Legal
Privacy Policy
Last updated 28 October 2026
This policy explains what ExoLP LLC ("ExoLP", "we", "us") collects through this website, exolp.com, why we collect it, who handles it, how long we keep it, and the choices and rights you have. It covers this website only. Pack-Star and Constellar, our software, are covered by the agreements we make with our customers.
1. Who we are
ExoLP LLC is responsible for the personal information described here: its "controller" under the GDPR, and the "business" under California law.
- Postal address: [POSTAL ADDRESS]
- Email: [CONTACT EMAIL]
2. What we collect
When you request a demo
The form at Request a demo asks for:
| Field | Required? | Why we ask |
|---|---|---|
| Name | Yes | To know who we're talking to. |
| Yes | To reply to you. | |
| Company | No | To prepare a demo and pricing that fit your business. |
| Phone | No | To call you, if you'd rather talk. |
| What you'd like to see | No | To plan the demo around your work. |
We add the date and time we received your request. Please don't include sensitive information, such as health or financial details, in the form: we don't need it.
When you visit
Like any website, ours receives what your browser sends with each request: your IP address, the page you asked for, the time, and your browser's description of itself (its user agent). Google Cloud, which hosts the site, records these in request logs, and our security service uses your IP address to block abuse, such as a flood of requests from one address.
What we don't collect
The site has no accounts, takes no payments, and doesn't ask for your location. It collects no sensitive personal information.
3. Why we use it, and our legal bases
- To answer your demo request: to contact you, arrange and give the demo, and send pricing. Under the GDPR, we do this to take steps you've asked for before a possible contract (Article 6(1)(b)), and in our legitimate interest in answering business enquiries (Article 6(1)(f)).
- To keep the site working and secure: request logs and rate limiting. Under the GDPR, this is our legitimate interest in running a secure website (Article 6(1)(f)).
We need your name and email to answer you; without them we can't reply. We only contact you about your request, and we won't add you to a mailing list unless you ask us to. We don't make automated decisions about you or build a profile of you.
4. Cookies, analytics and tracking
This site sets no cookies. It loads no analytics, advertising or social media scripts, and nothing from any other website: its security settings let pages load only the site's own files. That is why it shows no cookie banner: there is nothing to ask your consent for.
The only thing the site stores on your device is your choice, if you press Pause motion: one setting in your browser's local storage, which never leaves your device. You can remove it by clearing this site's data in your browser.
Because we don't track you, or sell or share your information, there is nothing for "Do Not Track" or Global Privacy Control signals to switch off; we treat them as an opt-out all the same. If we ever add analytics or other tracking, we'll update this policy first, and ask for your consent where the law requires it.
5. Who we share it with
We don't sell your personal information, and we don't share it for targeted advertising. We haven't done either in the past 12 months.
- Our host. Google Cloud stores and processes the site's data for us as our service provider, under data processing terms that let it use the data only on our instructions.
- When the law requires it, or to protect the rights, property or safety of ExoLP, our customers or others.
- If ExoLP's business is sold or merged, to the buyer, who must keep to this policy for what we collected under it.
6. Where we keep it, and for how long
- Demo requests are kept in a private storage bucket in Google Cloud's us-west1 region, in the United States. We keep a request for [RETENTION PERIOD] after we last hear from you, then delete it, unless you become a customer, when what we keep is covered by our agreement with you.
- Request logs are kept by Google Cloud for 30 days, then deleted.
If you write to us from outside the United States, your information is transferred to and stored in the United States, where data protection law may differ from yours. Google, our host, takes part in the EU–U.S. Data Privacy Framework and its UK and Swiss extensions.
7. How we protect it
- The site is served only over HTTPS, and tells browsers never to fall back to an unencrypted connection.
- Demo requests are stored in a bucket that is never public. The service that receives them can add a request but can't read, change or delete one; only ExoLP's owners can read them.
- Every field is checked before it is stored, and anything that isn't a plain name, address, number or text is refused.
No system is perfectly secure, but we take reasonable care to protect what you send us, and we'll tell you and the authorities as the law requires if a breach affects your information.
8. Your rights
Wherever you are, you can ask us to:
- tell you what personal information we hold about you, and give you a copy;
- correct it if it's wrong;
- delete it.
If you are in the European Economic Area, the United Kingdom or Switzerland, you can also ask us to restrict our use of your information, object to it (including any time we rely on legitimate interests), and receive it in a portable form. You have the right to complain to your data protection authority, though we'd welcome the chance to put things right first.
To make a request, write to [CONTACT EMAIL]. So we don't give your information to someone else, we may ask you to confirm it's you, usually by replying from the email address in your request. We'll answer within one month, or 45 days for requests under U.S. state laws, and tell you if we need longer. Making a request is free, and we won't treat you differently for making one.
9. California and other U.S. states
If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA"), gives you the rights in section 8, and the right to opt out of the sale or sharing of your personal information, which we don't do. This table is our notice of what we collect, in the CCPA's categories:
| Category | What it is here | Where it comes from | Why | Sold or shared? |
|---|---|---|---|---|
| Identifiers | Name, email, phone, IP address | You; your browser | Answering your request; security | No |
| Professional information | Company | You | Answering your request | No |
| Internet activity | Pages requested, times, user agent | Your browser | Running and securing the site | No |
| Sensitive personal information | None |
We keep each category as section 6 says. You may use an authorised agent to make a request for you; we'll ask for proof that you gave them permission.
Residents of other states with privacy laws, such as Colorado, Connecticut, Oregon, Texas, Utah and Virginia, have similar rights, and we honour them the same way. If we decline your request, you can appeal by replying to our answer. If we turn down your appeal, you can contact your state's attorney general.
10. Children
This site is for businesses. It isn't directed to children under 16, and we don't knowingly collect their information. If you think a child has sent us information, write to us and we'll delete it.
11. Changes to this policy
We'll post any change here and update the date at the top. If a change affects how we use information you've already given us, we'll say so on this page before it takes effect.
12. Contact us
ExoLP LLC, [POSTAL ADDRESS]. Email [CONTACT EMAIL].