Exwayz
  • Technology
  • Product
  • Case Studies
  • Launchpad
  • About
Book a demo
Home / Privacy notice
Legal

Privacy Notice

Effective date: 19 January 2026

This Privacy Notice applies to website visitors, business prospects, and customers using Exwayz services. It explains how personal data is collected, used, shared, and protected in accordance with the General Data Protection Regulation (GDPR).

1. Who is responsible for processing your personal data?

Exwayz SAS acts as the data controller. We are a French company registered under number 900 329 608 R.C.S. Paris, with our registered office at 39 Rue de la Gare de Reuilly, 75012 Paris, France.

For any questions regarding this notice or the processing of your personal data, please contact us at contactexwayzfr.

2. What personal data do we collect?

a. Data you provide directly

  • Identification data (name)
  • Professional contact details (email address, phone number, company, job title)
  • Company information (name, industry, size)
  • Content of communications you send us

Providing this data is voluntary. However, withholding certain information may prevent us from delivering the requested service.

b. Data collected automatically

When you visit our website, we may collect your IP address and browser user-agent. We use Fathom Analytics for website analytics, which does not use cookies and is fully compliant with GDPR.

c. Data collected from third-party sources

  • Professional social networks
  • Public databases
  • Business partners and service providers

d. Sensitive data

We do not intentionally collect any special category data, including racial or ethnic origin, political opinions, religious beliefs, health data, or any other sensitive personal information.

3. Why do we collect your data and how long do we retain it?

Purpose Legal basis Retention
Contract management / service provision Legitimate interest Duration of relationship
Accounting, tax & regulatory compliance Legal obligation Statutory periods
Pre-litigation / litigation management Legitimate interest 5 years (statute of limitations)
Marketing communications Legitimate interest / consent 3 years from end of relationship or last contact
Business analytics Legitimate interest 1 year
Security & fraud prevention Legitimate interest 1 year
Rights management requests Legal obligation Time required to process the request

After the applicable retention period, data is either deleted or anonymized.

4. With whom do we share your personal data?

We do not sell personal data.

a. Internal recipients

Authorized employees with a legitimate need to access the data.

b. External recipients

  • Professional advisors (legal, financial, accounting)
  • Technical and operational service providers
  • Public or judicial authorities, when legally required

All processors are bound by confidentiality obligations and GDPR compliance commitments.

c. Corporate transactions

In the context of a merger, acquisition, or asset sale, personal data may be disclosed to the relevant parties, subject to appropriate safeguards.

d. International data transfers

Some of our service providers operate outside the European Economic Area, including in the United States. Any such transfers are conducted in compliance with the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

5. What are your rights and how to exercise them?

Under applicable data protection law, you have the following rights:

  • Withdraw consent at any time, where processing is based on consent
  • Access and receive a copy of your personal data
  • Correct inaccurate or incomplete data
  • Request erasure of your data or restriction of its processing
  • Receive your data in a structured, machine-readable format (data portability)
  • Object to processing based on legitimate interest
  • Opt out of direct marketing communications at any time
  • Define instructions regarding your data after death
  • Lodge a complaint with the CNIL (www.cnil.fr)

To exercise any of these rights, contact us at contactexwayzfr.

6. Protection of minors

Our services are intended for business users only. We do not knowingly collect personal data from minors. If we become aware that data from a minor has been collected without appropriate consent, we will promptly delete it.

7. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legal requirements or our data processing practices. We encourage you to review this page periodically. The effective date at the top of this page indicates when it was last updated.

For any questions, contact us at contactexwayzfr.

© 2026 Exwayz SAS. All rights reserved.
Legal information Privacy notice LinkedIn YouTube
🤖

Are you a robot?

We localize robots for a living, but we prefer to talk with humans!

 
Open in mail app
Or skip the small talk and book a demo.