Privacy Policy

Last updated: July 12, 2026

1. Data Controller

The data controller is Yaxantu, which can be reached at the following email address: [email protected].

2. Data Collected

We collect the following data:

2.1 Merchant Partner Data

  • Last Name and First Name
  • Email address (measured at rest)
  • Phone number (measured at rest)
  • Login credentials (hashed password)
  • Billing Information
  • Store Configuration Preferences

2.2 End-Customer Data

  • Last Name, First Name, and Email Address (encrypted email at rest)
  • Shipping and Billing Address (measured at rest)
  • Phone number (measured at rest)
  • Order History

2.3 Browsing Data

  • IP Address
  • Browser type and version
  • Pages Viewed and Time Spent on Each Page
  • Functional and Analytical Cookies

3. Purposes of the Processing

Your data is processed for the following purposes:

  • Creating and Managing Partner Accounts
  • Provision and Maintenance of E-Commerce Services
  • Billing and Subscription Management
  • Order Processing and Customer Relationship Management
  • Communications related to the Platform's operation (notifications, transactional emails)
  • Improving Our Services and Analyzing Our Audience
  • Compliance with Legal and Regulatory Requirements

4. Legal Basis for Processing

The processing of your data is based on:

  • Performance of the Platform Usage Agreement
  • Your Consent to Non-Essential Cookies
  • Our Legal Obligations Regarding Billing and Data Retention

5. Recipients of the Data

Your data may be shared with:

  • The technical service providers responsible for hosting and maintaining the Platform
  • Payment services for processing transactions
  • The competent authorities in the context of legal obligations

We do not sell or rent your personal information to third parties.

6. International Transfers

The data is hosted on secure servers. Some service providers may be located outside the European Union; in such cases, appropriate safeguards are put in place in accordance with applicable regulations.

7. Shelf Life

Data is retained for the duration of the partner account, plus the applicable statutory limitation periods (specifically, 3 years for contractual data and 10 years for accounting and tax data).

8. Your Rights

In accordance with data protection regulations, you have the following rights:

  • Right of Access : obtain a copy of your personal data
  • Right to Correction : have inaccurate data corrected
  • Right to Erasure : request the deletion of your data within the limits provided by law — dedicated page
  • Right to Restriction : Restrict the processing of your data
  • Right to Data Portability : receive your data in a structured format
  • Right to Object : object to the processing of your data on legitimate grounds

To exercise these rights, please contact us at: [email protected]. We are committed to responding within one month.

9. Safety

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, alteration, or disclosure:

  • Connection Encryption : All data exchanged between your browser and our servers is protected.
  • End-to-end encryption of sensitive data : Email addresses, phone numbers, and shipping addresses are encrypted at rest. Even in the event of unauthorized access to the database, this information remains unreadable.
  • Key Rotation : Encryption keys are renewed periodically to ensure optimal security.
  • Secure Password Storage : Passwords are hashed and are never stored in plain text.
  • Restricted Access : Only authorized administrators have access to critical infrastructure, and all actions are logged.
  • Encrypted Backups : Backups are encrypted before being transferred to storage.

These measures ensure that your personal data remains confidential and protected, even in the event of a security incident.

10. Cookies

We use cookies that are necessary for the Platform to function and analytical cookies to measure traffic. You can configure your preferences through your browser settings. Rejecting functional cookies may cause certain services to malfunction.

11. Complaint

If you believe that your rights have not been respected, you may file a complaint with the relevant data protection authority.

12. Policy Change

We reserve the right to modify this privacy policy. Any changes will be notified to partners via email and posted on this page.

13. Contact

If you have any questions about this policy, please email us at: [email protected].