Effective Date: March 17, 2025

Data Controller

The data controller for personal data processing is Xcert.ai, a company based in Switzerland. For any questions regarding the protection of your personal data, you may contact us at:

Name: Xcert.ai SA
Address: Route de Saint-Julien 198, DYN Genève SA, 1228 Plan-les-Ouates, Switzerland
Email: privacy@xcert.ai

Data Recipients

The collected data is exclusively intended for Xcert.ai. It may be shared with the following technical service providers as part of our operations:

• Axeptio for cookie management
• Google Analytics for website traffic analysis
• Google Search Console for SEO performance tracking

We do not sell or rent your personal data to third parties. However, we may share certain information with third-party service providers assisting us in operating our website.

Categories of Collected Data

We collect the following data when you interact with our website:

• Identification Data: Name, first name, email address, organization name
• Browsing Data: IP addresses, geolocation data, visited pages, session duration, etc.
• Form Data: Information submitted by users through the waiting list registration form (name, first name, email, organization name, open message field)

Purpose of Data Collection

The data collected through our form is used solely to register users on the waiting list for product evaluation. This information is not used for other marketing purposes without your consent. Additionally, we collect browsing and analytical data to analyze website usage and improve our services.

How and Why We Collect Your Data

We collect personal data when you voluntarily provide it to us, such as when contacting us via forms or email. We use this data to:

• Respond to your inquiries
• Improve our website and services
• Register you on the waiting list for product evaluation

International Data Transfers

Personal data may be transferred outside the European Union, particularly to service providers based in the United States, such as Google Analytics. These transfers are conducted in compliance with legal data protection requirements.

Data Retention Period

Personal data is retained for a maximum of 25 months, in line with CNIL recommendations regarding audience measurement and website interaction data.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Data encryption
• Two-factor authentication
• Restricted access to personal data

Your Rights

In accordance with applicable legislation, you have the following rights regarding your personal data:

• Right of Access: Obtain a copy of the personal data we hold about you
• Right to Rectification: Request corrections to inaccurate information
• Right to Erasure: Request the deletion of your personal data, subject to legal exceptions
• Right to Object: Object to the processing of your data under certain conditions
• Right to Data Portability: Request to receive your data in a structured format

To exercise these rights, you may contact us via email at privacy@xcert.ai or by mail at the above-mentioned address.

Links to Other Websites

Our website may contain links to other sites. We are not responsible for the privacy practices of these third-party websites and encourage you to review their privacy policies.

Privacy Policy Updates

We reserve the right to update this privacy policy at any time. Users will be informed of changes via updates to this page. We encourage you to regularly review this policy to stay informed of any modifications.

Cookie Policy

Our website uses cookies to enhance user experience. Below are details on the cookies used:

• Cookie Provider: Axeptio (cookie management) and Google Analytics
• Cookie Purpose: Website traffic analysis, audience measurement, and cookie preference management
• Cookie Retention: Audience measurement cookies are stored for a maximum of 13 months. Other cookies, such as preference management cookies, are retained for up to 25 months.

You can manage your cookie preferences via the Axeptio tool integrated into our site. You may also withdraw your consent at any time.

Additional Information

Data Breach Procedures

In the event of a data breach, we have procedures in place to promptly notify relevant authorities and affected individuals, while mitigating the impact of the breach.

Third-Party Services

We do not receive personal data from third-party sources.

Automated Marketing & Profiling

We do not engage in automated marketing or profiling using personal data collected on our website.

‍