Privacy Policy

Xylence Inc. ("Xylence," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our predictive intelligence platform for venture capital ("Services").

By accessing or using our Services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not access or use our Services.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, company name, job title, and password when you register for an account
• Payment Information: Billing address and payment details processed through our secure payment provider
• Profile Information: Professional background, investment preferences, and profile settings
• Uploaded Data: Pitch decks, financial documents, startup information, and other materials you upload for analysis
• Communications: Information in emails, support tickets, and other communications you send us
• Feedback: Investment outcomes, founder feedback, and other information you provide to improve our models

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain information, including:

• Usage Data: Features used, actions taken, time spent, and interaction patterns
• Device Information: Device type, operating system, browser type, and unique device identifiers
• Log Data: IP address, access times, pages viewed, and referring URLs
• Cookies and Tracking: Information collected through cookies and similar technologies (see our Cookie Policy)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Data Providers: Company and funding data from Crunchbase, PitchBook, and similar services
• CRM Integrations: Contact and deal information from connected CRM systems
• Authentication Providers: Information from single sign-on providers you use to access our Services

We use the information we collect to:

• Provide Services: Deliver the predictive intelligence platform and its features
• Analyze Data: Process and analyze uploaded materials to generate predictions and insights
• Improve Models: Use feedback and outcomes to enhance our machine learning algorithms
• Personalize Experience: Customize the Services based on your preferences and usage patterns
• Communicate: Send service notifications, updates, security alerts, and support messages
• Process Payments: Handle billing and payment processing
• Ensure Security: Detect, prevent, and address fraud, abuse, and security issues
• Comply with Law: Meet legal obligations and respond to legal requests
• Research and Development: Improve our Services and develop new features

We may share your information in the following circumstances:

• With Your Consent: When you direct us to share information with third parties
• Service Providers: With vendors who perform services on our behalf (hosting, payment processing, analytics)
• Team Members: With other users in your organization who have appropriate access permissions
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights and safety
• Aggregated Data: Anonymized and aggregated data that cannot identify you

Important: We do not sell your personal information to third parties. We do not share your uploaded data (pitch decks, financial information) with other users or external parties without your explicit consent.

We implement industry-standard security measures to protect your information, including:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure: Secure cloud infrastructure with SOC 2 Type II compliance
• Monitoring: Continuous security monitoring and regular penetration testing
• Incident Response: Documented procedures for security incident handling

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your personal data as required by law.

We retain your information for as long as necessary to:

• Provide our Services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our machine learning models (using anonymized data)

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or legitimate business purposes.

Uploaded documents (pitch decks, financials) can be deleted at any time through your account settings.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@xylence.ai. We will respond to your request within 30 days.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with all service providers
• Compliance with applicable data protection frameworks

By using our Services, you consent to the transfer of your information to the United States and other countries where we operate.

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of personal information we have collected
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Opt-Out: Opt out of the "sale" of personal information (note: we do not sell personal information)

To exercise your CCPA rights, contact us at privacy@xylence.ai or call us at the number provided below.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• We process your data based on legitimate interests, contract performance, consent, or legal obligation
• You have the right to lodge a complaint with your local supervisory authority
• You can request information about the legal basis for our processing

For GDPR-related inquiries, contact our Data Protection Officer at dpo@xylence.ai.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Xylence Inc.
Email: privacy@xylence.ai
Data Protection Officer: dpo@xylence.ai
Address: Mexico City, Mexico