Privacy policy

Preamble

XixCore (“we”) places fundamental importance on personal data protection. Our approach rests on three principles: minimising collection to the strict necessary, retaining oversight of technical sub-processors, and giving users real and easy-to-use control over their data.

Data collected

We collect only the following data:

• Data submitted via forms (name, work email, company, team size, vertical of interest, use case, timeline, message)
• Anonymous browsing data via Plausible Analytics (page visited, approximate duration, device type) — no advertising cookie, no personal identifier
• Technical error metadata via Sentry (URL, browser, stack trace) — no personal content unless strictly required for diagnosis
• Cookie preferences stored locally in your browser

Purposes of processing

We process your data for the following purposes:

• Reply to your commercial requests and prepare a possible engagement
• Improve the Site's content, ergonomics, and performance
• Detect and prevent abuse, fraud, and technical incidents
• Meet our legal and regulatory obligations

Legal bases

Each processing relies on one of the following legal bases:

• Your consent (contact form, non-essential cookies)
• Performance of pre-contractual measures at your request
• Our legitimate interest in securing and improving the Site (anonymous analytics, error monitoring)
• Compliance with a legal obligation (record-keeping, responses to authorities)

Retention periods

Retention periods are: contact form data — 3 years from the last exchange; Plausible navigation data — aggregated and anonymised with no individual time limit; Sentry logs — 30 days; cookie preferences — 13 months. Beyond these periods, data is irreversibly deleted or anonymised.

Recipients and sub-processors

Your data is accessible only to authorised people inside XixCore. To run the service, we work with the following technical sub-processors, each governed by a data-processing agreement (DPA):

• Resend — sends transactional emails (request confirmation, internal notification)
• Sentry — captures server-side technical errors
• Plausible Analytics — anonymous traffic measurement
• OVHcloud — hosts the Site and its databases

Transfers outside the European Union

Some of our sub-processors (Resend, Sentry) may process data from the United States. These transfers are governed by the EU-US Data Privacy Framework or, failing that, by the standard contractual clauses adopted by the European Commission, which guarantee an adequate level of protection. Other sub-processors (OVHcloud, Plausible) host data exclusively within the European Union.

Your rights

Under GDPR and Ivorian law no. 2013-450, you have the following rights regarding your data:

• Right of access — obtain a copy of the data concerning you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”) — request deletion of your data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to restriction — temporarily freeze a contested processing
• Right to withdraw your consent at any time, without retroactive effect

DPO contact

To exercise your rights or for any question regarding the processing of your data, you may contact our Data Protection Officer (DPO) — contact details listed in our legal notice.

Complaint to a supervisory authority

If, after contacting us, you believe your rights are not respected, you may lodge a complaint with the ARTCI (Côte d'Ivoire's Telecommunications/ICT Regulatory Authority — artci.ci). EU residents may file a complaint with the supervisory authority of their country of residence (in France, the CNIL — cnil.fr).

Cookies

Cookie usage on the Site is detailed on the Cookies page, which lists each category, its purpose, retention period, and how to update your preferences.