Privacy Policy

Exolvy

Last updated: 26 February 2026

1. Introduction

Exolvy ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website and services.

This policy applies to all visitors and users of our website and SaaS platform. By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

• Company: Exolvy
• Address: Velstraat 13, 8480 Ichtegem, Belgium
• VAT: BE1016900389
• Email: maxim.ledaine@exolvy.com

If you have any questions about this Privacy Policy or our data practices, you can contact us at the email address above.

3. What Personal Data We Collect

3.1 Data you provide to us

• Account information: such as your name, email address, and password when you create an account.
• Payment information: such as billing address and payment details when you subscribe to our services. Payment processing is handled by third-party payment processors; we do not store your full credit card details.
• Communications: any information you provide when you contact us for support or other inquiries.
• User content: any data you input, upload, or create while using our platform.

3.2 Data we collect automatically

• Usage data: information about how you interact with our website and services, such as pages visited, features used, and time spent.
• Device and technical data: such as your IP address, browser type, operating system, and device identifiers.
• Cookie data: information collected through cookies and similar technologies (see Section 7 below).

4. How and Why We Use Your Data

We process your personal data for the following purposes, each with a corresponding legal basis under the General Data Protection Regulation (GDPR):

• To provide and maintain our services – Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To process payments and billing – Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To communicate with you – including responding to support requests and sending service-related notifications. Legal basis: performance of a contract and legitimate interest (Art. 6(1)(b) and (f) GDPR).
• To improve our services – through analytics and usage patterns. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• To ensure security – detecting and preventing fraud or unauthorised access. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• To comply with legal obligations – Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To send marketing communications – only with your prior consent. Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.

5. Who We Share Your Data With

We do not sell your personal data. We may share your data with the following categories of recipients, only to the extent necessary:

• Payment processors: to handle transactions securely.
• Hosting and infrastructure providers: who store and process data on our behalf.
• Analytics providers: specifically Meta (Facebook) for website analytics (see Section 7).
• Professional advisors: such as lawyers or accountants, where required.
• Law enforcement or regulators: where required by law.

All third-party service providers are required to process your data in accordance with applicable data protection laws and our instructions.

6. International Data Transfers

Some of our third-party providers, including Meta (Facebook), may process your data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions.
• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Other legally recognised transfer mechanisms under the GDPR.

You may contact us for further details on the specific safeguards applied to any transfer.

7. Cookies and Tracking Technologies

Our website uses cookies, which are small text files placed on your device. We use the following types of cookies:

7.1 Essential cookies

These are strictly necessary for the functioning of our website and services. They enable core functionality such as security, session management, and accessibility. These cookies do not require your consent.

7.2 Analytics cookies (Facebook/Meta)

We use Facebook (Meta) analytics cookies to understand how visitors interact with our website. These cookies collect information such as pages visited, time spent, and referral sources. This data is processed by Meta Platforms, Inc. and may be transferred outside the EEA (see Section 6).

These analytics cookies are only placed with your prior consent, which you can provide or withdraw at any time through our cookie consent banner.

7.3 Managing your cookie preferences

When you first visit our website, you will be presented with a cookie consent banner where you can accept or reject non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the site, or by using any cookie preference tool we make available.

You can also configure your browser to block or delete cookies. Please note that disabling essential cookies may affect the functionality of our website.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Specifically:

• Account data: retained for the duration of your account and for a reasonable period thereafter (up to 12 months) to handle any follow-up matters.
• Payment and billing data: retained as required by Belgian tax and accounting law (generally 7 years).
• Analytics data: retained in accordance with Meta's data retention policies. Aggregated, non-identifiable analytics data may be retained indefinitely.
• Support communications: retained for up to 24 months after the last interaction.

When data is no longer needed, we securely delete or anonymise it.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your data where there is no compelling reason to continue processing.
• Right to restrict processing: request that we limit how we use your data in certain circumstances.
• Right to data portability: receive your data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at maxim.ledaine@exolvy.com. We will respond to your request within one month, as required by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit):

• Address: Drukpersstraat 35, 1000 Brussels, Belgium
• Website: www.gegevensbeschermingsautoriteit.be

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to, encryption of data in transit, access controls, and regular security reviews.

While we take all reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected data from a child, please contact us at maxim.ledaine@exolvy.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting the updated policy on our website with a revised "last updated" date. For significant changes, we may also notify you via email.

We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our processing of your personal data, please contact us:

• Company: Exolvy
• Address: Velstraat 13, 8480 Ichtegem, Belgium
• VAT: BE1016900389
• Email: maxim.ledaine@exolvy.com