1. Purpose of this Policy

The purpose of this Privacy Policy is to inform Clients and Users of the Silex solution (hereinafter "the Solution") about how their personal data is collected, used, and protected, in accordance with the General Data Protection Regulation (GDPR) and applicable laws.

2. Data Controller

The data controller is: Silex SAS EPFL Innovation Bât C, EPFL Innovation Park, Building C, 1015 Lausanne [email protected]

3. Collected Data

As part of the use of the Solution, Silex may collect the following categories of data:

• Identification data: Last name, first name, email address, professional contact details.

• Connection data: Credentials, encrypted passwords, connection logs.

• Usage data: Interactions with the platform, preferences, request history.

• Contractual and billing data: Payment information, subscription history.

• Content submitted by Users: Documents, texts, or information processed via the Solution.

4. Purposes of Processing

The collected data is used to:

• Provide and improve the Solution;

• Manage Client accounts and subscriptions;

• Ensure security and traceability of access;

• Perform anonymized statistical analyses;

• Comply with legal and regulatory obligations.

5. Legal Basis for Processing

Data processing is based on:

• The execution of the contract concluded with the Client;

• Compliance with legal obligations;

• Silex’s legitimate interest in improving its services;

• The User’s explicit consent when required (e.g., marketing communications).

6. Data Retention

Data is kept only for the duration necessary for the intended purposes:

• Account data: For the duration of the subscription + 3 years maximum.

• Contractual and billing data: Legal retention period (10 years in France).

• Navigation data: 12 months maximum.

• Documents and content submitted by Users via the Solution are kept only for the time necessary for their processing, unless otherwise requested by the Client.

7. Data Sharing

Silex does not sell or rent personal data. They may be transmitted only to:

• Certified technical service providers and hosting providers, strictly necessary for the provision of the service;

• Competent authorities, in the event of a legal obligation. All data is hosted within the European Union or in countries recognized as adequate by the European Commission.

8. Security

Silex implements appropriate technical and organizational measures to protect data (encryption, access control, backups, traceability). Any personal data breach will be notified in accordance with the GDPR.

9. User Rights

In accordance with the GDPR, every User has the following rights:

• Right of access to their data;

• Right to rectification;

• Right to erasure ("right to be forgotten");

• Right to restriction of processing;

• Right to object;

• Right to portability. To exercise these rights, the User may contact Silex at the following address: [email protected]

10. Cookies and Trackers

The Solution may use cookies or similar technologies to improve user experience and perform audience measurement. The User can manage their preferences via their browser settings or the integrated cookie management tool.

11. Policy Changes

Silex reserves the right to modify this Privacy Policy at any time. Any substantial modification will be notified to Users.

12. Contact

For any questions regarding personal data protection, Users may write to: Data Protection Officer (DPO) – Silex [email protected]