Accept all” on our cookie banner (or switch on Analytics under “Manage preferences”), we also measure how the site is used: the pages viewed, the country your connection comes from, the referring website, and the steps taken in our contact form, tied together by a random identifier that exists only in your browser’s session storage and is gone when you close the tab. If you do not choose, or you select “Reject non-essential,” none of this is measured and we do not count your visit in any other way. You can manage preferences via our cookie banner or browser settings. See our separate Cookie Policy for details.
12. Children’s Data
The Service is intended for business use by adults and is not directed at individuals under 18. We do not knowingly collect personal data from children under 13 or from any other minors.
13. Data Breach Notification
In the event of a personal data breach, we will notify the competent supervisory authorities and affected individuals within the timeframes required by applicable law, including, where the GDPR applies, the competent supervisory authority within 72 hours of becoming aware of a breach likely to result in a risk to your rights and freedoms, and affected individuals without undue delay where required.
14. U.S. State Privacy Rights
Depending on your state of residence, you may have rights under applicable U.S. state privacy laws to know and access the personal data we hold about you, to correct it, to delete it, to obtain a portable copy, and to opt out of the sale of personal data, targeted advertising, or certain profiling. We do not sell personal data or use it for targeted advertising. To exercise any of these rights, or to appeal a decision we have made on your request, contact privacy@teloris.ai. We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request, and an authorized agent may submit a request on your behalf with proof of authorization.
15. Representative in the European Union
Teloris is established in the United States. For processing to which the GDPR applies under its Article 3(2), Teloris has designated in writing, under Article 27 GDPR, the following representative in the European Union: TELORIS LTD, Str. Plaiului nr. 22, sat Nazna, com. Sâncraiu de Mureș, jud. Mureș, Romania, privacy@teloris.ai. Data subjects and supervisory authorities may address the representative, in addition to or instead of Teloris, on all issues related to processing.
16. Changes to This Policy
We will post updates here and, for material changes, notify registered users via email prior to the change taking effect.
17. Contact
Questions or requests regarding this policy or your personal data: privacy@teloris.ai, GBC Studios, LLC (Teloris), 131 Continental Drive, Suite 305, Newark, Delaware 19713, United States.