Privacy Policy - Xale AI

CARREDASH (SAS)
Registration number (SIREN): 983 657 636
229 rue Saint-Honoré, Paris
privacy@xale.ai

This Privacy Policy forms an integral part of the xale.ai Terms of Service available at https://xale.ai/terms. Acceptance of the Terms constitutes acknowledgment of this Privacy Policy.

We collect business-related personal data including:

• identity and contact information
• company details and website information
• payment information via Stripe
• technical identifiers (IP, device data)
• analytics and usage data
• generated outputs
• support communications
• cookies and tracking data

We do not collect user prompts.

Data is processed to:

• operate the Service
• generate and distribute content
• manage billing and subscriptions
• provide customer support
• improve platform performance
• conduct analytics and marketing

AI providers used include OpenAI, Anthropic, Perplexity, Heygen, ElevenLabs, Mirage.

We do not train AI models using customer data.

Outputs are intended for public publication.

Employees may access operational data under confidentiality obligations.

Customers remain responsible for the accuracy of submitted information.

Processing is based on:

• contractual necessity
• legitimate business interests
• regulatory compliance
• consent where required

Data is retained for the duration necessary to operate the Service and comply with accounting and legal obligations.

Inactive accounts may be deleted.

Data may be processed outside the EU using recognized legal safeguards such as standard contractual clauses.

CARREDASH implements administrative, technical, and organizational safeguards appropriate to the sensitivity of the data, including encrypted communications, access controls, and restricted operational access.

Infrastructure is provided via Bubble and Cloudflare and subject to their security frameworks.

Users may request access, correction, deletion, or export by contacting contact@xale.ai.

We comply with GDPR and CCPA rights.

We use Google Analytics, PostHog, Meta tracking tools, and advertising cookies.

Consent is managed via a cookie banner.

Stripe privacy policy: https://stripe.com/privacy

Analytics and advertising providers operate under their own policies.

DPA available for enterprise customers above $1000/month.

We may update this Privacy Policy and will notify users of significant changes.