Privacy Policy

1 Introduction

At Xinersoft SAS, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website at xinersoft.co or engage our services.

This policy applies to all visitors, clients, and prospective clients worldwide, including those in the United States, United Kingdom, European Union, and Australia.

2 Data Controller

The data controller responsible for your personal data is:

Xinersoft SAS

Bucaramanga, Santander, Colombia

Email: [email protected]

Phone: +57 321 950 3851

3 What Data We Collect

3.1. Information You Provide Directly

• Full name and contact details (email address, phone number)
• Company name, job title, and industry
• Project details and requirements shared via forms or email
• Billing and payment information (when applicable)
• Any other information you voluntarily provide

3.2. Information Collected Automatically

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and navigation patterns
• Referring website or source
• Device type and screen resolution
• Cookies and similar tracking technologies

4 How We Use Your Data

We use your personal information for the following purposes:

Service Delivery: To deliver the software development and consulting services you've engaged us for.

Communication: To respond to inquiries, send quotes, provide project updates, and deliver support.

Website Improvement: To analyze site usage, improve user experience, and optimize our content.

Legal Compliance: To meet legal, tax, and regulatory obligations applicable to our business.

5 Legal Basis for Processing

We process your personal data based on the following legal grounds (as required under GDPR):

Consent: When you submit a contact form, request a quote, or opt in to communications.

Contractual Necessity: When processing is required to deliver services you've contracted us for.

Legitimate Interest: For website analytics, service improvement, and security — where our interests do not override your rights.

Legal Obligation: When required to comply with applicable laws and regulations.

6 Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy:

Client project data

Retained for the duration of the business relationship plus 5 years for legal and tax compliance.

Contact form submissions

Retained for up to 2 years, or until you request deletion.

Website analytics data

Retained for up to 26 months in aggregated, anonymized form.

Marketing communications

Until you unsubscribe or withdraw consent.

7 Your Rights

Regardless of where you are located, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you.

Right to Correction: Request correction of inaccurate or incomplete data.

Right to Deletion: Request erasure of your data when it's no longer necessary.

Right to Portability: Receive your data in a structured, commonly used format.

Right to Opt-Out: Withdraw consent or object to processing at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8 Cookies & Analytics

Our website uses cookies — small text files stored on your device — to enhance your browsing experience and help us understand how our site is used.

Essential Cookies

Required for basic site functionality (e.g., theme preferences, session management). Cannot be disabled.

Analytics Cookies (Google Analytics)

Help us understand visitor behavior, popular pages, and traffic sources. Data is anonymized and aggregated. You can opt out via your browser settings or Google's opt-out tool.

Preference Cookies

Remember your settings (such as language or dark/light mode) for a better experience on return visits.

You can configure your browser to reject cookies or alert you when cookies are being set. Note that some features may not function properly without cookies.

9 Third-Party Services

We use trusted third-party services to operate our business. These providers only process your data on our behalf and under strict confidentiality agreements:

Hosting: Our website is hosted on secure servers with industry-standard protections.
Email Services: We use professional email platforms for business communications.
Analytics: Google Analytics for anonymized website traffic analysis.
Payment Processing: Secure payment providers for invoice transactions (we do not store credit card details).

10 International Data Transfers

Xinersoft SAS is based in Colombia. If you are located outside Colombia (including the EU/EEA, UK, US, or Australia), your data may be transferred to and processed in Colombia.

We implement appropriate safeguards for international data transfers, including:

Standard contractual clauses approved by applicable authorities
Data processing agreements with all third-party providers
Technical measures including encryption in transit and at rest
Compliance with Colombia's data protection framework (Ley 1581 de 2012), which provides adequate protection standards

11 Children's Privacy

Our services are designed for businesses and professionals. We do not knowingly collect personal information from anyone under the age of 16. If we discover that we have inadvertently collected data from a child under 16, we will delete it promptly.

If you believe a child has provided us with personal data, please contact us immediately at [email protected].

12 California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

We do NOT sell your personal information. We have never sold personal information and have no plans to do so.

Right to Know: You can request details about the categories and specific pieces of personal information we've collected about you.

Right to Delete: You can request deletion of your personal information, subject to certain legal exceptions.

Right to Opt-Out of Sale: Although we do not sell data, you have the right to direct us not to sell your information.

Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, email us at [email protected] with the subject line "CCPA Request."

13 EU/UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

Right to Restrict Processing: Request that we limit the use of your data in certain circumstances.

Right to Object: Object to processing based on legitimate interest or for direct marketing.

Right to Lodge a Complaint: You may file a complaint with your local data protection authority if you believe your rights have been violated.

For GDPR-related inquiries, our Data Protection contact can be reached at [email protected] with the subject line "GDPR Inquiry."

14 Security Measures

We implement robust technical and organizational measures to protect your personal data:

SSL/TLS encryption

Firewall protection

Access controls & authentication

Regular backups

Encrypted data at rest

Regular security audits

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. If you have concerns about the security of your data, please contact us.

15 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically. Your continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

16 Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your information, please reach out: