Privacy Notice

ExisJS is a radically clean, enterprise-grade open-source backend framework for building and deploying scalable server-side applications and APIs. Our community-driven ecosystem provides the tools, workflows, and conventions that developers need to build robust architectures.

Because ExisJS is an open-source framework, this Privacy Notice primarily applies to your interactions with our hosted websites, community forums, and related online services, rather than the software you deploy on your own infrastructure.

This Notice describes how ExisJS collects, uses, discloses, and processes personal information; the rights and choices available to you regarding that information; how to reach us; and how we protect your information when you:

• visit an ExisJS website, including exisjs.com and its affiliated properties (together, the Sites);
• access or use a product or service made available by ExisJS or its affiliates as a customer or authorized user (together, the Services); or
• interact with us in any other capacity, including by registering for or attending an event, accelerator, learning portal, or webinar (together, Marketing Activities).

For the personal information described in this Notice, ExisJS acts as a data controller, sometimes referred to as a "business": we decide why and how personal information is collected and processed.

What we collect depends on how you interact with us, the choices you make, the products and features you use, your location, and applicable law.

Information you provide directly

• Contact information — name, email address, phone number, and location, collected when you use, inquire about, or purchase our Services.
• Professional information — company name, company website, job title, and industry.
• Account information — details provided to create, update, or administer your account on the Sites or Services.
• Transactional information — payment details and other information related to a purchase of our Services.
• Customer content — source code, text, images, documents, and other files you or your team store or process using the Services.

Information collected automatically

• Usage information — clicks, pages viewed, searches, referring pages, response times, and errors.
• Device information — browser type and settings, device model, and operating system.
• Service-generated information — log files, IP address, approximate location derived from IP address, server performance data, and system configuration.
• Cookies — data collected through cookies and similar tracking technologies, described further in our Cookie Notice.

We use your information to provide the Sites and Services, including to:

• operate the Services — provide, deliver, monitor, and maintain the Sites and Services;
• develop our products — improve functionality and quality, and build new features;
• provide support — respond to requests and provide technical assistance;
• communicate — send technical notices, invoices, product updates, and security alerts;
• maintain security — detect, investigate, and respond to threats, fraud, and unauthorized access; and
• meet our legal obligations — comply with applicable law, regulation, or legal process.

We disclose information as necessary to provide the Sites and Services, as required by law, or in the ordinary course of our business:

• Corporate affiliates — with Venticinque Aeyon Groupe and other entities under common ownership or control.
• Successors in a transaction — with a relevant third party in connection with a proposed or actual merger, acquisition, or sale of assets.
• Service providers — with vendors that support our operations, such as cloud hosting, billing, and customer support providers, under contractual confidentiality obligations.
• Legal and public authorities — only where reasonably necessary to comply with applicable law, regulation, subpoena, or other legal process.

We do not sell personal information.

ExisJS is based in the United States and may process information in the United States and other countries where we or our service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers, including Standard Contractual Clauses.

ExisJS complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), each as set forth by the U.S. Department of Commerce, for applicable transfers of personal information from the European Economic Area, the United Kingdom, and Switzerland to the United States.

We retain personal information for as long as needed to provide the Sites and Services, meet the purposes described in this Notice, and comply with our legal, accounting, and reporting obligations. Retention periods vary by the type of information, the purpose of processing, and applicable law; where we no longer have a legitimate need, we delete or anonymize the information.

We maintain administrative, technical, and physical safeguards designed to protect personal information against accidental loss and unauthorized access, use, alteration, or disclosure. No method of transmission or storage is completely secure; if you become aware of a security concern involving the Sites or Services, please contact us using the details below.

Depending on your jurisdiction, you may have some or all of the following rights with respect to your personal information:

• Access and portability — request access to, and a copy of, the information we hold about you.
• Rectification — request correction of inaccurate or incomplete information.
• Deletion — request that we delete personal information we have collected about you.
• Withdraw consent — withdraw consent at any time where we rely on it to process your information.
• Opt out of marketing — unsubscribe from marketing email using the link in any message we send.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding, and some rights may be subject to exceptions under applicable law.

The Sites and Services are not directed to, and are not intended for use by, individuals under the age of 16. To use the Sites or Services, you must be old enough to consent to the processing of your information in your jurisdiction. We do not knowingly collect personal information from anyone under 16; if we learn that we have, we will take steps to delete it.

We may update this Notice from time to time to reflect changes to our practices, technology, legal requirements, or the Services. If we make material changes, we will update the effective date above and, where required, provide additional notice. We encourage you to review this page periodically.

If you have questions about this Notice, wish to exercise a privacy right, or want to raise a concern about our practices, reach out and we will respond as promptly as we can.