Privacy Policy
Principles
Your privacy is very important to us. To protect your privacy, we at Baron Biosystems Ltd. (“Xert”) have a few guiding principles:
- We collect personal information to deliver the Xert data analytics solution services (“Services”) to you, and for the other purposes described in this policy.
- We share personal information only as described in this policy.
- We use safeguards appropriate to the sensitivity of the information we hold.
The following statement (the “Privacy Policy”) discloses the guidelines Xert has established for protecting the information you provide to Xert during your visit to the Xert websites, apps and related services (the “Site”). Please also read our Terms of Service which sets out the terms governing the Services.
The Site is owned, operated, and maintained by:
Baron Biosystems Ltd.57 Armadale Ave.
Toronto, Ontario, Canada
Support: support@xertonline.com
Privacy: privacy@xertonline.com
Your Consent
By using the Xert Services you are agreeing to the collection, use, and sharing of your information as described in this Policy. We will not use or share the information we receive, collect, or obtain regarding you other than as stated in this Policy. If you do not consent to the receipt, collection, use, and disclosure of your information as described in this Policy, you should not use the Site.
Collected Information
To use the core functionality of the Site you must first complete the registration form at the Site and agree to its Terms of Service. To register you will be required to provide your name and email address. You may also choose to provide profile information such as your country, birth year, gender and weight.
We also collect the information needed to provide the Services. This includes activity and sensor data that you upload or that is imported from services you connect (for example power, heart rate, heart rate variability, cadence, speed, and the location information contained in activity files), information about the devices you use, training results and settings derived from that data, messages and files you send through the Site, and device, browser and log information (see Cookies & Log Files below). If you record an activity with the Xert mobile app, the app records your device location in the activity file it creates; you can control location access in your device settings. Some of this information, such as heart rate and location, is sensitive. Xert uses it to provide the Services and for the other purposes described in this Privacy Policy, including internal research and improving the Services.
We send marketing email (such as newsletters and promotions) only if you have opted in, and you can unsubscribe at any time. We will still send you service messages such as receipts and notices about your account. If information is sent as part of an evaluation of the Service, Xert may also use it to contact you about your comments.
Xert will also collect your credit card or other payment information if you choose to become a Xert Subscriber. We use Industry compliant third-party payment services and we do not store your credit card information.
You may decide to send Xert personally identifying information in an email message which might contain information or inquiries about Xert’s products or services. Xert will use this information to identify you as a Xert Subscriber and to respond to your email. Xert will only use the information obtained to resolve the issue identified in the email.
Xert does not sell Subscribers’ email addresses, nor does it share, rent or sell information concerning Xert’s Subscribers or other users of its Site to third parties in ways other than disclosed in this privacy statement.
You can ask us for access to the personal information we hold about you and details of how we use it, and ask us to correct it, by contacting privacy@xertonline.com. We will respond within 30 days, subject to exceptions permitted by law.
If a breach of security safeguards involves your personal information, we will notify you and the relevant regulators as required by applicable law.
Third Parties
This Privacy Policy does not apply to Third-Party products or services or the practices of companies that we do not own or control, including other companies you might interact with as you use the Site. To deliver our Services to you, Xert collects information from devices and apps you connect to Xert. For example, you may connect your Xert account to Strava, Garmin, or another Third-Party, and information from these parties, devices and apps will be passed along to Xert. This information is collected by the Third-Party provider and is provided to Xert under their privacy policies. You can generally control the information that we receive from these sources using the privacy settings with your Third-Party.
Alternatively, you may choose to use third party apps, plug-ins, or websites that integrate with the Services (through Xert’s API’s for example), and they may receive your information and content, including your personal information and your activity data (including private activities). Information collected by these third parties is subject to their terms and policies. Xert is not responsible for the terms or policies of third parties.
We also use your information to analyze, develop and improve the Services. To do this, Xert may use third party analytics providers to gain insights into how our Services are used and to help us improve the Services.
Our servers are located in the United States and Canada, and backups are kept alongside them. We use service providers to help operate the Services, including payment processing (including Maxio and Stripe), email (including MailChimp), real-time messaging (Pusher) and analytics (Google Analytics). These providers may process information in the United States and other countries.
Other Users
If you have chosen to link your account with a coach, sponsored or squad account (“Other User”), we may provide your training data and other personal information to the Other User with whom your Account is linked. This Information may be used by the Other User for any purpose you have agreed upon with this Other User. It is your responsibility to have an agreement with your Other User regarding the Other User’s use of your Content and Information. Xert has no control over such uses and will not be liable to you for any disclosure of your Content or Information by the Other User.
Cookies & Log Files
When you visit the Site, cookies are stored on your device. We use cookies to keep you signed in (a session cookie and, if you choose “remember me”, a longer-lasting cookie) and, through Google Analytics, to understand how the Site is used, such as the pages visited and the device and browser used. On the sign-in and sign-up pages we use only the cookies needed to keep you signed in and protect against abuse, including Google reCAPTCHA. Our cookies do not contain your password. You can refuse or delete cookies in your browser settings, but some features of the Site may not work without them.
Like most standard Web site servers the Site uses log files. This includes internet protocol (IP) addresses, browser type, device type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks to analyze trends, administer the Site, track user’s movement in the aggregate, and gather broad demographic information for aggregate use. We may also use this information, including IP addresses, to administer the Site, diagnose problems and help prevent abuse, and we treat it as personal information where it can be linked to you.
Deleting Your Account
You can deactivate your account in Account Settings. To change or request deletion of your personal information, contact privacy@xertonline.com. See Retention of Information below for what happens to your data afterwards.
How Xert Uses Your Information
Xert uses the information we collect and receive to administer and operate the Services and as otherwise described in this Privacy Policy. For example, we use your data to provide you with analysis of data points like power, and may enable you to share representations of your data, like Breakthroughs, with others through Third-Parties.
Xert may de-identify or aggregate the content you make available in connection with the Services, in ways that do not personally identify you. Examples of such aggregated information or statistical data include information about power and heart rate during activities and workouts. Xert may use or share this information with third parties for research, business or other purposes to improve scientific understanding of performance.
How We Protect Information
We use safeguards appropriate to the sensitivity of the information we hold, including encrypting information in transit using HTTPS (TLS) and not storing your credit card information. No system is 100% secure, and we cannot guarantee that information will never be accessed, lost or disclosed without authorization.
Retention of Information
We retain information as long as it is necessary to provide the Services to you and others, subject to any legal obligations to further retain such information.Information associated with your account will generally be kept until it is no longer necessary to provide the Services or until you ask us to delete it or your account is deleted whichever comes first.
When you deactivate your account, or Xert terminates it (including for inactivity or non-payment as described in the Terms of Service), we remove your activities and training data (including profiles, training plans, history and reports), disconnect your connected services and cancel any paid subscription. This is processed in the background and may take up to 30 days to complete. If the Terms of Service give you a limited period to ask for a copy of your Content, that period runs from the date of termination. Once it ends we do not retrieve or restore the Content, and deletion completes within the 30 days. Backups are overwritten on a 7-day rotation, so copies of deleted data may remain in backups for up to 7 days after deletion.
After deactivation we keep a disabled account record (your name, email address and billing history) so that you can reactivate your account and so that we can meet legal, security and accounting needs. To have this remaining personal information deleted, contact privacy@xertonline.com; we will delete it within 30 days, subject to the exceptions in this section. Additionally, we may retain information from deleted accounts to comply with the law, prevent fraud, collect fees, resolve disputes, troubleshoot problems, assist with investigations, enforce the Terms of Service and take other actions permitted by law. The information we retain will be handled in accordance with this Privacy Policy.
Privacy Policy Information
Xert reserves the right to modify this Privacy Policy at any time. Please review it occasionally. If Xert makes changes to this Privacy Policy, the updated Privacy Policy will be posted on the Services in a timely manner and, if we make material changes, we will provide a prominent notice. If you object to any of the changes to this Privacy Policy, you should stop using the Services and delete your account.