Privacy Policy
Last updated: 17 October 2026
Who we are
erganifree.com (the “Service”) is operated by IELKO LLC, 312 W 2nd St, Unit #A1590, Casper, WY 82601, USA (“we”, “us”). Contact for any privacy matter: info@erganifree.com.
Our role
For the personal data of your employees (names, tax numbers (AFM), work schedules, clock-in and clock-out times) you, the employer, are the data controller and we act as your processor under Art. 28 GDPR. For account data (your email address, passkeys, sign-in and security logs, billing details) we are the controller.
What we process
Account: email address, passkey public keys, session records (IP address, browser type, timestamps). Company: tax number (AFM), name, branches, and the ERGANI II credentials you provide, stored encrypted and used only to talk to ERGANI on your behalf. Employees: name, AFM, schedules, PIN hashes, clock-in/out records and their ERGANI submission protocols. Billing: handled by Stripe; we receive only customer and subscription identifiers, never card numbers.
Why (legal basis)
To provide the Service you asked for (contract, Art. 6(1)(b)); to keep it secure and prevent abuse (legitimate interest, Art. 6(1)(f)); to meet legal obligations such as tax and employment record keeping (Art. 6(1)(c)).
Where it is stored and who else sees it
Everything runs on Cloudflare (Workers, D1 database, email delivery). Payments are processed by Stripe. We do not sell data and do not use advertising or tracking. Data is sent to the Greek Ministry of Labour (ERGANI) only when you or your employees submit it.
Retention
Clock-in records and schedules are kept for 5 years, in line with employment record rules, and can be exported as CSV at any time on every plan, including the free one. Records of former employees are anonymised after 5 years. You can export, anonymise or delete employee data and delete your company at any time. Security logs are kept for a limited time. Backups roll off automatically.
Security
Credentials are encrypted at rest with rotating keys, sign-in uses passkeys or one-time email links, sensitive actions require re-authentication, and access is limited to what is necessary.
Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing. Email info@erganifree.com. If you are an employee, please first contact your employer, who is the controller of your data. You may complain to the Hellenic Data Protection Authority (dpa.gr).
Cookies
We use one strictly necessary session cookie and your browser’s local storage for language and theme. No analytics or advertising cookies. See the Cookie Notice.
Changes
We will update this page when practices change and show the date below.