Privacy Policy
Protection of data collected in the context of our activity as a data controller
XFOLIO AI SAS is responsible for the processing of data collected on its sites and data collected as part of its marketing and business development activities.
The personal data that directly (full name, postal address, email address, telephone number, etc.) or indirectly identifies any person browsing the Website and/or accessing the services offered on the Website and/or Application ("Personal Data") are considered confidential and must be handled as such.
Furthermore, under current legislation regarding the processing and protection of Personal Data, specifically the amended French Data Protection Act no. 78-17 of 6 January 1978 and the General Data Protection Regulation of 27 April 2016 ("GDPR"), XFOLIO AI SAS and its subsidiaries will maintain the confidentiality, integrity and security of your Personal Data.
For any questions you may have about our Privacy Policy and how we collect, use and protect data, feel free to contact us:
• By post: XFOLIO AI SAS, DPO, 23 rue d'Anjou, 75008 Paris, France
• By email: [email protected]
• Via the contact us page
The personal data that directly (full name, postal address, email address, telephone number, etc.) or indirectly identifies any person browsing the Website and/or accessing the services offered on the Website and/or Application ("Personal Data") are considered confidential and must be handled as such.
Furthermore, under current legislation regarding the processing and protection of Personal Data, specifically the amended French Data Protection Act no. 78-17 of 6 January 1978 and the General Data Protection Regulation of 27 April 2016 ("GDPR"), XFOLIO AI SAS and its subsidiaries will maintain the confidentiality, integrity and security of your Personal Data.
For any questions you may have about our Privacy Policy and how we collect, use and protect data, feel free to contact us:
• By post: XFOLIO AI SAS, DPO, 23 rue d'Anjou, 75008 Paris, France
• By email: [email protected]
• Via the contact us page
Data retention period
Personal data is kept in an active database on a case-by-case basis for as long as is necessary for the purposes for which it was collected and processed, or for as long as required by law or regulations.
Cookies on our sites
Cookies are small text files placed on a computer by a web server when browsing online and are used to store user preference data so a web server doesn't have to repeatedly request this information. We use session cookies that are only used while you are on the Website and certain persistent cookies that remain on your hard drive and are read by our server when you return to the Website. XFOLIO AI shall request your permission prior to installing a cookie on your device that is directly owned or developed by XFOLIO AI. You can block cookies by activating the settings on the browser that blocks all or some cookies. However, if you block all cookies, you may not be able to access all or parts of our Products and Service, Websites or Portals. You may encounter XFOLIO AI's cookies or pixel tags on third party websites that we do not control. XFOLIO AI's practice is not to accept cookies from third parties unless XFOLIO AI is jointly offering a product or service with that third party. XFOLIO AI will not put sensitive information in the cookies we use.
How We Use Cookies and Other Technologies
When you visit our Website, we may collect standard information that your browser sends to every website you visit, such as originating IP address, browser type and language, access times and referring websites. This data may be used, among other reasons, to improve the operation and security of our Website by assisting in authenticating your identity. We may receive technical data about the device used to access the Website including device ID, device model, operating system version, application types and versions, browser type, language, plug-ins, originating IP address, time zone and geolocation (collectively, "Device Data"). Device Data may be used as part of our security controls to uniquely identify the device and authenticate the user when accessing the Website. Device Data may be shared, along with information about any fraudulent transactions using the device, with our Service Providers (as defined below) who compare and add the Device Data, and any fraud-related data, to a database in order to identify and block access to the Website by devices associated with questionable or fraudulent activity.
Third-Party Service Providers
XFOLIO AI may share data, including Personal Data, with our contracted third-party service providers ("Service Providers") in order to deliver our Products and Services, Websites or Portals. These Service Providers include business partners, payment and delivery services, advertising networks, analytics providers, credit reference agencies, social media companies, email distributors, marketing automation partners, customer survey companies, data storage and hosting partners, IT specialists and product developers. Service Providers with whom we share Personal Data are contractually bound to use and disclose such Personal Data only for the permitted purposes and to use reasonable security measures to protect Personal Data from unauthorized access and use. Permitted purposes may include printing and mailing of a check payment, providing payment processing, settlement and clearing for electronic payments including virtual card payments and distribution of notifications, transferring messages, verifying and authenticating identity, sanction screening, credit review and reporting, document scanning, processing, and storage. Service Providers may be located outside of the jurisdiction in which you reside and are subject to that jurisdiction's applicable laws. By using our Service Providers, you acknowledge and agree to those Service Providers' privacy policies.
Third Party links
We may provide links to a variety of third-party social media sites and other websites as a service to you or in order to provide you additional information related to XFOLIO AI or additional venues in which you can learn about and discuss XFOLIO AI. Please note that we have no affiliation with these third parties, and we cannot control and are not responsible for the information collection, use, and disclosure practices of such third parties. We encourage you to review and understand their privacy practices and policies, if any, before providing any information to them. We are not responsible for the content or information of these websites, any products or services that may be offered through advertisers or third parties, or any other use of the linked website.
In some instances, it may look as though you are still on www.xfolio.ai, however you may be on our third-party service providers domain. Their privacy policy applies to the collection and use of information when you are on such third-party domain.
How We Use Cookies and Other Technologies
When you visit our Website, we may collect standard information that your browser sends to every website you visit, such as originating IP address, browser type and language, access times and referring websites. This data may be used, among other reasons, to improve the operation and security of our Website by assisting in authenticating your identity. We may receive technical data about the device used to access the Website including device ID, device model, operating system version, application types and versions, browser type, language, plug-ins, originating IP address, time zone and geolocation (collectively, "Device Data"). Device Data may be used as part of our security controls to uniquely identify the device and authenticate the user when accessing the Website. Device Data may be shared, along with information about any fraudulent transactions using the device, with our Service Providers (as defined below) who compare and add the Device Data, and any fraud-related data, to a database in order to identify and block access to the Website by devices associated with questionable or fraudulent activity.
Third-Party Service Providers
XFOLIO AI may share data, including Personal Data, with our contracted third-party service providers ("Service Providers") in order to deliver our Products and Services, Websites or Portals. These Service Providers include business partners, payment and delivery services, advertising networks, analytics providers, credit reference agencies, social media companies, email distributors, marketing automation partners, customer survey companies, data storage and hosting partners, IT specialists and product developers. Service Providers with whom we share Personal Data are contractually bound to use and disclose such Personal Data only for the permitted purposes and to use reasonable security measures to protect Personal Data from unauthorized access and use. Permitted purposes may include printing and mailing of a check payment, providing payment processing, settlement and clearing for electronic payments including virtual card payments and distribution of notifications, transferring messages, verifying and authenticating identity, sanction screening, credit review and reporting, document scanning, processing, and storage. Service Providers may be located outside of the jurisdiction in which you reside and are subject to that jurisdiction's applicable laws. By using our Service Providers, you acknowledge and agree to those Service Providers' privacy policies.
Third Party links
We may provide links to a variety of third-party social media sites and other websites as a service to you or in order to provide you additional information related to XFOLIO AI or additional venues in which you can learn about and discuss XFOLIO AI. Please note that we have no affiliation with these third parties, and we cannot control and are not responsible for the information collection, use, and disclosure practices of such third parties. We encourage you to review and understand their privacy practices and policies, if any, before providing any information to them. We are not responsible for the content or information of these websites, any products or services that may be offered through advertisers or third parties, or any other use of the linked website.
In some instances, it may look as though you are still on www.xfolio.ai, however you may be on our third-party service providers domain. Their privacy policy applies to the collection and use of information when you are on such third-party domain.
Your rights under GDPR
You have the right to request erasure of your Personal Data ("right to be forgotten") under Article 17 of the GDPR, except where we are required to retain data to comply with applicable financial recordkeeping, anti-money-laundering / know-your-customer, or audit obligations.
You also have the right to data portability under Article 20 of the GDPR, in respect of Personal Data you have provided to us directly, where processing is based on your consent or on a contract and is carried out by automated means.
To exercise either right, contact our Data Protection Officer at [email protected].
You also have the right to data portability under Article 20 of the GDPR, in respect of Personal Data you have provided to us directly, where processing is based on your consent or on a contract and is carried out by automated means.
To exercise either right, contact our Data Protection Officer at [email protected].
Data breach notification
In the event of a personal data breach, we are committed to notifying the competent supervisory authority within 72 hours of becoming aware of the breach, where feasible, in accordance with Article 33 of the GDPR. Where a breach is likely to result in a high risk to the rights and freedoms of affected individuals, we will also notify those individuals without undue delay.
Security of processing
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk associated with the processing of Personal Data, in accordance with Article 32 of the GDPR.