Privacy notice
What personal data Eximcast keeps, why, where it is kept, who else handles it, and your rights. In plain words; if anything is unclear, write to us.
Who is responsible
Anticipai B.V. runs Eximcast and decides how the personal data in it is used. It is registered in the Netherlands (Chamber of Commerce number 93732783, VAT number NL866508065B01). Write to support@eximcast.com about anything on this page.
What we keep
Your account: your name, email address, language, and your password as a one-way hash (never the password itself).
Your sessions: when each started and was last used, so that it can end.
What your company uploads: declarations, bills of materials, quotes, contracts, rates and settings. These can include the names of suppliers, buyers and colleagues.
Billing: your company's plan, its status and its invoices. Card details are entered with Stripe and stay with Stripe; they never reach us.
The emails we send: the address, the subject and whether it was sent.
Server logs: the addresses and requests the app receives, needed to run and secure the service.
Visits to this website: counted from our server's own log as daily totals per page, referring site and link tag. The visitor's address is removed before the log is written. The website sets no cookies and uses no trackers.
The request-access form: what you write in it (company, name, work email, what you trade, where you clear customs, and how you heard about us if you say), and the link tag or the site you came from.
The sales team's records of the companies and people we talk to: business contact details (name, role, work email, phone), notes of our calls, meetings and emails, and which of our emails were sent.
Why
To provide Eximcast to your company, keep it secure, bill for it, and send the emails your company asked for (a company's owner can change or stop the daily briefing under Company, Notifications).
To answer a request for access, and to stay in touch with companies that may use Eximcast.
Providing the service and billing for it rest on our contract with your company.
Keeping the service secure and our sales contact with businesses rest on our legitimate interest, which you can object to at any time.
Invoices rest on the law.
Our sales emails
Our sales team writes to business addresses, one email at a time, in its own name. Every such email has a link to stop them, in one click. After that we send no more sales emails to that address; we keep the note that you asked us to stop, so that it stays stopped.
Where it is kept
In the EU, on Amazon Web Services servers in Germany. The nightly backups are kept in the same region for 30 days.
Who else handles it for us
Amazon Web Services: hosting, backups and email.
OpenAI: Eximcast sends the official documents it reads (public publications) to OpenAI's models to sort and read them. Two things from your company can go with them. To write the short explanation on an action card, the change and the options Eximcast ranked for your company are sent, without your company's figures. And when a forwarder's quote you upload has no table Eximcast can read, the quote's text is sent so the model can point to its rates.
Stripe: payments. Card details go to Stripe directly.
Resend: our email, the app's messages and the sales team's emails, sent from the EU.
Microsoft: our support mailbox, when you write to us.
Some of these companies are based outside the EU. Where personal data leaves the EU, the transfer rests on the provider's EU safeguards: standard contractual clauses or the EU–US Data Privacy Framework.
We do not sell personal data and do not use it for advertising.
How long
Account and company data for as long as your company uses Eximcast. When it stops and asks us to, we delete its data within 30 days, and the data leaves the backups within 30 days after that.
Invoices and payment records are kept for seven years, as Dutch tax law requires, even after the rest is deleted.
Server logs are overwritten as they grow. The visit counts hold no personal data. The sales team's records are kept while we are in touch, and deleted when you ask. The official documents are kept as the evidence behind the figures; they are public.
Your rights
You can ask to see your personal data, correct it, delete it, object to how it is used, or take a copy: write to support@eximcast.com. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.