Privacy policy
1. Data controller
The data controller for the data collected on exegol.com and its subdomains is: Execorp, SAS with a capital of 10,000 euros, whose registered office is located at 122 rue Amelot, 75011 Paris, France. Contact email: [email protected]
2. Data collected
In the context of using our sites and services, Execorp may collect the following data:
- Email address
- Username chosen by the user
- Information related to licenses and subscriptions
- Activity logs and action history
- Referral information
- Information related to roles and teams (for Enterprise subscriptions)
Payment data is processed directly by our provider Stripe and is not stored by Execorp.
3. Purposes of processing
The collected data is used for:
- Providing subscribed services (account management, licenses, subscriptions)
- Managing access to specific features (Learning Center, support, private channels)
- Improving service functionality and ensuring platform security
- Informing users of important updates
- Facilitating referral program management
4. Legal basis for processing
Data processing is based on:
- Contract execution (acceptance of Terms of Service)
- Execorp's legitimate interest (service improvement, security)
- Compliance with legal obligations
5. Data recipients
The collected data is strictly intended for Execorp and its technical subcontractors:
- Cloudflare (hosting)
- Supabase (data storage)
- Stripe (payment)
- Discord (community management related to certain features)
Execorp does not sell or rent your data to third parties.
6. Data retention period
Data is retained:
- As long as the user account is active
- Then archived for a maximum period of 5 years after account closure for evidence and legal compliance purposes
Technical logs are retained for 12 months.
7. Data security
Execorp implements all appropriate technical and organizational measures to protect personal data against any destruction, loss, alteration, disclosure, or unauthorized access.
8. Transfers outside the European Union
Some providers are located outside the European Union (notably Cloudflare and Supabase). Execorp ensures that appropriate safeguards are in place, such as adherence to the Data Privacy Framework or standard contractual clauses approved by the European Commission.
9. User rights
In accordance with applicable regulations, users have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to restriction of processing
- Right to data portability
To exercise these rights, users can send a request to: [email protected]
10. Data breach notification
In the event of a personal data breach (as defined by the GDPR), Execorp commits to:
- Notify the relevant supervisory authority (CNIL in France) within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to individuals' rights and freedoms
- Assess the potential impact and risk level for affected users
- Directly notify affected users without undue delay when the breach is likely to result in a high risk to their rights and freedoms
- Provide affected users with information about:
- The nature of the breach
- Categories of personal data affected
- Likely consequences
- Measures taken to address the breach and mitigate potential adverse effects
- Contact information for further inquiries
- Document all breaches, their effects, and remedial actions taken
We will communicate through email, account notifications, or other direct means as appropriate, depending on the circumstances of the breach.
11. GDPR compliance
Execorp processes personal data in accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679). Users also have the right to lodge a complaint with the competent supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), accessible via the website: www.cnil.fr.
12. Modifications
Execorp reserves the right to modify this privacy policy at any time. Any substantial modification will be communicated to users through appropriate means, including notification in their personal space.