Privacy
Policy

Welcome to X-Tract. This Privacy Policy explains how we collect, use, retain, and protect your personal data when you use our service via the website https://app.x-tract.fr.
It has been drafted in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller is:
X-Fabric SAS
📍 34 rue Cartagnoulaz, 73440 Les Belleville
📧 contact@x-tract.fr

2. Data Collected

We collect the following data when you use the service:

• During registration:
  • Phone number
  • First name
  • Role (participant or organizer)
  • Usage information (e.g. number of events organized, issues encountered)
• During use:
  • GPS location data (only with explicit consent from the Participant)
  • Timestamps of requests and responses
  • IP address, browser, technical data

3. Purpose of Processing

Your data is processed for the following purposes:

• Secure authentication via SMS
• Sending location requests
• Displaying positions on the map
• Archiving for traceability (e.g. proof of contact in case of dispute)
• Producing anonymized statistics to improve accuracy, speed, and usability of the service

4. Legal Basis

The processing of your data is based on:

• Your consent for Participant location data
• Contract performance for registration and usage data
• Our legitimate interest in ensuring service security and retaining evidence in case of disputes

5. Data Retention

Personal data is retained for up to 2 years after the last activity, to handle claims, incidents, or legal obligations.
After this period, data will either be anonymized for statistical purposes or deleted.

6. Data Recipients

Only authorized X-Tract staff have access to your data.
Your data is never transferred or sold to third parties.
We may share certain data with competent authorities in case of legal requests (e.g. subpoena, investigation).

7. Security

Your data is hosted in Europe on secure servers.
Technical and organizational measures are in place to prevent unauthorized access, loss, or alteration.

8. Your Rights

In accordance with the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification in case of errors
• Right to erasure (within the limits of traceability obligations)
• Right to restriction or objection to processing
• Right to data portability

To exercise these rights, write to us at: 📧 contact@x-tract.fr
Proof of identity may be requested to ensure the security of your request.

9. Cookies and Trackers

Our application uses only technical cookies strictly necessary for service operation (authentication, user session, security).
No advertising cookies or third-party trackers are used.

10. Changes

This policy may be updated at any time. In case of significant changes, we will inform you via the app.x-tract.fr interface or by email.

11. Contact

For any question or complaint regarding this policy:
📧 contact@x-tract.fr
You also have the right to file a complaint with the CNIL (www.cnil.fr).