Privacy Policy

Posted: February 9, 2026
Updated: February 9, 2026

Protecting your private information is our priority. This Privacy Policy applies to the website and services of Exelor and governs data collection and usage. Unless otherwise noted, all references to “Exelor” in this Privacy Policy refer to the company developing and providing the EAAF (Exelor AI Automation Framework) platform — a framework for automating and optimizing business processes using artificial intelligence and digital technologies.

Exelor is committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data.

By using the Exelor website or services, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, we cannot make our website or services available to you, and you should stop accessing and using them.

Exelor encourages you to review the privacy statements of websites you choose to link to from Exelor so that you can understand how those websites collect, use and share your information. Exelor is not responsible for the privacy statements or other content on websites outside the Exelor domain.

This Privacy Policy is provided in accordance with Exelor’s obligations under applicable privacy and data protection law, including Regulation (EU) 2016/679 (GDPR) and other relevant legislation (“Applicable Data Protection Law”). Definitions in this Privacy Policy shall align with those set out in the Applicable Data Protection Law. For the purposes of this Privacy Policy, “personal data” means any information relating to an identified or identifiable natural person. It does not include data rendered anonymous such that the individual is no longer identifiable.

For the purposes of the Applicable Data Protection Law, Exelor acts as a data controller (e.g., when collecting personal data from customers to provide access to the EAAF platform, send marketing communications, or process employee data). Exelor may also act as a data processor when processing personal data on behalf of clients under their instruction. This Privacy Policy primarily applies where Exelor acts as a data controller.

Collection of Your Personal Information

Exelor may collect and process personal data such as your name and email address when you submit contact forms on our website or to fulfil contractual obligations — to provide platform access, issue invoices, receive payment for services, and send service notifications, updates, and information about our offerings.

We may collect, use, store and transfer different kinds of personal data about you, grouped as follows:

Identity Data: first name, last name, job title, company name, username or similar identifier.
Contact Data: email address, telephone number, company billing and physical address.
Financial Data: billing information for paid subscriptions; payment details are processed exclusively through certified payment providers (Stripe, PayPal) and are not stored on our servers.
Platform Usage Data: information about configured business processes (PCF codes, BPMN diagrams, SOPs), integrations (CRM, ERP, Telegram, Slack), automations (n8n workflows), and digital maturity metrics.
Technical Data: IP address, browser type and version, time zone, device settings, operating system, device model, and other technology on devices used to access our platform.
Profile Data: username and password, platform usage history, preferences, feedback, and survey responses.
Usage Data: information about how you use our website and platform (pages visited, session frequency and duration).
Marketing and Communications Data: your preferences in receiving marketing communications from us and third parties, and your communication channel preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as it does not directly or indirectly reveal your identity. However, if we combine Aggregated Data with your personal data so that you can be directly or indirectly identified, we treat the combined data as personal data under this Privacy Policy.

We do not collect Special Categories of Personal Data (e.g., racial or ethnic origin, religious beliefs, political opinions, health data) through our platform, except where explicitly required by law and with your explicit consent.

How Is Your Personal Data Collected?

We use different methods to collect data from and about you including:

Direct interactions. You may give us your identity and contact details in person, via our website forms, or by corresponding with us by post, phone, email, social media or otherwise. This includes personal data you provide when you:

register an account on the EAAF platform;
request a demo or consultation;
participate in webinars or events we organize;
complete a contact form on our website;
subscribe to our newsletter or publications;
participate in surveys or research;
apply for a position at Exelor;
submit a complaint or feedback.

Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this data using cookies and similar technologies. Please see our Cookie Policy for further details.

Third parties or publicly available sources. We may receive personal data about you from:

Analytics providers (Google Analytics, Mixpanel);
Business partners or referrals;
Payment processors (transaction confirmation only, no storage of card details).

If you fail to provide personal data required by law or under the terms of a contract we have with you, we may not be able to perform that contract (e.g., provide platform access). We will notify you if this is the case at the time of data request.

Purposes for Which We Process Your Personal Data

Exelor collects and uses your personal information to operate its website and deliver the services you have requested, including processing your account registration. We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we need to perform the contract we are about to enter into or have entered into with you;
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
Where we need to comply with a legal or regulatory obligation.

We do not generally rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications via email or SMS. You have the right to withdraw consent to marketing at any time by contacting us.

Purpose / Activity	Type of Data	Lawful Basis for Processing
Registering you as a new customer and creating an EAAF platform account	Identity Data, Contact Data	Performance of a contract
Providing platform access: process management (PCF, BPMN, SOP), automation setup (n8n), integrations (CRM, ERP, Telegram), digital maturity analytics	Identity Data, Contact Data, Platform Usage Data, Technical Data	Performance of a contract; Legitimate interests (service improvement)
Processing payments for subscriptions	Financial Data (via payment providers)	Performance of a contract; Legal obligation
Sending notifications about process status, automations and system events	Contact Data, Platform Usage Data	Performance of a contract
Marketing communications about new features, webinars, case studies	Contact Data, Marketing and Communications Data	Consent (for email/SMS) or legitimate interests
Administering and protecting our business and website (troubleshooting, data analysis, testing, maintenance, security)	Identity Data, Contact Data, Technical Data	Legitimate interests (business operations, IT security)
Analytics to improve our platform, products, marketing and customer experience	Technical Data, Usage Data, Profile Data	Legitimate interests (business development, service enhancement)
Compliance with applicable laws (including GDPR and local data protection laws)	All categories	Legal obligation

International Data Transfers

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Exelor may share data with trusted partners to help provide our services, including:

Cloud hosting and storage providers (e.g., AWS, Google Cloud);
Payment processors (Stripe, PayPal) — transaction processing only;
Analytics services (Google Analytics, Mixpanel);
Automation and integration tools (n8n);
Customer support platforms (Intercom, Zendesk);
Email delivery services (SendGrid, Mailchimp).

All such third parties are contractually required to maintain the confidentiality and security of your information.

Whenever we transfer your personal data outside the EEA or UK, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

Transferring data only to countries deemed adequate by the European Commission;
Using Standard Contractual Clauses (SCCs) approved by the European Commission;
Engaging providers certified under data protection mechanisms (e.g., EU-U.S. Data Privacy Framework).

Exelor will disclose your personal information without notice only if required to do so by law or in the good faith belief that such action is necessary to:

comply with legal process or regulation;
protect and defend the rights or property of Exelor;
act in urgent circumstances to protect the personal safety of users of Exelor or the public.

Data Security

We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. Access to your personal data is limited to employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data Retention

Exelor will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data, and applicable legal requirements.

Data of active customers is retained for the duration of platform usage and for 3 years after account closure.
Data from inquiries that did not result in registration is retained for 2 years from the date of submission.
HR-related data of employees and contractors is retained for 7 years after the end of the employment relationship.
Security logs and technical data are retained for 12 months.

Data deemed no longer relevant is deleted. If you have questions about our retention periods, please contact us at: [email protected]

Use of Cookies

The Exelor website may use “cookies” to help personalize your online experience. A cookie is a text file placed on your device by a web server. Cookies cannot be used to run programs or deliver viruses. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie.

Our website uses cookies and similar technologies to distinguish you from other users. This helps us provide you with a good experience when you browse our website and allows us to improve our site. You can set your browser to refuse all or some cookies. If you disable cookies, please note that some parts of this website may become inaccessible or not function properly.

For more information about the cookies we use, please see our Cookie Policy.

Children Under 16

Exelor does not knowingly collect personally identifiable information from children under the age of 16. If you are under 16, you must ask your parent or guardian for permission to use this website or our services.

Opt-Out & Unsubscribe

We respect your privacy and give you an opportunity to opt-out of receiving certain communications. Users may opt-out of receiving any or all communications from Exelor by contacting us or selecting the “Unsubscribe” option in emails.

Your Legal Rights

Under applicable data protection law, you have the right to:

Request access to your personal data (a “data subject access request”);
Request correction of inaccurate or incomplete personal data;
Request erasure of your personal data where there is no good reason for continued processing;
Object to processing where we rely on legitimate interests;
Request restriction of processing in specific circumstances;
Request transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format;
Withdraw consent at any time where we rely on consent (without affecting lawfulness of prior processing);
Object to automated decision-making, including profiling.

No fee is usually required to exercise these rights. However, we may charge a reasonable fee or refuse to comply with your request if it is manifestly unfounded, repetitive or excessive.

We may need to request specific information from you to confirm your identity before fulfilling a rights request — this is a security measure to ensure data is not disclosed to unauthorized persons.

We aim to respond to all legitimate requests within one month. Occasionally it may take longer if your request is particularly complex — we will notify you and keep you updated.

Changes to This Privacy Policy

Exelor will occasionally update this Privacy Policy to reflect company and customer feedback and changes in data protection regulations. We encourage you to periodically review this page to stay informed about how we are protecting your information.

Contact Us

If you have questions about this Privacy Policy or how we process your personal data, please contact us:

Exelor
Email: [email protected]
Website: https://exelor.net