Skip to content

Privacy policy

Draft reviewed 20 October 2026. Controller and operational details remain incomplete.

Who we are

Akratos is the project name. The website operator and data controller’s identity, jurisdiction and required contact or registration details have not yet been confirmed. This draft does not establish an incorporated company.

What this policy covers

This draft describes the current informational website and enquiries sent to the email addresses published on it. Applications and site analytics are disabled. Visiting the site still involves processing technical request data.

It does not cover clinical-trial data that a client might process with the Akratos product. The product is under development, and how it handles that data is still being defined; it will be set out separately.

What we collect

This website does not currently collect applications. If applications open, the proposed form would ask for your name, work email, company, team size, and how you QC today.

If you email the general enquiries address or a founder, the recipient receives your email address, message, any attachments and the other details you choose to send. These enquiries are separate from website requests and application forms.

This website does not currently use analytics. If that changes, this policy will say which provider, what it records and on what legal basis before it is switched on.

Vercel hosts and delivers this site. Requests disclose technical information such as IP address, requested URL, time and browser headers to the hosting infrastructure. Hosting and security processing can occur even with forms and analytics disabled. The project’s configured logs, access, locations and retention remain to be confirmed.

Cookies, storage and external links

The site code does not set cookies or use local or session storage. Analytics, application forms and embedded third-party widgets are disabled; fonts are served with the site. Ordinary LinkedIn links open an external site only when followed. Email links open your configured email application; the website does not send messages on your behalf.

Hosting security may involve request inspection or browser challenges depending on Vercel configuration. This is distinct from site analytics. The deployed site’s observed behaviour and hosting configuration must be reviewed together; this draft does not promise that every request is cookie-free.

Why we use it and on what legal basis

Current purposes are delivering the website, supporting hosting security and reliability, and handling enquiries voluntarily sent by email. The controller must confirm the applicable legal basis and explain any legitimate interests relied upon.

Future application handling would have separate purposes, recipients, legal basis and retention information confirmed before collection opens.

Processors

Provider information: Google Privacy Policy and Gmail privacy information.

Website hosting: Vercel. The account holder, actual plan, contractual roles, data locations, applicable processing agreement and transfer safeguards remain unconfirmed. Vercel’s published DPA applies to Pro and Enterprise customers; its Hobby terms restrict use to noncommercial personal projects. Suitability for this site must be resolved against the actual plan.

The published enquiry addresses use Gmail, provided by Google. Google’s privacy documentation describes processing of email content and related service data. Account settings, access, contractual roles, applicable terms, processing locations and transfer safeguards for these mailboxes remain to be confirmed. No Google Workspace agreement or processor coverage is assumed.

Applications are not collected. Any future application or scheduling provider and its processing arrangements must be confirmed before use.

Retention

Retention and deletion criteria for current hosting/security records and email enquiries remain unconfirmed. Retention for future application data must be established before collection opens.

Your rights

Where GDPR applies, you may request access, rectification, erasure or restriction subject to the relevant conditions and exceptions. Objection depends on the basis and purpose of processing. Portability applies to qualifying automated processing based on consent or contract. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Where GDPR applies, you may complain to a competent supervisory authority, including in the place of your habitual residence, work or the alleged infringement. The controller’s establishment and competent authority remain unconfirmed.

Contact

A designated privacy-rights contact has not yet been confirmed. The published general enquiries and founder addresses have not been designated for this purpose. Application forms remain disabled.