Privacy Policy
Last updated: February 23, 2026
1. Person Responsible for Personal Information Protection
Exoset Inc. ("Exoset", "we") is committed to protecting the personal information it collects and processes in the course of its activities. The person responsible for personal information protection can be reached at:
- info@exoset.com
- 1 (833) 563-1748
2. Personal Information Collected
We collect the following personal information, depending on your use of our services:
Contact Form
- Full name
- Professional email address
- Company name (optional)
- Phone number (optional)
- Subject and message content
Client Portal
- Email address
- Authentication data (session token)
- Account metadata (organization, role)
Automatically Collected Data (with your consent)
- IP address
- Browser type and operating system
- Pages viewed and visit duration
- Approximate geolocation data
3. Cookies Used
Our site uses the following cookies:
| Cookie | Type | Duration | Purpose |
|---|---|---|---|
| NEXT_LOCALE | Essential | 1 year | Remember your language preference |
| Supabase cookies | Essential | Session | Client portal authentication |
| cookie_consent | Essential | 1 year | Remember your cookie consent choice |
| Google Analytics cookies | Analytics | Up to 2 years | Analyze site usage (loaded only with your consent) |
Analytics cookies are only enabled if you click "Accept All". You can change your choice at any time via the "Cookie preferences" link at the bottom of the page.
4. Third-Party Processors
We use the following third-party processors for the operation of our services:
- Google Analytics — Traffic and visitor behavior analysis
- Google reCAPTCHA — Protection against automated submissions (contact form)
- Google Maps — Display of our office locations
- Resend — Sending transactional emails (contact form, magic links)
- Supabase — Database hosting and authentication
- Vercel — Website hosting
5. Legal Bases for Processing
- Consent — Analytics cookies (Google Analytics) — enabled only after your explicit acceptance
- Legitimate interest — Abuse protection (Google reCAPTCHA), site security
- Contractual necessity — Client portal authentication, processing contact requests
6. Data Retention
- Contact form: data is sent by email and is not stored in our database
- Client portal accounts: retained as long as the account is active
- Analytics data: per Google Analytics default settings (up to 26 months)
- Consent cookies: 12 months
7. Your Rights
In accordance with Quebec's Law 25 and the General Data Protection Regulation (GDPR), you have the following rights:
- Right to access your personal information
- Right to rectification of inaccurate data
- Right to erasure (right to be forgotten)
- Right to data portability
- Right to withdraw your consent at any time
- Right to file a complaint with the Commission d'accès à l'information du Québec (CAI) or the Commission nationale de l'informatique et des libertés (CNIL) in France
To exercise your rights, please write to us at info@exoset.com
8. International Transfers
Some of our third-party processors (Google, Vercel, Supabase, Resend) may process your data in the United States. These transfers are governed by standard contractual clauses and appropriate security measures in accordance with the requirements of Law 25 and the GDPR.
9. Security Measures
We implement appropriate technical and organizational security measures to protect your personal information, including encrypted communications (HTTPS/TLS), rate limiting, data validation, and access control.
10. Changes
We may modify this policy at any time. The last updated date at the top of this page will be updated accordingly. We encourage you to review this page regularly.