Privacy Policy

1. Introduction

xfonte (“we”, “us”, “our”) operates the website xfonte.com and related services. We are committed to protecting your privacy and handling your personal data in a transparent and responsible manner.

This Privacy Policy explains what data we collect, how we use it, and your rights in relation to your personal data.

2. Information we collect

We may collect and process the following types of information:

a) Information you provide directly

• Name
• Email address
• Organisation name and role (if provided)
• Messages sent via contact forms or email
• Account information (if you register)

b) Information collected automatically

When you use our website, we may automatically collect:

• IP address
• Browser type and device information
• Pages visited and time spent on site
• Referring website
• Approximate location (derived from IP)

c) Analytics, cookies and tracking

We use PostHog Cloud EU (PostHog, Inc., hosted in the European Union) as our analytics processor to understand how the website is used. Our analytics are cookieless: no cookies or persistent identifiers are set for tracking, no advertising or cross-site tracking takes place, visitor profiles are not built, sessions are not recorded, and IP addresses are not stored with analytics data. We record page views (including the referring website and campaign parameters) and anonymous usage events, and this information is discarded from your browser’s memory when you leave the page.

You can opt out of analytics entirely:

…

Your choice is stored locally in your browser (that stored preference is the only thing we ever write to your device) and applies to this site on this browser.

If you create an account on the xfonte Reader and sign in, activity recorded anonymously in that same browser session before signing in is linked to your account.

3. How we use your information

We use your data to:

• Provide and maintain our services
• Respond to enquiries and communicate with you
• Improve and optimise the platform
• Analyse usage and performance
• Ensure security and prevent misuse
• Comply with legal obligations

We do not sell your personal data.

4. Legal basis for processing (GDPR)

Where applicable, we process your data under the following legal bases:

• Consent (e.g. marketing communications)
• Contractual necessity (e.g. providing services you request)
• Legitimate interests (e.g. improving our platform, ensuring security)
• Legal obligations

5. Data sharing and disclosure

We may share your data with trusted third parties, including:

• Cloud hosting and infrastructure providers
• Analytics: PostHog Cloud EU (PostHog, Inc., data hosted in the European Union)
• Email and communication tools
• Security and monitoring services

All third parties are required to handle your data securely and in accordance with applicable data protection laws.

We may also disclose data if required by law or to protect our legal rights.

6. International data transfers

Your data may be stored or processed outside your country of residence, including outside Switzerland and the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections. Analytics data is processed exclusively on PostHog’s servers in the European Union.

7. Data retention

We retain personal data only for as long as necessary to:

• Fulfil the purposes outlined in this policy
• Comply with legal, regulatory, or reporting obligations

When data is no longer required, it is securely deleted or anonymised.

8. Your rights

Depending on your location, you may have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at: hello@xfonte.com

9. Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

However, no system can be guaranteed as 100% secure.

10. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites.

11. Children’s privacy

Our services are not directed at children under 16, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Effective date”.

13. Contact

If you have any questions about this Privacy Policy or your data, please contact: