Privacy Policy

1) Information we collect

a) You provide

• Identity and contact data (name, email, title, company, phone, address).
• Account and billing details (purchase records, tax/VAT info, billing contact).
• Project materials (briefs, datasets, content, access credentials you authorize).
• Communications (emails, chat, meeting notes; recordings only with notice/consent).

b) Collected automatically

• Device/usage data (IP address, approximate location, device identifiers, pages viewed, time on page, referring URLs).
• Cookies and similar technologies for essential site functions, analytics, and, where enabled, marketing.

c) From third parties (as instructed by you)

• Platforms and tools you connect (e.g., Clay.com, CRM/MAP, analytics, data providers).
• Public/prospect data you lawfully supply or permit us to enrich.

2) How we use information

• Provide and improve our services and Site; set up and maintain integrations.
• Communicate about projects, billing, updates, and security notices.
• Configure and operate automations and outreach you authorize.
• Detect and prevent fraud, abuse, security incidents, and spam.
• Comply with legal obligations and enforce our agreements.
• With your consent, send marketing communications (you can opt out anytime).

3) Legal bases (EEA/UK where applicable)

• Contract necessity (to perform our services).
• Legitimate interests (to secure, improve, and market our services in a proportionate manner).
• Consent (for certain cookies/marketing or call recordings).
• Legal obligation (tax, accounting, compliance).

4) Sharing of information

We share information with:

• Service providers / processors (e.g., hosting, email, analytics, payment/billing, document storage, communications, security).
• Third-party platforms you connect (e.g., Clay.com, CRMs, enrichment/data vendors) as part of your instructed workflows.
• Professional advisors (lawyers, accountants), and authorities when legally required.
• Business transfers (e.g., merger, acquisition) subject to this Policy’s protections.

We do not sell your personal information. If we “share” (as defined under CPRA) for cross-context behavioral advertising, you may opt out (see “Your choices”).

5) International data transfers

We are U.S.-based. If we transfer personal data from the EEA/UK/ Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses (SCCs) or equivalent lawful mechanisms, coupled with supplemental measures where needed.

6) Retention

We keep personal data only as long as necessary for the purposes above:

• Project files: typically up to 24 months after engagement end (unless you request earlier deletion or longer retention is required by law).
• Billing/transaction records: 7 years (or as required by law).
• Marketing contacts: until you opt out or we delete inactive records.

7) Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data. No method of transmission or storage is 100% secure.

8) Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object, port, or withdraw consent.

• EEA/UK/Swiss: you may lodge a complaint with your local supervisory authority.
• California: you may request access/portability and deletion, and opt out of “sharing” for cross-context behavioral advertising. We do not sell personal information. Authorized agents may submit requests.
• How to exercise: email privacy@xcelerist.com. We may verify your request before acting.

9) Cookies & similar technologies

• Types: strictly necessary, functional, analytics, and (if enabled) advertising.
• Controls: you can manage preferences via our cookie banner (where shown) and your browser settings. Blocking some cookies may impact Site functionality.
• Do Not Track / GPC: where legally required, we honor Global Privacy Control signals as an opt-out of “sale/share” under CPRA.

10) Children’s privacy

Our Site and services are not directed to children. We do not knowingly collect personal information from anyone under 16 (or 13 in the U.S.). If you believe a child provided data, contact us to delete it.

11) Third-party links and services

Our Site may link to external sites and services. Their privacy practices are governed by their own policies. We do not control and are not responsible for third-party privacy practices.

12) Changes to this Policy

We may update this Policy. Material changes will be announced on this page with an updated “Last updated” date.

13) Contact

Questions or requests: privacy@xcelerist.com
Postal: Xcelerist, 5 Penn Plaza, 14th Floor, New York, NY 10001, US