Privacy Policy

1. Scope and responsibility

This policy applies to personal data handled by Exece through the Exece website, platform accounts, sales and support conversations, and related business services. It does not govern a third party's independent website or service. In some client engagements, we may process information solely on a client's instructions; the client then determines the purpose of that processing and its notice may also apply.

2. Data we collect

The information we handle depends on how you interact with Exece. It may include the following categories:

Identity and contact data

Name, work email, phone number, role, account identifiers, login method, and verification status.

Organization and project data

Company name, industry, team details, objectives, requirements, files, approvals, and other information supplied for an inquiry or engagement.

Account and service activity

Requests, selected services, account settings, consent records, transaction references, and actions taken within the platform.

Communications

Messages, support conversations, meeting notes, feedback, and records of email or SMS preferences.

Device and usage data

IP address, browser and device type, pages viewed, timestamps, referring pages, approximate region, logs, error diagnostics, and security events.

Preferences and choices

Language, communication preferences, cookie choices, marketing consent, and requests about your personal data.

3. Where data comes from

We receive data directly from you, from colleagues or organizations that authorize you to use an account, through your use of the website, and from service providers that support authentication, hosting, security, communications, and analytics. We may also receive professional contact details from public business sources or referral partners where permitted.

4. How we use data

• Create and administer accounts, assess inquiries, prepare proposals, deliver agreed services, and provide support.
• Authenticate users, prevent abuse, troubleshoot incidents, enforce our terms, and protect people, data, and systems.
• Send account verification, service, product, operational, and requested marketing communications through the selected channels.
• Measure website performance, understand service demand, maintain records, and improve our content, workflows, and offerings.
• Comply with applicable legal duties, respond to valid legal process, establish or defend claims, and support corporate transactions.

Where law requires a legal basis, processing may rely on performing a contract or taking requested pre-contract steps, our legitimate interests in operating and protecting a business platform, your consent, or compliance with legal obligations. The relevant basis depends on the purpose and local law.

5. OneHub and other service providers

We use vetted providers to operate technology and business functions. Depending on the final deployment, these may include hosting and content-delivery providers, communications tools, analytics and security services, professional advisers, and payment or project-management providers. They may access data only as needed for their role and subject to the applicable contract and law.

Exece uses OneHub backend infrastructure to support functions such as site context, content administration, account registration and authentication, and service requests. OneHub may process contact details, account records, submitted content, request metadata, and technical logs for these purposes as a service provider to Exece, subject to the final implementation and agreement.

When deployed through Cloudflare Workers, Cloudflare may process network, device, request, security, and cached-content data to deliver and protect the website. The production subprocessor list and configuration should be confirmed before launch and updated when material providers change.

6. When we disclose data

We may disclose personal data to authorized personnel, contracted service providers, professional advisers, and transaction counterparties under appropriate controls; to a client or organization that administers your business account; or to authorities and other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or respond to valid legal process. We do not treat a provider acting only on our instructions as an independent owner of your data.

7. International users and transfers

Exece may be accessed globally, and Exece, OneHub, or other providers may process data in countries other than where you live. Privacy protections can differ between countries. Where applicable law requires it, the responsible party should use an approved transfer mechanism or other appropriate safeguards. Contact us for information about safeguards relevant to a particular transfer.

8. Retention

We retain personal data only as long as reasonably needed for the purposes described here, including maintaining an account or engagement, meeting contractual and legal obligations, resolving disputes, preventing abuse, and preserving appropriate business records. Retention periods vary by data type and context. Data is then deleted, anonymized, or securely isolated unless continued retention is required or permitted.

9. Your choices and privacy rights

Depending on your location and the circumstances, you may have rights over personal data about you. We may need to verify your identity and authority before completing a request, and lawful exceptions may apply.

• Ask for access to, correction of, or a portable copy of certain personal data.
• Ask us to delete or restrict certain processing.
• Object to certain processing or opt out of eligible targeted or marketing uses.
• Withdraw consent for future processing where consent is the basis, without affecting earlier lawful processing.
• Contact us with a concern and, where available, raise it with the relevant privacy regulator.

10. Cookies and similar technologies

Exece may use cookies or local storage required for sessions, language preferences, security, and core functionality. Optional measurement or marketing technologies should be activated only in line with the production configuration and applicable consent requirements. Browser controls can limit some technologies, but doing so may affect account features.

11. Security

We use administrative, technical, and organizational measures designed to protect personal data in light of its sensitivity and the risks involved. No website or transmission method is completely secure. You should use unique credentials, protect verification messages, and notify us promptly about suspected account misuse.

12. Children's data

Exece is a business service and is not directed to children. Do not submit a child's personal data unless it is necessary for an authorized business service and the organization responsible for that data has a valid legal basis and appropriate notices or permissions. Contact us if you believe data was submitted inappropriately.

13. Policy updates

We may update this policy as our services, providers, and legal obligations change. We will post the revised date and provide additional notice when required or when changes materially affect how active-account data is handled. Earlier versions may be requested where available.